summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2018-04-18Remove RELAY_MAX_SESSIONS from relayd, there is no reason to limit relaysClaudio Jeker
to 1024 session per process (esp. with keep-alive). Now the fd limit is the new maximum and relayd will make sure to not accept too many sessions. The tcp backlog config maximum is now 512, adjust manpage accordingly. OK benno@ deraadt@
2018-04-17Drive i8253 with CLOCK_MONOTONIC.cheloha
Ensures that the olatch decrements uniformly, independent of system wall clock jumps. While here, roll the olatch computation in i8253_do_readback() into a loop, and leverage the timespec macros in sys/time.h. Both make the code a lot more readable. ok mlarkin@
2018-04-15Add TCP support to snmpd.Marco Pfatschbacher
This implements RFC 3430, with the exception of processing multiple incoming requests in parallel (Section 2.1). This required too much code and is optional anyway. Initial review by reyk@, very thorough reviews by jca@. Thanks! OK jca@, gerhard@
2018-04-14In case of a tcp read timeout, the destination host state needs to beSebastian Benoit
set to HOST_DOWN. Noticed and fixed by Rivo Nurges <Rivo DOT Nurges AT smit DOT ee> ok and reminder florian@
2018-04-13Close socket from vmm to parent after forking to vm process.Martijn van Duren
Ok ccardenas@
2018-04-11Make httpd listen on all IPv4 and IPv6 addresses forFlorian Obser
"listen on * port 80". While here accept up to 16 addresses from DNS or interface groups. requested by & "lovely" deraadt@ OK kn@
2018-04-10Schedule events against the monotonic clock.cheloha
So that events fire punctually, even if the system clock is changed. ok jca@
2018-04-10Fix previous. Use inet_net_pton(3) instead of inet_pton(3) asSunil Nimmagadda
addresses could be listed with prefix. Initial diff from Ryan Kavanagh, tweaked by me. Ok millert@ gilles@
2018-04-09Check for legitimate IPv4, IPv6 addrs before printing.Sunil Nimmagadda
Ryan Kavanagh reported on github that certain domains have misconfigured SPF records. https://github.com/OpenSMTPD/OpenSMTPD/issues/844 Ok millert@ gilles@
2018-04-09Do not discourage IPv6, it's working fine in LDOMs.kn
OK jca, stsp
2018-04-08We warned long enough, also sysmerge(8) should have handled theFlorian Obser
removal of the agreement url by now. OK benno
2018-04-08AF_LOCAL was a failed attempt (by POSIX?) to seem less UNIX-specific, butPhilip Guenther
AF_UNIX is both the historical _and_ standard name, so prefer and recommend it in the headers, manpages, and kernel. ok miller@ deraadt@ schwarze@
2018-04-08Print BARs for bridges as well.Mark Kettenis
ok deraadt@
2018-04-06After processing of a range request httpd would never close theFlorian Obser
connection and eventually stop answering queries because of file descriptor starvation. Problem reported by, minimal testcase provided and testing by trondd _AT_ kagu-tsuchi.com, thanks! Testing Nick Holland and millert OK deraadt
2018-04-03Fix crash in dig(1) +trace when falling back to TCP after a truncated replyJeremie Courreges-Anglas
Problem reported by jj@ on bugs@, fix based on https://gitlab.isc.org/isc-projects/bind9/commit/084ba95b083dc55fd10631ad43fa8fff48707648 (under ISC license) by Caspar Schutijser.
2018-04-03tweak vlan printing to properly decode the priority field.David Gwynne
the vlan specs have the priority of 0 and 1 swapped on the wire, which is how the kernel handles them. eg, if you use pf to set prio 1, it will end up being 0 on the wire. this makes 0 on the wire come out as 1 in tcpdump so it is consistent with the rest of the tooling. ok henning@
2018-04-02aspath_verify() can not call aspath_extract() since this function only worksClaudio Jeker
on 4-byte AS path. Since this function is also called with 2-byte ASPATH attributes. Instead inline the check using the as_size. Problem found by Tom Beard (tom at exilien.uk), thanks for the report OK job@
2018-03-31Fix description of -v and implement -v for -a showing holes; ok deraadt@Otto Moerbeek
2018-03-29Check the result of strdup not the argument for NULL to report mallocFlorian Obser
errors. Pointed out by benno
2018-03-29update to unbound 1.7.0Florian Obser
testing tb, sthen OK benno, sthen
2018-03-29Make sure that the global config is send out immediately when it isMartijn van Duren
loaded. This makes sure that the local prefix specied in the config is always used. OK ccardenas@
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2018-03-19two fixes from klemens nanni, plus one tweak from myself;Jason McIntyre
ok sthen
2018-03-16Consistently spell "IPsec" in comments and debug outputs.Martin Pieuchot
From Raf Czlonka, ok sthen@
2018-03-15writebufg() does two write(2) calls, both can return EPIPE, so handle it inOtto Moerbeek
both cases. Avoids race in the exit path. ok sthen@ florian@
2018-03-14bump minor version just to be sure it makes release :-)Gilles Chehade
ok gilles@
2018-03-14newaliases is so 70s, very tied to the 'db' table backend (which has notGilles Chehade
been the default for a long time now) but users still assume this is the way to update aliases within the MTA. when smtpctl is invoked as newaliases, have it notify the daemon that it has had the aliases table updated, no matter what backend it uses, as it will at worst be a noop and at best do what user expected. ok eric@
2018-03-14Message-Id header is not added if sent over submission port because theGilles Chehade
port is stored in the listener structure using the network order. ok eric@
2018-03-14skip spf mechanisms that have been processed already.Eric Faurot
prevent possible loops on badly configured spf records. ok gilles@
2018-03-14disable the session resumption warnings for releaseMarc Espie
2018-03-14letsencrypt responded with a 301 redirect when requesting the chainFlorian Obser
certificate for some time. While they stopped doing so it seems best to follow redirects anyway. More status codes pointed out by & OK sthen OK benno
2018-03-14block two VMs from using the same disk image file at the same time.Mike Larkin
Also changes an error message in vmctl to reflect same.
2018-03-14knfMike Larkin
2018-03-12correct flags example; from artturi almJason McIntyre
ok sthen knock out a dud Tn while here
2018-03-11Increase SO_RCVBUF of the ospf socket to 256k having this buffer can resultClaudio Jeker
in packet loss on busy and big networks and therefor to instability. From camield@
2018-03-11Increase SO_RCVBUF of the ospf socket to 256k having this buffer can resultClaudio Jeker
in packet loss on busy and big networks and therefor to instability. Also adjust the SO_SNDBUF to real 64k just for consistency. From camiel@
2018-03-10Allow fetching syspatches from ftp.Antoine Jacoutot
from Andrew Marks ok deraadt@
2018-03-07rfc4954 provides more than one method to submit the same credentials and inGilles Chehade
a recent cleanup we accidentally removed one of the ways breaking some .net lib apparently, sorry. this commit reintroduces the "pass password in the same line as username" method ok millert@
2018-03-07check for expected record typeOtto Moerbeek
ok deraadt@ mestre@ gilles@
2018-03-06update to NSD 4.1.20, ok florian@Stuart Henderson
- Fix memory leak in zone file read of unknown rr formatted RRs. - Fix memory leak when rehashing nsec3 after axfr or zonefile read, in the selectively allocated precompiled nsec3 hashes.
2018-03-06Initialize pushback_index like we do (mostly) everywhere else.rob
2013-02-18Update to NSD 3.2.15, ok brad@ phessler@ deraadt@ also tested by okan@Stuart Henderson
2018-03-06Mention that there is no macro expansion inside quotes.rob
ok jmc@
2018-03-04remove unnecessary headerGilles Chehade
2018-03-03Be specific on what is slowjob
OK espie@
2018-03-03Add missing comma.rob
2018-03-01consistently spell "IPsec"; from raf czlonkaJason McIntyre
note that this is only part of raf's original diff: the rest is for code. although i'm sure the diff itself is correct, i don;t judge myself qualified to decide whether those changes are warranted. still, i'd appreciate at least a reply to raf's diff from another developer (yay! nay!)
2018-02-28Better documentation of the classless-static-routes option.Matthieu Herrb
ok krw@, tweaks by jmc@
2018-02-28vmd: Fix 100% vmd cpu usage on linux receive / unpausepd
Use rtc_reschedule_per in mc146818_start instead of re arming the periodic interrupt without checking if it's enabled in REGB. reported by Dave Voutila ok phessler@
2018-02-27sanitize say/print output furtherMarc Espie
- have confirm go thru f() every time (adding confirm_defaults_to_no/confirm_defaults_to_yes apis... verbose but effective) - check DESCR in pkg_create, as suggested by sthen@ - don't do the whole safe dance when not needed (optimization) - misnamed allowed -> forbidden (schwarze@) This effectively prevents DESCR from using diacritics. Sorry! Ingo makes a compelling argument that using UTF8 while installing a new box is currently fairly dangerous, considering tty setups. This affects about 10 ports at the moment, all of which were fixed before this commit.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-01 00:27:48 +0000