summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2017-08-12allow filter rules to be written that affect ibgp or ebgp neighborsPeter Hessler
discussed with henning@ OK claudio@, benno@, job@
2017-08-12Make not yet implemented pledges more visible in grep output.Florian Obser
input benno, deraadt, tedu also standardize on #if 0 since it makes tedu's editor vomit. OK benno, pirofti on a previous version
2017-08-12bring ospf6d's log.c in sync with ospfd and bgpdSebastian Benoit
ok florian@ claudio@
2017-08-12update to unbound 1.6.4, ok florian@Stuart Henderson
2017-08-12add a new option to set limits on max-sessions each IPCP.Kazuya Goda
It can set limits on different max-sessions if there're using several protocols such as PPPoE and L2TP/IPsec. ok yasuoka@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2017-08-12No need to constantly re-open a socket. Just open it up front and keepFlorian Obser
it around. OK jca
2017-08-12Initial pledge for snmpd. snmpe remains unpledged. Regression tests pass.rob
Ok benno@, jca@.
2017-08-12stop pretending that qnames are always strings. treat everything as aTed Unangst
dname always.
2017-08-11punctuation;Jason McIntyre
2017-08-11zero out sockaddr_in before use; fixes use of stack garbage as port numberChristian Weisgerber
in "query from"; ok phessler@ job@
2017-08-11Convert httpd to tls_config_set_ecdhecurves(), allowing a list of curvesJoel Sing
to be specified, rather than a single curve. ok beck@
2017-08-11add a new option to set limits on user-max-sessions each AUTHENTICATION.Kazuya Goda
It can set limits on different user-max-sessions if there're using several protocols such as PPPoE and L2TP/IPsec. ok yasuoka@
2017-08-11Use vmd's process rdomain via getrtable() instead of 0 by default.Reyk Floeter
This allows to run "route -T 1 exec vmd" to get rdomain 1 tap(4) and bridge interfaces by default. ok mlarkin@
2017-08-11display MRU each sessions in npppctl session commandKazuya Goda
ok yasuoka@
2017-08-11softreconfig in and out are on by default for ever and machines now haveClaudio Jeker
enough memory that it does not make sense to provide these knobs anymore. They just make the code more complex for no much gain. OK phessler@, benno@
2017-08-11missed in previousFlorian Obser
2017-08-11regenFlorian Obser
2017-08-11update to 4.1.17Florian Obser
OK sthen
2017-08-10naddy@ reported confusion on why "query from" seemed to be ignored injob
some cases. OK naddy@ henning@
2017-08-10don't have cu try to open '/dev', instead check if there's a valid ttyJasper Lievisse Adriaanse
associated with the vm upfront as discussed with and ok mlarkin@ pd@
2017-08-10No need to handle multiple routing messages here.Jeremie Courreges-Anglas
route(4) sockets only ever ship a single routing message per read(2) call, so simplify this. Mostly mechanical diff for now, some further cleanups will follow. ok rob@ florian@
2017-08-10vmd: partially back out a change committed yesterday regarding guestMike Larkin
changing IRQs. After discussing with kettenis, that wasn't the right way to do things, and this diff fixes that. ok kettenis
2017-08-10whitespaceMike Larkin
2017-08-10Pledge snmpctl. Ok jca@, tb@rob
2017-08-10Fix a comment and line length. Noted by Dennis fondras.Sebastian Benoit
ok benno@
2017-08-10replace memcpy() with assignements where the type is the same.Sebastian Benoit
noticed by deraadt@, ok claudio@
2017-08-10handle extended communities in bgpctl.Sebastian Benoit
From Dennis Fondras, thanks! ok phessler@
2017-08-09vmd: allow guest PCI interrupt line reassignment.Mike Larkin
I also added a couple config space register names to pcireg.h to try and reduce the use of magic numbers in vmd/pci.c ok pd@
2017-08-09Use X509_pubkey_digest() like libtls to hash the keys for the TLS privsepClaudio Jeker
code. This fixes interception mode (since there we rewrite the CERT which would alter the hash of the cert but the keys still remain the same). OK bluhm@ and jsing@
2017-08-09Call tls_config_skip_private_key_check() to disable the key checking inClaudio Jeker
the inspect case (same is done in the regular server mode). OK bluhm@ and jsing@
2017-08-09the recent adjustment of -i means usage() fits nicely onJason McIntyre
two lines now, instead of three;
2017-08-09Remove knob and always do neighbor unreachable detection.Florian Obser
2017-08-09accept_rtadv doesn't do anything since some time.Florian Obser
OK mpi
2017-08-09add mail.mda MDA in charge of running a third-party MDA, not linked yetGilles Chehade
2017-08-09at the exception of mail.local, smtpd never executes an MDA as root.Gilles Chehade
the check is performed daemon-side before even forking the child process, but let's also check euid in the mda we ship in case someone executes them by hand and needs to see an explicit error message.
2017-08-08Kernel sendsyslog(2), libc syslog(3), and syslogd(8) restrict andAlexander Bluhm
truncate the length of a syslog message to 8192 bytes. Use one global define LOG_MAXLINE for all of them. OK deraadt@ millert@
2017-08-08Use configtest as one word like other network daemon man pages.rob
Ok benno@, jmc@
2017-08-08Consistent use of log.c, and removal of err.h include. Makes ifstatedrob
configtest output the same as other networking daemons. Ok jca@
2017-08-08Do not forget to reschedule the timer when we receive a new prefix.Jeremie Courreges-Anglas
This way the new prefix can be advertized asap. ok florian@
2017-08-06Improve error checking during processing of routing messages. Handling ofrob
RTM_DESYNC encouraged by deraadt. ok jca@ benno@
2017-08-06packet.c and parse.y no longer require err.h. ok jca@ florian@rob
2017-08-06Remove comma from last element since that is the terminator.Claudio Jeker
2017-08-06add a zeroed out element at the end of the iana_ext_comms array, soSebastian Benoit
that the iteration over it actually stops. ok and feedback from florian@ phessler@ and claudio@
2017-08-06a long time ago, we made a change to the format of envelopes and introducedGilles Chehade
a function to upgrade from v1 to v2 on the fly. this was meant to stay just for the transition in one release. 3 years and 8 months later, it's finally time we remove it ;-) ok eric@, sunil@
2017-08-05vmd: report queue size of 0 when invalid queues are requested by the guestMike Larkin
Diff supplied by Nick Owens, who was kind enough to also point out the virtio spec section numbers that defined this behaviour.
2017-08-04Only call find_pkg when we are using other options with -Q.Aaron Bieber
This resolves the speed issues Michael Reed <michael@michaelreed.io> reported that were introduced by my changes in 1.45. OK landry@
2017-08-04the PURGE_EVERYTHING flag used to purge config bits was inaccurateGilles Chehade
ok eric@
2017-08-04Adjust the html index-parsing regex to cope with anchor tags that aren'tStuart Henderson
just '<a href="foo">'; several mirrors now include a title attribute which pkg_add can't cope with. Diff from Taylor Stearns to handle attributes following the href; tweaked by me to also handle attribute before the href. ok zhuk@
2017-08-04Remove unused structs and defines, from Edgar Pettijohn. ok jca@rob