summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2007-02-27replys -> replies;Jason McIntyre
2007-02-27open the db read-only if we're only looking. ok millert@ beck@Otto Moerbeek
deraadt@
2007-02-27in addition to actions on request headers, allow to define relayReyk Floeter
actions on response headers (the reply sent by backend HTTP servers). the default and slightly faster relay streaming mode will be used if no actions are defined. for example: response change "Server" to "OpenBSD-hoststated/4.1" ok pyr@
2007-02-27manpage clarification for the "change" and "append" relay actions.Reyk Floeter
from Tamas TEVESZ
2007-02-27tweaks;Jason McIntyre
2007-02-26Error out if the -t or -T options are specified without -a or -d.Todd C. Miller
OK beck@
2007-02-26kill the ``use ssl'' directive for consistency across parser directives.Pierre-Yves Ritschard
another heads up for testers: you need to change configuration files. ok reyk@
2007-02-26remove HTTP and HTTPS tokens, makes for cleaner parser.Pierre-Yves Ritschard
reorder other rules as well. ok reyk@
2007-02-26re-enable the -W flags except -Werror which behaves differently withReyk Floeter
different gcc versions (it previously broke the tree on sparc with gcc 2.95 when compiling sys/hash.h). -Werror removal suggested by deraadt@
2007-02-26sync the documentation with the latest change to require a 'header'Reyk Floeter
keyword for default relay actions. ok pyr@
2007-02-26solve some conflicts in the configuration parser.Pierre-Yves Ritschard
configuration will need to be updated as some directives have changed. manpage and examples bits coming up. ok reyk@
2007-02-26handle strlcpy return values, make lint happyReyk Floeter
2007-02-26better error handling for buffer I/O, fix the log actionReyk Floeter
2007-02-26grammar;Jason McIntyre
2007-02-26KNFPierre-Yves Ritschard
2007-02-26Change the ``virtual ip'' directive to ``virtual host''.Pierre-Yves Ritschard
You will need to update your configuration files accordingly. "just do it", reyk@
2007-02-26handle requests with chunked transfer-encoding.Reyk Floeter
2007-02-26Set the metric for loopback interfaces.Esben Norby
Fix by Dustin Lundquist - thank you very much. ok henning@
2007-02-26tweak flushing of unwritten bytes on http mode changesReyk Floeter
2007-02-26spacingReyk Floeter
2007-02-26improve the relay bufferevent handler if one side closed the connectionReyk Floeter
2007-02-26re-use the retry value from table host entries for inbound relayReyk Floeter
connections. the relay will retry to connect to the hosts for the specified number of times. this sounds bad, but is a useful "workaround" for unreliable backend servers...
2007-02-26fix small memleaksReyk Floeter
2007-02-26Zero out struct before using, not after.Ray Lai
From <sthen at symphytum dot spacehopper dot org>, PR 5388. OK hshoexer@ and mpf@.
2007-02-26don't leak memory, from dhclient; ok krw@Kevin Steves
2007-02-25one example (of two) of tree breaking the "other gcc"Theo de Raadt
2007-02-25delete -W flags that reyk uses to break the treeTheo de Raadt
2007-02-25copy mis-aligned routing socket message into a properly aligned struct, soTheo de Raadt
that we can access it safely; ok claudio in the long term we must deal with the 32/64 bit issues of if_buadrate and friends
2007-02-25remove unused variableReyk Floeter
2007-02-25we do have a table with suberror codes for cease and their meaning;Henning Brauer
use it, instead of always telling "unknown suberror code X" From: Leen Besselink <leen@consolejunkie.net> if memory serves, cease didn't have suberror codes defined in the original RFC 1771 and they were added later
2007-02-25tiny typos hiding, uncovered Leen Besselink <leen@consolejunkie.net>Henning Brauer
2007-02-25tweaks;Jason McIntyre
2007-02-24UI improvement: in case the disk overflows, let tally give informationMarc Espie
about the extra size needed. In validate, mark the overflow and call tally later. .e.g., Error: /dev/wd0f is not large enough (/usr/local/lib/libkparts.so.4.0.0) Error: /dev/wd0f is not large enough (/usr/local/lib/libkrosscore.so.4.0.0) Error: /dev/wd0f is not large enough (/usr/local/lib/libktexteditor.so.4.0.0) Error: ... more files do not fit on /dev/wd0f /dev/wd0h: 97 bytes /dev/wd0f: 337090852 bytes (missing 78473 blocks)
2007-02-24exit right away if the config file isn't there, rather thanBob Beck
doing a whole bunch of needless screwing around noticed by Stefan Krah <stefan-usenet@bytereef.org>
2007-02-24license + copyrightBob Beck
2007-02-24Pr 5395 from Stefan Krah <stefan-usenet@bytereef.org>Bob Beck
cleanup: remove unused arg no need to clear locals return -1 to allow pid cleanup to happen if fork fails
2007-02-24disable anonymous DH by default (cipher suite HIGH:!ADH instead of HIGH).Reyk Floeter
2007-02-24disable SSLv2 and use "HIGH" crypto cipher suites by default.Reyk Floeter
suggested by dlg@
2007-02-24xref adjfreq(2); from Igor ZinovikOtto Moerbeek
2007-02-24- allow to specify the SSL cipher suite and the SSL protocolsReyk Floeter
(as required by the PCI DSS) - increase the default listen backlog to 10, allow to modify the backlog as a per-protocol tcp option to improve the performance on busy systems (to get less connection failures on heavy load) - close the connection if SSL_accept returned an error - instead of logging _new_ relay sessions to syslog, log the sessions in relay_close() after they have been _finished_. this will allow to collect some additional information - add a new log keyword to log specified header/url entities (useful to track "bad guys" using many session ids or multiple user agents) - some minor fixes, manpage bits, and bump the copyright (by some reason, i didn't realize that we already have 2007...).
2007-02-24spelling; sthen@spacehopperTheo de Raadt
2007-02-23add missing copyright; ConstantineTheo de Raadt
2007-02-23Make spamd include the HELO/EHLO identification string sent byBob Beck
the connecting hosts in the tuple key when greylisting. catches a few more bogus hosts and will let us trap based on HELO later. Changes spamdb(8) output to include the new field. ok deraadt@, jmc@
2007-02-23register is so 1980, plus knfTheo de Raadt
2007-02-23greytrapping improvementsBob Beck
1) remove requirement for <> around spamtrap addresses 2) add support for /etc/spamd/alloweddomains to specify suffixes for which any destinations that don't match get trapped various knf's by theo, feedback from jmc, millert, deraadt
2007-02-23remove some lintTheo de Raadt
2007-02-23i.e. -> e.g.; ok reykJason McIntyre
2007-02-23tweaks;Jason McIntyre
2007-02-23use correct variable in error message: print the filename, not the keyAlexander von Gernler
ok ray@ thib@
2007-02-23knfTheo de Raadt