summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2005-06-07Set the reject and blackhole flags for kernel routes too. This makes theClaudio Jeker
bgpctl show fib output more logical, especially for INET6 because many prfixes have the reject flag set. OK henning@
2005-06-07Fix the mask2prefixlen6() function once and for all. Netmasks are stored inClaudio Jeker
an own AF independent radix tree. So the passed sockaddrs are often smaller than the actual AF specific struct, especially sockaddr_in6. So the crap Henning saw in the mask was acctually the next struct sockaddr that was passed in the routing message. So pass the struct sockaddr_in6 and compare only the specified number of bytes (minus the offset of sin6_addr in the struct sockaddr_in6). Amazing!.. OK henning@
2005-06-07For show rib -- show_rib_summary_msg() and print_prefix() -- use log_addr()Claudio Jeker
to print prefixes and nexthops and suddenly we can print IPv6 addresses that are stored in the RIB. Makes the code even simpler. OK henning@
2005-06-07In case strlcpy() indicates that a string was truncated fail with errx().Claudio Jeker
No need for other strange constructs. OK henning@
2005-06-07strlcpy cleanup; cloder okTheo de Raadt
2005-06-07add OpenBSD cvs tags, prompted by xsa@Camiel Dobbelaar
2005-06-07Don't restrict what login name may be removed, the account mayTodd C. Miller
have been made with a tool other than adduser and thus may use characters adduser considers illegal. OK henning@ and krw@
2005-06-07Introduce verbose option to control the logging of the pf rules.Camiel Dobbelaar
ok beck mpf
2005-06-06memory leak on SIGHUP for memory buffer logs, based on fix by Stephen Marley;Damien Miller
ok avsm@
2005-06-06fix fd leak on SIGHUP after config change, spotted by Stephen Marley; ok avsm@Damien Miller
2005-06-06add ike encap types UDP_ENCAP_TUNNEL and UDP_ENCAP_TRANSPORTHans-Joerg Hoexer
2005-06-06allow show fib to be limited to inet or inet6 families, claudio okHenning Brauer
2005-06-06add support for a "family" token, allows to select address familiesHenning Brauer
2005-06-06let "show fib" print out both the v4 and the v6 routes.Henning Brauer
2005-06-05on CTL_KROUTE requests, send back both v4 and v6 routesHenning Brauer
2005-06-05work around another disgusting ugliness in v6: the netmasks we get onHenning Brauer
the routing socket have crap in the lower bytes, so instead of using a straightforward and rather simple algorithm to convert them to prefix lengths we have to do quite some ugly manual fiddling... disgusting.
2005-06-05make log_in6addr actually work correctly - it is astounding how ugly thingsHenning Brauer
are in the v6 world. the lower 16 bits of the scope ID are embedded in byte 3 and 4 of the address for link-local addresses... sometimes, at least. these btes have to be 0 by definition, so we need to fiddle the scope ID out and reset those bytes to 0. embedding the scopeID like that is the most disgusting hack I have seen in a while.
2005-06-05provide cleartext messages for the cease suberror codesHenning Brauer
2005-06-05print the error for the last notification sent when we're IDLE in theHenning Brauer
neighbor detail display
2005-06-05grr, more whitespace KNF, more carrot for claudioHenning Brauer
2005-06-04do not print the tcp connection details when the session is IDLE, weHenning Brauer
have no connection in that case
2005-06-04when the max-prefix limit was exceeded generate a STOP event; we do notHenning Brauer
want the session to be restarted automagically in that case.
2005-06-04call the FSM with a CON_FATAL event after sending notifications in the casesHenning Brauer
where it was missing so that we actually close the connection
2005-06-04do not send out suberrorcodes for cease errors; there are none in theHenning Brauer
standard
2005-06-04use the recorded error code to prevent sending out multiple notificationsHenning Brauer
2005-06-04when sending out a notification record the error code and suberror code inHenning Brauer
the peer stats struct, and clear them as soon as the session leaves IDLE
2005-06-04be more clear about route-ageHenning Brauer
2005-06-04relay IMSG_CTL_KROUTE6 as well, from somewhere in BC on the drive to vancouverHenning Brauer
2005-06-04Clean up gcc-isms. OK tholoChad Loder
2005-06-03cleanupTheo de Raadt
2005-06-03various tweaks;Jason McIntyre
ok tholo@
2005-06-03Don't use __LINE__ to prevent binary changing when nothing reallyAlexander Yurchenko
changes. ok tholo@
2005-06-03i386 and amd64 onlyTheo de Raadt
2005-06-03not like this yet, it is uglyTheo de Raadt
2005-06-03print negative values correctly; From: serge rasnikov <747500@gmail.com>Henning Brauer
2005-06-02Start on a basic ACPI framework -- does not do much more than read out theThorsten Lockert
ACPI tables into kernel memory and attach ACPI and HPET timers currently. In order to test this code, enabling the devices in GENERIC as well as the ACPI_ENABLE option is needed. This code does not do any thermal control yet, so this should be done with care depending on the platform. In the tree so more people can contribute to making this more fully featured. Ok niklas@ grange@ tedu@
2005-06-02Use the correct pointer when printing out the error message. OK henningChad Loder
2005-06-02Cleanup recent kroute6 additions. OK henningChad Loder
2005-06-02fix some displays;Jason McIntyre
2005-06-02remove references to telnetd(8);Jason McIntyre
ok deraadt@
2005-05-31add -nv to SYNOPSIS;Jason McIntyre
2005-05-31tweaks;Jason McIntyre
2005-05-31minor tweaks;Jason McIntyre
2005-05-30Don't call va_start() when we do not log. From Andrey Matveev.Camiel Dobbelaar
2005-05-28Fix confusing typo.Esben Norby
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
failover gateways. ok mcbride@, "looks good" hshoexer@
2005-05-28support decapsulation of 802.11 data framesReyk Floeter
ok canacar@
2005-05-28Add sasyncd. deraadt@ okHakan Olsson
2005-05-28result not used; ok hoTheo de Raadt
2005-05-28Optionally prevent syncing failover node-node SA/SPD info (master side).Hakan Olsson