summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2011-05-21regen with autoconf-2.59, automake-1.9Jakob Schlyter
2011-05-21remove annoying log_debug()Gilles Chehade
2011-05-21resolve conflicts and regen configure using autoconf-2.65Jakob Schlyter
2011-05-21NSD v3.2.8Jakob Schlyter
2011-05-21these log_debug()s should not have been committed :)Gilles Chehade
2011-05-21when a user add himself to his own ~/.forward, the delivery method was notGilles Chehade
reset by ruleset matching and since it was cleared upon entering lka_session_resolve_node(), it would trigger a fatal().
2011-05-21make the "no DH parameters" warning a log_info()Gilles Chehade
2011-05-21"for all" does not necessary apply to relay rules, so do not forget to lookGilles Chehade
for an alias map. fixes "accept from all for all alias myaliases deliver to mbox" and makes thib "super happy" ok thib@
2011-05-21add legacy support for old sha256 checksums in distinfos.Marc Espie
2011-05-20Concurrent calls of "relayctl show sessions" could crash relayd. FixReyk Floeter
the show sessions handler by implementing it in an asynchronous way. Closes PR 6509 ok pyr@
2011-05-19Fix some possible NULL pointer dereferences, and a little bit of cleanup.Peter Hessler
From Lawrence Teo (thanks!) OK krw@
2011-05-19Add a few missing checks of return values of memory allocations.Reyk Floeter
2011-05-19Fix reload support in relayd(8) by reimplementing large parts of theReyk Floeter
daemon infrastructure. The previous design made it fairly hard to reload the complex data structures, especially relays and protocols. One of the reasons was that the privsep'd relayd processes had two ways of getting their configuration: 1) from memory after forking from the parent process and 2) and (partially) via imsgs after reload. The new implementation first forks the privsep'd children before the parents loads the configuration and sends it via imsgs to them; so it is only like 2) before. It is based on an approach that I first implemented for iked(8) and I also fixed many bugs in the code. Thanks to many testers including dlg@ sthen@ phessler@ ok pyr@ dlg@ sthen@
2011-05-17introduce new user_backend API for smtpd to lookup the users it wants toGilles Chehade
deliver mail to. the only backend supported for now is USER_GETPWNAM and it is not yet possible to switch to an alternate backend. yes this means that we're very close from smtpd being able to handle fully virtual accounts for both incoming and outgoing messages.
2011-05-17smtpd now uses an auth_backend API to authenticate users that are allowedGilles Chehade
to send mail so they do not necessarily need a local system account. two backends are provided by default, bsd_auth(3) and getpwnam(3), however smtpd will only select bsd_auth(3) for the moment and not provide a way to chose any other backend (that's on purpose ;p). bye bye authenticate() !
2011-05-17somehow a previous sync with relayd missed one line...Gilles Chehade
if a ssl_connect() call needs to retry because of SSL_WANT_READ or SSL_WANT_WRITE, set the proper event flag instead of keeping the default one which is both read and write.
2011-05-16remove useless assignationGilles Chehade
2011-05-16when a C_VDOM recipient expands to a local user, envelope expansion willGilles Chehade
reprocess the envelope. since the original condition we matched is still C_VDOM, it triggers an expansion loop causing recipient to be rejected. this *should* fix the issue experienced by armani@, it does on my laptop.
2011-05-16plug leak in make_aliases()Jasper Lievisse Adriaanse
with/ok gilles@
2011-05-16murder struct path and make sure smtpd uses simpler structures that do notGilles Chehade
bring a shitload of unnecessary information everywhere. this required many parts of smtpd to be refactored and more specifically envelope expansion. in the process lots of code got simplified, and the envelope expansion code has been isolated to lka_session.c with some longstanding bugs fixed. Diff has been tested by many with no major regression reported. armani@ spotted a bug in a setup where a domain is listed a both primary and virtual, I will fix that in-tree as it's becoming painful to maintain this diff out.
2011-05-16tweak previous;Jason McIntyre
2011-05-16Print IPv6 addresses in hex, not decimal; from Tim van der MolenBret Lambert
committing on behalf of gilles@
2011-05-15disable pipex for L2TP on disconnect, too; yasuoka@ agrees.Markus Friedl
2011-05-14more clang warnings fixedGilles Chehade
2011-05-14char -> u_charGilles Chehade
2011-05-14int * -> socklen_t * in getsockopt() callGilles Chehade
2011-05-12Make it clear that ftp-proxy needs to make outbound connections.Ryan Thomas McBride
ok claudio
2011-05-12remove sneaky little ;lum
2011-05-12Add quotations around the value of name=value pairs that are missing them.lum
This removes a couple of "use warnings;" error messages. Whether ' or " is used should mean string is taken literally once parsed. ok halex@
2011-05-12Preferably we would have "use warnings;" but never-the-less a small booboolum
by me. Fortunatley no side-effects.
2011-05-11Tidy how adduser handles email messages.lum
Suggestion to use install routine (additional user code) as reference for an answer of "yes" from krw@ (and william@), Suggestion for regexs and "reads good" from simon@
2011-05-11Tweak previous from jmc@lum
2011-05-10fix an off-by-one that made smtpd skip an "invalid" bucket that wasGilles Chehade
actually valid. bugfix tested by todd@
2011-05-10Update EXAMPLES to reflect current behaviour.lum
reviewed by jmc@
2011-05-09Installing -> Updating.Antoine Jacoutot
Update copyright year while here.
2011-05-09ospfctl bits for opaque LSA support.Claudio Jeker
tested and OK sthen@
2011-05-09First bits to support opaque LSA. Type-9, 10 and 11 are LSA that canClaudio Jeker
hold about any data you like and is used for things like greaceful reload. Implement the basic redistribute logic and LSDB handling but the data sent is currently not looked at. Tested and OK sthen@
2011-05-09Reorganize the relayd code to use the proc.c privsep API/commodityReyk Floeter
functions that are based on work for iked and smtpd. This simplifies the setup of privsep processes and moves some redundant and repeated code to a single place - which is always good from a quality and security point of view. The relayd version of proc.c is different to the current version in iked because it uses 1:N communications between processes, eg. a single parent process is talking to many forked relay children while iked only needs 1:1 communications. ok sthen@ pyr@
2011-05-09Reorganize the relayd code to use the proc.c privsep API/commodityReyk Floeter
functions that are based on work for iked and smtpd. This simplifies the setup of privsep processes and moves some redundant and repeated code to a single place - which is always good from a quality and security point of view. The relayd version of proc.c is different to the current version in iked because it uses 1:N communications between processes, eg. a single parent process is talking to many forked relay children while iked only needs 1:1 communications. ok sthen@ pyr@
2011-05-09fix segfault in newaliases after global env move.Eric Faurot
spotted by Christopher Zimmermann ok gilles@
2011-05-08Make sure /etc/group and /etc/master.passwd are handled first in case weAntoine Jacoutot
need to install files or directories with newly added user/group ownerships. ok sthen@ (on a slightly different diff)
2011-05-07there is already a function to set the portno.Eric Faurot
ok gilles@
2011-05-06move dns session specific structs and prototypes out of smtpd.h.Eric Faurot
ok gilles@
2011-05-06If it doesn't exist, create the directory holding the link we are aboutAntoine Jacoutot
to create, otherwise sysmerge will fail installing it. This can happen for example when you only installed etcXX but run sysmerge against both etcXX and xetcXX. found the hard way by and ok sthen@
2011-05-06Do not special case loopback interfaces on init. Instead force themClaudio Jeker
to IF_STA_LOOPBACK in if_act_start() this way they will repsect IFF_UP on startup. Also remove a now no longer needed workaround when reloading interfaces. Initial diff provided by Patrick Coleman. OK dlg@
2011-05-06Do not special case loopback interfaces on init. Instead force themClaudio Jeker
to IF_STA_LOOPBACK in if_act_start() this way they will repsect IFF_UP on startup. Also mark the interfaces as passive. Initial diff provided by Patrick Coleman. OK dlg@
2011-05-05order static typesClaudio Jeker
2011-05-05KNFClaudio Jeker
2011-05-05Update all logging and debug functions to use the __func__ macroReyk Floeter
instead of static function names. __func__ is C99 and perfectly fine to use. It also avoids printing errors; for example if a statement log_debug("foo:"..) was moved or copied from function foo() to bar() and the log message was not updated...
2011-05-05Allow a user to specify the route priorityPeter Hessler
OK reyk@ claudio@ sthen@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-29 04:39:18 +0000