summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-04-01Track blackhole and reject flags since the MIB knows about them.Claudio Jeker
Remove an unneeded stack storage as well. OK jsg@
2010-04-01Minor cleanup figured out while syncing kroute with snmpd's.Claudio Jeker
OK dlg@
2010-04-01After syncing kroute with bgpd sync now against ospfd's so that this codeClaudio Jeker
uses only one rtm parser instead of three different ones. Fixes problems with priorities that were not handled everywhere correctly. Found by and OK jsg@
2010-03-31make ProxyPass exclude directives only exclude on match, instead of alwaysAlexander Hall
noted by Vasiliy Kiryanov, thanks! ok stephan@
2010-03-31network static and network connected have been superseded by network inetClaudio Jeker
static and network inet connected a long time ago. It is time to remove the old compat code.
2010-03-31Track interface addresses in a AF independent way. This is needed to supportClaudio Jeker
the AF independent MIBs like RFC4292 in the future. Additionally count number of routes (also needed by some MIBs) and do not track the state of routes since the MIB do not require it and it is expensive. OK jsg@
2010-03-30revert revision 1.53.Owain Ainsworth
Now the kernel does a proper vt switch for us this hack is no longer needed. ok miod@
2010-03-30After snprintf(3) call `dir' is no longer used so free it also on normalzinovik
code path. ok deraadt@
2010-03-30Hmpf, aid2af() leftover from the time I did the transition that should notClaudio Jeker
be there. network X set nexthop Y failed because of this.
2010-03-30Log non-informational messages at LOG_WARNING priority instead of LOG_INFO.Jacek Masiulaniec
OK millert@
2010-03-29Initialize 'flags' field of tree_cache stack variables to 0. Paranoia.Kenneth R Westerback
2010-03-29Always put server id in NAK's to requests. Some router/switchesKenneth R Westerback
need this, as reported in PR#6339. Fix tested by submitter, Marcel Widget, who also supplied the diff that I tweaked. ok beck@
2010-03-29Sync kroute.c code with bgpd so that snmpd is able to track INET6 addrs asClaudio Jeker
well. First big sync, the interface address tree still needs to be made AF independent but that will be done in a second step. OK jsg@
2010-03-29I'm going to need community_ext_conv() outside of rde_attr.c soon, so moveClaudio Jeker
the prototype to rde.h
2010-03-29Since we always reload the config now there is no need to allocate theClaudio Jeker
filter list head. It is only used temporary in reconfigure(). OK henning
2010-03-29We always allocate rib ids dynamicaly so there is no need for allowingClaudio Jeker
fixed id allocation. Makes code simpler. OK henning
2010-03-29Implement a log_rd() function to print the route destinguisher in a niceClaudio Jeker
way. Use it for now in log_addr() to show VPN routes with a prepended RD. OK henning
2010-03-27malloc/strlcpy -> strdup. Use consistent idiom.Kenneth R Westerback
ok (as part of larger diff) blambert@ kettenis@ stsp@ zinovik@
2010-03-26dispense with some wacky escape sequences;Jason McIntyre
2010-03-26Never call close(nbr->fd) when the neighbor session was fully established,Claudio Jeker
call session_close(nbr) instead since only that will do all needed cleanup. Still not prefect but at least the lde is no longer eating all CPU when a session times out. OK michele@
2010-03-26event_del() the read event when hitting a read error or when closing theClaudio Jeker
file descriptor. If not done, we will loop forever on this event. OK michele@
2010-03-26pt_add() is not allowed to fail, caller expects this behaviour.Claudio Jeker
2010-03-26Be more careful when walking the tree looking for a non-empty element,Claudio Jeker
we may actually hit the end of the tree (at least in theory).
2010-03-25Kroute updates from the LDE are per FEC so do the lookup in kroute withClaudio Jeker
prefix/len and nexthop but do not consider the priority. send_rtmsg() needs to use the kroute element and not the one sent from the LDE since that one has no priority set (which is needed). This seems to solve a problem where ldpd modified the wrong routes. OK michele
2010-03-24We need to set the rtm_priority when changing a route so that we do notClaudio Jeker
modify a possible better route instead. A bit more is still needed. OK michele@
2010-03-24DSR got broken with the move towards the new pf.Pierre-Yves Ritschard
This fixes it. Found out by Laurent Lavaud & myself. "looks olrite" henning@
2010-03-24options must be sorted.Joerg Goltermann
OK: henning@, claudio@
2010-03-23fix callback. This one isn't called that often actually.Marc Espie
noticed by ckuethe
2010-03-22Add missing text from license. Originally found in safte(4) in JulyPaul de Weerd
2005, this was copied around quite a bit. ok jmc@ deraadt@ dlg@ claudio@ grange@ marco@
2010-03-22clean up the ProgressMeter code, create a specific class if a TermMarc Espie
is around. start using stuff from termcap, specifically, cleareol, and move to hp. use the full line when we can, cram 100% if we can. (this should flicker much less on slow terminals). clean-up the install-and-progress bits to be in progressmeter, this removes some code. have pkg_create follow the same pattern as the others, with a state. This allows us to unify error messages a bit.
2010-03-22Do not leak file descriptor `fd' on error path; from zinovikTheo de Raadt
2010-03-20if a package already contains an url marker (say, local stuff recreated),Marc Espie
don't override it. so that it can actually be installed.
2010-03-20s/sh/ksh/Antoine Jacoutot
2010-03-08res.flags is not only used by the irrfilter so initializing them withClaudio Jeker
irrfilter flags is causing strange behaviour on other commands (like show fib). Set the IPV4 and IPV6 flags at the end unless one of them got already set. OK henning, sthen, deraadt
2010-03-07erase to the end of "previous line". Avoid dangling % after displaying 100%.Marc Espie
from sthen@.
2010-03-06ospfd/ospf6d man page cleanup:Stefan Sperling
Sync description of the OSPF protocol between ospfd(8) and ospf6d(8). Document current shortcomings -- in particular, document that ospf6d(8) needs manual IPsec setup for security. Clean up various grammatical errors, re-order and re-phrase things a bit to improve readability. Update RFC references. Remove IPv4-specific stuff from ospf6d.conf(5). OK jmc@ claudio@
2010-03-06match_locations doesn't work on invalid specs, so don't go thereMarc Espie
2010-03-06fix very stupid typoMarc Espie
2010-03-06don't go up to column 80, until we ask Term::Cap properly for what's goingMarc Espie
on.
2010-03-06consistent error. exit(1) if something bad happened.Marc Espie
(fixes some errors in ports)
2010-03-05Allow to filter for ext-community attributes. Currently only perfect matchesClaudio Jeker
work but that's already better then nothing. OK sthen@
2010-03-046Bone is dead. Use the literal '3ffe::/16' rather than '6bone testKenneth R Westerback
address range' when explaining the -L example.
2010-03-03Compare against correct flag when printing "network inet6 static"Claudio Jeker
2010-03-03Replace enum rib_state with enum reconf_action since their doing the same.Claudio Jeker
NEW is now REINIT, ACTIVE is KEEP and DELETE and NONE stay the same.
2010-03-03tweak mda.c rev. 1.36: eliminate risk of busy waiting for socketJacek Masiulaniec
to become writable, and make code more idiomatic. tested by nicm@ ok gilles@
2010-03-03tweak mda.c rev. 1.36: eliminate risk of busy waiting for socketJacek Masiulaniec
to become writable, and make code more idiomatic. tested by nicm@ ok gilles@
2010-03-03Must check for NO_LABEL here as well or we print strange label numbers.Claudio Jeker
OK michele@
2010-03-03Rework the kroute code by stealing some code from ospfd and massaging itClaudio Jeker
a lot more. Main reason for this is to add priority support. Additionally add some additional NO_LABEL fixes. OK michele@
2010-03-03Remove superfluous newlineClaudio Jeker
2010-03-01mda_event() assumed the mbox fp to be a file when it could be a pipe, doGilles Chehade
not fatal on read/write errors otherwise a broken pipe in an external mda will bring smtpd down. mda_store() assumed write would succeed and fatal otherwise, change code so that EINTR/EAGAIN trigger a new write while other errors gracefully return causing the message to be rescheduled later. these two prevent a fatal() from being hit when execution of a filter or external mda fails (bug experienced and fix verified by nicm@) while at it, fix a small bug where logs would not display the recipient when mail went through a ~/.forward / aliases expansion.