Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-02-27 | replys -> replies; | Jason McIntyre | |
2007-02-27 | open the db read-only if we're only looking. ok millert@ beck@ | Otto Moerbeek | |
deraadt@ | |||
2007-02-27 | in addition to actions on request headers, allow to define relay | Reyk Floeter | |
actions on response headers (the reply sent by backend HTTP servers). the default and slightly faster relay streaming mode will be used if no actions are defined. for example: response change "Server" to "OpenBSD-hoststated/4.1" ok pyr@ | |||
2007-02-27 | manpage clarification for the "change" and "append" relay actions. | Reyk Floeter | |
from Tamas TEVESZ | |||
2007-02-27 | tweaks; | Jason McIntyre | |
2007-02-26 | Error out if the -t or -T options are specified without -a or -d. | Todd C. Miller | |
OK beck@ | |||
2007-02-26 | kill the ``use ssl'' directive for consistency across parser directives. | Pierre-Yves Ritschard | |
another heads up for testers: you need to change configuration files. ok reyk@ | |||
2007-02-26 | remove HTTP and HTTPS tokens, makes for cleaner parser. | Pierre-Yves Ritschard | |
reorder other rules as well. ok reyk@ | |||
2007-02-26 | re-enable the -W flags except -Werror which behaves differently with | Reyk Floeter | |
different gcc versions (it previously broke the tree on sparc with gcc 2.95 when compiling sys/hash.h). -Werror removal suggested by deraadt@ | |||
2007-02-26 | sync the documentation with the latest change to require a 'header' | Reyk Floeter | |
keyword for default relay actions. ok pyr@ | |||
2007-02-26 | solve some conflicts in the configuration parser. | Pierre-Yves Ritschard | |
configuration will need to be updated as some directives have changed. manpage and examples bits coming up. ok reyk@ | |||
2007-02-26 | handle strlcpy return values, make lint happy | Reyk Floeter | |
2007-02-26 | better error handling for buffer I/O, fix the log action | Reyk Floeter | |
2007-02-26 | grammar; | Jason McIntyre | |
2007-02-26 | KNF | Pierre-Yves Ritschard | |
2007-02-26 | Change the ``virtual ip'' directive to ``virtual host''. | Pierre-Yves Ritschard | |
You will need to update your configuration files accordingly. "just do it", reyk@ | |||
2007-02-26 | handle requests with chunked transfer-encoding. | Reyk Floeter | |
2007-02-26 | Set the metric for loopback interfaces. | Esben Norby | |
Fix by Dustin Lundquist - thank you very much. ok henning@ | |||
2007-02-26 | tweak flushing of unwritten bytes on http mode changes | Reyk Floeter | |
2007-02-26 | spacing | Reyk Floeter | |
2007-02-26 | improve the relay bufferevent handler if one side closed the connection | Reyk Floeter | |
2007-02-26 | re-use the retry value from table host entries for inbound relay | Reyk Floeter | |
connections. the relay will retry to connect to the hosts for the specified number of times. this sounds bad, but is a useful "workaround" for unreliable backend servers... | |||
2007-02-26 | fix small memleaks | Reyk Floeter | |
2007-02-26 | Zero out struct before using, not after. | Ray Lai | |
From <sthen at symphytum dot spacehopper dot org>, PR 5388. OK hshoexer@ and mpf@. | |||
2007-02-26 | don't leak memory, from dhclient; ok krw@ | Kevin Steves | |
2007-02-25 | one example (of two) of tree breaking the "other gcc" | Theo de Raadt | |
2007-02-25 | delete -W flags that reyk uses to break the tree | Theo de Raadt | |
2007-02-25 | copy mis-aligned routing socket message into a properly aligned struct, so | Theo de Raadt | |
that we can access it safely; ok claudio in the long term we must deal with the 32/64 bit issues of if_buadrate and friends | |||
2007-02-25 | remove unused variable | Reyk Floeter | |
2007-02-25 | we do have a table with suberror codes for cease and their meaning; | Henning Brauer | |
use it, instead of always telling "unknown suberror code X" From: Leen Besselink <leen@consolejunkie.net> if memory serves, cease didn't have suberror codes defined in the original RFC 1771 and they were added later | |||
2007-02-25 | tiny typos hiding, uncovered Leen Besselink <leen@consolejunkie.net> | Henning Brauer | |
2007-02-25 | tweaks; | Jason McIntyre | |
2007-02-24 | UI improvement: in case the disk overflows, let tally give information | Marc Espie | |
about the extra size needed. In validate, mark the overflow and call tally later. .e.g., Error: /dev/wd0f is not large enough (/usr/local/lib/libkparts.so.4.0.0) Error: /dev/wd0f is not large enough (/usr/local/lib/libkrosscore.so.4.0.0) Error: /dev/wd0f is not large enough (/usr/local/lib/libktexteditor.so.4.0.0) Error: ... more files do not fit on /dev/wd0f /dev/wd0h: 97 bytes /dev/wd0f: 337090852 bytes (missing 78473 blocks) | |||
2007-02-24 | exit right away if the config file isn't there, rather than | Bob Beck | |
doing a whole bunch of needless screwing around noticed by Stefan Krah <stefan-usenet@bytereef.org> | |||
2007-02-24 | license + copyright | Bob Beck | |
2007-02-24 | Pr 5395 from Stefan Krah <stefan-usenet@bytereef.org> | Bob Beck | |
cleanup: remove unused arg no need to clear locals return -1 to allow pid cleanup to happen if fork fails | |||
2007-02-24 | disable anonymous DH by default (cipher suite HIGH:!ADH instead of HIGH). | Reyk Floeter | |
2007-02-24 | disable SSLv2 and use "HIGH" crypto cipher suites by default. | Reyk Floeter | |
suggested by dlg@ | |||
2007-02-24 | xref adjfreq(2); from Igor Zinovik | Otto Moerbeek | |
2007-02-24 | - allow to specify the SSL cipher suite and the SSL protocols | Reyk Floeter | |
(as required by the PCI DSS) - increase the default listen backlog to 10, allow to modify the backlog as a per-protocol tcp option to improve the performance on busy systems (to get less connection failures on heavy load) - close the connection if SSL_accept returned an error - instead of logging _new_ relay sessions to syslog, log the sessions in relay_close() after they have been _finished_. this will allow to collect some additional information - add a new log keyword to log specified header/url entities (useful to track "bad guys" using many session ids or multiple user agents) - some minor fixes, manpage bits, and bump the copyright (by some reason, i didn't realize that we already have 2007...). | |||
2007-02-24 | spelling; sthen@spacehopper | Theo de Raadt | |
2007-02-23 | add missing copyright; Constantine | Theo de Raadt | |
2007-02-23 | Make spamd include the HELO/EHLO identification string sent by | Bob Beck | |
the connecting hosts in the tuple key when greylisting. catches a few more bogus hosts and will let us trap based on HELO later. Changes spamdb(8) output to include the new field. ok deraadt@, jmc@ | |||
2007-02-23 | register is so 1980, plus knf | Theo de Raadt | |
2007-02-23 | greytrapping improvements | Bob Beck | |
1) remove requirement for <> around spamtrap addresses 2) add support for /etc/spamd/alloweddomains to specify suffixes for which any destinations that don't match get trapped various knf's by theo, feedback from jmc, millert, deraadt | |||
2007-02-23 | remove some lint | Theo de Raadt | |
2007-02-23 | i.e. -> e.g.; ok reyk | Jason McIntyre | |
2007-02-23 | tweaks; | Jason McIntyre | |
2007-02-23 | use correct variable in error message: print the filename, not the key | Alexander von Gernler | |
ok ray@ thib@ | |||
2007-02-23 | knf | Theo de Raadt | |