Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-09-26 | Simplify and make ISO chksum work on big endian machines. | Esben Norby | |
Found by me and corrected by claudio@ during the r2k6. ok claudio@ | |||
2006-09-26 | escape error response to unsupported Expect: header, fixes | Damien Miller | |
CVE-2006-3918; ok cloder@ | |||
2006-09-25 | Use S_IS* macros insted of masking with S_IF* flags. The latter may | Otto Moerbeek | |
have multiple bits set, which leads to surprising results. Spotted by from Paul Stoeber, more to come. ok jaredy@ | |||
2006-09-21 | more lfs removal; ok pedro | Jason McIntyre | |
2006-09-20 | Remove bad144, okay deraadt@ miod@ | Pedro Martelletto | |
2006-09-20 | Make vnd(4) work on read-only file systems, from Paul Stoeber, okay tedu@ | Pedro Martelletto | |
2006-09-19 | enable ESP and AH dissectors over IPv6; ok mpf@ (at k2k6) | Christian Weisgerber | |
2006-09-19 | make buffer_grow always return a valid struct buf; the contained buffer | Henning Brauer | |
might be NULL on realloc failure tho. all users check buffer size before using the buffer, so this is not a problem. makes error handling much easier. ease the capabilities code big time. claudio ok | |||
2006-09-19 | when the neighbor announced the restart capability, send the end-of-rib | Henning Brauer | |
marker after a bulk transfer, claudio ok | |||
2006-09-19 | save the parser state in one big struct, and make it interchangable, aka | Henning Brauer | |
make the parser restartable. with that implement "include" file support. makes life a _lot_ easier with filter generation tools. claudio ok | |||
2006-09-19 | kill useless debug code that somehow snuck in, some 2 years ago... | Henning Brauer | |
2006-09-17 | check that stdio file descriptors are actually closed before clobbering | Damien Miller | |
them, following an identical change in openssh | |||
2006-09-17 | Make rdate ignore ntp responses with ALARM status. | Chris Kuethe | |
"yeah..." henning@ | |||
2006-09-16 | fix error message parsing, okay deraadt@ | Marc Espie | |
2006-09-16 | Only interpret link state routing messages for the monitored carp interface. | Marco Pfatschbacher | |
memcpy the if_msghdr to avoid alignment problems. OK hshoexer@, miod@, deraadt@ | |||
2006-09-16 | sync printing w/ sysctl and also add missing sensor types to the conf ↵ | Michael Shalayeff | |
parser; deraadt@ ok | |||
2006-09-12 | for apps which use interface groups, point to the section of | Jason McIntyre | |
ifconfig(8) where they are explained; ok mcbride mpf henning | |||
2006-09-05 | security update to BIND 9.3.2-P1. ok miod@ and deraadt@ | Jakob Schlyter | |
2006-09-04 | somehow i managed not to commit the macro changes here... | Jason McIntyre | |
2006-09-01 | Teach sasyncd to set isakmpd into active or passive mode, according | Marco Pfatschbacher | |
to our current carp state. Based on a diff by ho@. OK ho@, hshoexer@, deraadt@ | |||
2006-08-31 | knock out the cpp/,4 stuff here too; from henning (thanks) | Jason McIntyre | |
2006-08-31 | knock out the cpp/m4 stuff from MACROS; after discussion with many... | Jason McIntyre | |
2006-08-31 | Add more SADB types to the filter: ACQUIRE, X_ASKPOLICY, REGISTER. | Marco Pfatschbacher | |
While there put the message sieve into the more appropriate filter function. Pointed out by markus. OK ho@, markus@, hshoexer@, deraadt@ | |||
2006-08-31 | Only chroot the unprivileged part of sasyncd(8). | Marco Pfatschbacher | |
OK deraadt@ mcbride@ hshoexer@ | |||
2006-08-30 | need to retry writing to pfkey socket on EAGAIN, ok theo | Henning Brauer | |
2006-08-30 | writing to the pfkey socket can give EAGAIN and we must retry. | Henning Brauer | |
ok claudio hshoexer deraadt | |||
2006-08-30 | U[Ss]tar -> ustar, as per posix and our pax docs; | Jason McIntyre | |
from ross l richardson (pr #5216) | |||
2006-08-30 | document that ftp-proxy cannot function at a raised securelevel | Camiel Dobbelaar | |
ok jmc marco | |||
2006-08-30 | Remove useless logging, the logged event happens all the time, no need to | Esben Norby | |
spam the logs. ok claudio@ deraadt@ | |||
2006-08-29 | avoid ending mid-sentence w/ `.', or we get an extra space; | Jason McIntyre | |
2006-08-28 | use Forwarding Information Base vs. Forward Information Base; | Kevin Steves | |
ok jmc@ claudio@ | |||
2006-08-28 | .Xr sysctl 8; wording from jmc@ | Kevin Steves | |
2006-08-28 | tiny grammar fix; ok jmc@ | Kevin Steves | |
2006-08-28 | indicate when the peer announced the Graceful Restart capability, ok claudio | Henning Brauer | |
2006-08-27 | Change ``etc'' to ``/etc'' for consistency with the rest of th epage. | Ray Lai | |
OK jmc@. | |||
2006-08-27 | in the restart capability (that we do not actually send yet), set the | Henning Brauer | |
MSB in the first byte, not the LSB to indicate the peer must not wait before sending us updates | |||
2006-08-27 | fix a small logic botch in session_accept() in the fast reconnect logic, | Henning Brauer | |
to check wether a session was put in IDLE manually by the operator or by bgpd itself as result of a fatal session error we were looking at the wrong timer, claudio ok | |||
2006-08-27 | add code to announce the restart capability according to | Henning Brauer | |
draft-ietf-idr-restart. Do not announce actual restart capabilities, so that this only serves as indicator that we are capable of sending and receiving the End-of-RIB marker. leave disabled for now, since the code to actually send the EoR-marker is currently ifdef'd out (to be fixed soon) and we wanna play safe for 4.0. and juniper doesn't support that capability (which is not a problem per se) and at the same time has its capability negotiation code completely fucked up, if a capability is rejected they don't indicate WHICH capability they reject (which makes that a problem, tho still a small one and we cope). claudio ok | |||
2006-08-27 | missing htons() in session_rrefresh() | Henning Brauer | |
no surprise sending route refresh requests didn't work on my i386 routers, i think I originally hacked & tested this on sparc64 | |||
2006-08-27 | change how we advertise capabilities. | Henning Brauer | |
we used to put all capability attributes into one optional attribute. this is legal. I recentlu observed that basically all other implementations use one optional attribute per capability attribute. this difference might explain why we - in some cases - saw "unsupoorted capabiliy" notifications from neighbors without the capability in question in the data part. of course that makes capability negotiation a little hard... so switch us to use one optional attribute per capability as well, and ease the code a bit while there, claudio ok | |||
2006-08-27 | add buf_grow() to grow an existing buffer (realloc), claudio ok | Henning Brauer | |
2006-08-25 | add PackingOld when replacing, helps people with really old installs... | Marc Espie | |
2006-08-24 | recognize xauth vendor payload | Hans-Joerg Hoexer | |
ok ho markus | |||
2006-08-24 | 0x00000c05 type specifies an Ethernet frame. Print the src MAC | Kevin Steves | |
with -v or the frame in hex with -vv. | |||
2006-08-23 | wording; | Jason McIntyre | |
2006-08-23 | esm(4) also gives status (sometimes ;) | Michael Shalayeff | |
2006-08-23 | allow monitoring sensors with their own status reporting such as ipmi or ↵ | Michael Shalayeff | |
raid controllers; marco@ ok | |||
2006-08-23 | Add a comment about the empty imsg_event_add() function to make it clear | Claudio Jeker | |
why it is needed. | |||
2006-08-23 | Extend show rib command. Following new options are added: | Claudio Jeker | |
in: show the unfiltered input of a neighbor aka adj-rib-in out: show only the prefixes that are sent to a specified neighbor (adj-rib-out) neighbor <IP>: limit the output of the command to prefixes sent by the specified neighbor OK henning@ manpage with help by jmc@ but the show rib section needs some rework because it starts to be confusing. Actually the parser needs to get smarter. | |||
2006-08-23 | Extend show rib interface code so that it is possible to show the adj-rib-in | Claudio Jeker | |
and adj-rib-out. Additionally it is now possible to limit the output to a specified peer. OK henning@ |