brian
d2ab739e87
Talk a little more about the differences between PPPoE on FreeBSD & OpenBSD.
2001-03-09 00:12:09 +00:00
brian
20774849ad
MAXPATHLEN -> PATH_MAX
...
Don't assume MAXHOSTNAMELEN includes the NUL
Correct a diagnostic
Use "localhost" in our prompt instead of ""
2001-03-08 23:51:50 +00:00
brian
c62886557e
TUNSIFINFO now requires uid 0 to change the interface MTU.
...
Reviewed by: Mark Knight <markk@knigma.org>
2001-03-08 10:33:30 +00:00
ru
0b7f07b8e5
Eliminate mdocNG warnings caused by misplaced or extraneous macro calls.
2001-02-28 17:38:53 +00:00
brian
78f15de19d
Don't even look at af_family if accept() returns sa->sa_len == 0
2001-02-13 12:33:34 +00:00
brian
b4c627d4ba
A better fix for the PacketAliasProxyRule() call.
...
Submitted by: Ian Dowse <iedowse@maths.tcd.ie>
2001-02-10 17:26:14 +00:00
ru
9fb09ea791
mdoc(7) police: replace two -unfilled displays with -tag lists.
...
This works only because of bugs in current implementation: the
first .It after ``.Bd -unfilled'' re-enables filling mode and
does not restore (disable) it back afterwards.
2001-02-07 16:02:21 +00:00
brian
c191dd1965
Add a ``Usable'' function to the ccp switch. The function
...
is called prior to sending a CCP configure request for a
given protocol. The default is to send the request, but
this is overridden for MPPE which checks to see if the lcp
negotiations agreed CHAP81, and if not fails.
Use the same function to decide if we should reject peer
requests for MPPE.
This should get rid of those boring messages about not being
able to initialise MPPE when we don't negotiate CHAP81.
2001-02-04 22:53:11 +00:00
brian
9c8ec2f5c3
MPPE_MasterKeyValid is only there if HAVE_DES is defined.
2001-02-04 01:20:33 +00:00
brian
57d6da5117
Don't send an authentication failure response if we fail sending
...
a radius accounting packet.
2001-02-04 01:08:26 +00:00
brian
36d38d7778
Make the MPPE MasterKey Invalid messages a bit clearer (it now
...
complains that you can't do MPPE without CHAP81).
Reset MasterKeyValid to zero when we hit phase DEAD.
2001-02-04 01:08:24 +00:00
brian
1888ef4dda
Untangle some cunfusion between the CLOSE_STAYDOWN, CLOSE_LCP and
...
CLOSE_NORMAL meanings. CLOSE_NORMAL doesn't change the currently
required state, the others do. This should stop ppp from entering
DATALINK_READY when LCP shutdown doesn't end up happening cleanly.
Bump our version number to reflect this change.
2001-02-04 01:08:22 +00:00
brian
e8f04ed818
Try to kldload if_tun if we get ENOENT from opening /dev/tunN -
...
not just if we get ENXIO.
This makes ppp work with DEVFS when if_tun isn't built into
the kernel (without needing to manually kldload it).
2001-02-02 01:41:26 +00:00
ru
606eb8b7a4
mdoc(7) police: split punctuation characters + misc fixes.
2001-02-01 16:44:04 +00:00
brian
3d687cbdb4
Fix some log_Printf() casting
...
Obtained from: NetBSD (pkgsrc)
2001-01-29 08:46:58 +00:00
brian
95860823ed
Only remove socket files with ``set server open''.
...
Only show the mask in ``show bundle'' when it's been specified.
Complain about unexpected arguments after ``set server {none,open,closed}''
Log re-open failures as warnings rather than phase messages.
Fix some markup for the ``set server'' man page description.
2001-01-29 01:35:06 +00:00
brian
c8c6a550cb
Don't pass PacketAliasProxyRule() a buffer with leading whitespace as it
...
can't handle it.
2001-01-28 21:56:27 +00:00
brian
9edaa2ae77
Fix arg count
2001-01-26 01:48:16 +00:00
brian
869f2211c7
If executing the stuff from ppp.linkdown results in a state change,
...
don't continue adjusting the ipcp state machine.
This allows ``down'' to work in ppp.linkdown - useful for a tunnel
setup.
2001-01-26 01:43:38 +00:00
brian
e8cf47791d
Allow ``set server closed'' to close the diagnostic socket.
...
Allow ``set server open'' to re-open the diagnostic socket.
Handle SIGUSR1 by re-opening the diagnostic socket
When receiving SIGUSR2 (and in ``set server none''), don't forget the
socket details so that ``set server open'' and SIGUSR1 open it again.
Don't create the diagnostic socket as uid 0 ! It's far to dangerous.
2001-01-26 01:41:34 +00:00
brian
30569497d9
Fix for NetBSD where
...
.Oc Oc
.Xc
doesn't seem to work....
2001-01-22 11:35:00 +00:00
brian
ee3492fbe9
Handle SECDNS being rejected when PRIDNS is not
...
Submitted by: OGAWA Takaya <t-ogawa@triaez.kaisei.org>
PR: 24518
2001-01-22 01:43:46 +00:00
brian
883394d1f5
Use fstat to check if descriptor 0 is a socket.
...
Suggested by: julian
2001-01-14 00:54:48 +00:00
brian
38741e41c5
Log the ``MPPE: MasterKey is invalid...'' message as a CCP
...
diagnostic rather than a warning.
2000-12-29 22:25:56 +00:00
ru
522216623a
Prepare for mdoc(7)NG.
2000-12-27 15:30:30 +00:00
ru
bffba5bbaa
Add a missing dot.
2000-12-15 07:34:01 +00:00
brian
c8566524b2
Correct the documented default behaviour of mschap, mschap81 and MPPE.
...
Pointed out by: Mark Knight <markk@knigma.org>
2000-12-15 01:09:38 +00:00
ru
86f1384c5d
mdoc(7) police: use canonical form of .Dd macro.
2000-12-11 15:57:16 +00:00
brian
e1436a9201
Mention the MTU in ``show iface''.
2000-12-01 03:22:18 +00:00
brian
118a6a6571
Call MSCHAP CHAP80 in ``show lcp'' so that it's consistent with CHAP81.
2000-11-29 15:47:35 +00:00
brian
c63f0fa916
Use only the bit after the ``\'' when hashing the challenge in
...
MSChapv2
Submitted by: Ustimenko Semen <semen@iclub.nsu.ru>
2000-11-28 22:50:40 +00:00
brian
982aaf4a73
Add ``enable/disable tcpmssfixup'', defaulting to enabled.
...
Suggested by: julian
Hijacked from: ru (ports/net/tcpmssd)
2000-11-28 13:18:35 +00:00
ben
b1e0f4063d
various typo and minor punctuation changes.
...
PR: 23111
Submitted by: Jimmy Olgeni <olgeni@uli.it>
2000-11-28 11:35:14 +00:00
ru
c3189e713e
mdoc(7) police: use the new features of the Nm macro.
2000-11-20 20:10:44 +00:00
brian
b5136d9709
Some gratuitous whitespace changes.
2000-11-19 16:58:59 +00:00
brian
c890a788d4
Describe how to tunnel properly.
...
Requested by: Greg Quinlan <greg@macquarrie.com.au>
2000-11-19 16:54:57 +00:00
brian
df7ceaea9a
Accept MSCHAPv2 by default.
...
Enable and accept MPPE by default.
2000-11-19 16:53:50 +00:00
brian
9db1810977
Go back to populating data_len in struct ngpppoe_init_data.
2000-11-16 23:15:42 +00:00
brian
2e12dba4cd
Be a bit more precise about what ``nat deny_incoming yes'' does.
2000-11-16 21:50:50 +00:00
brian
82220faf27
Increase M_MAXBUF so that it's greater than HDLCSIZE
2000-11-11 01:31:32 +00:00
ru
f9c7198049
Avoid use of direct troff requests in mdoc(7) manual pages.
2000-11-10 17:46:15 +00:00
brian
6974325c37
Introduce another global (MPPE_IsServer) so that we initiate the
...
MPPE session keys correctly.
I'm a bit dubious about this code. It seems that the session keys
are initialised differently based on whether you're the client or
the server. One side is the server if it issues the first challenge,
but of course you can issue a challenge from both sides.... at the
same time. Sounds like another wonderful M$ assumption...
Ppp can now talk to itself correctly using encryption.
Problem solved by: Ustimenko Semen <semen@iclub.nsu.ru>
Hair torn out by: me
2000-11-07 23:19:11 +00:00
brian
31abe5a51d
Handle being given a connect()ed udp descriptor as stdin rather
...
than assuming it's unconnected.
2000-11-07 04:29:46 +00:00
brian
92cfe77599
Pass the correct output options to the ccp output initialisation
...
routine rather than passing it the first requested output option.
Ensure that options are freed correctly even if we don't reach
TLU.
2000-11-07 04:29:33 +00:00
brian
6ec032d154
Merge some OpenBSD/NetBSD fixes to the recent MPPE/CHAP0x81 update.
2000-11-05 03:25:09 +00:00
brian
25ea00025d
Don't ignore the return from tcsetattr() - moan about it instead.
...
Suggested by: Andre Albsmeier <andre@akademie3000.de>
2000-10-31 23:27:35 +00:00
hosokawa
3c8caa4f0a
Forgotten RELEASE_CRUNCH hack for mppe.c.
...
This fix is for "make release" and "make boot.flp".
2000-10-31 05:00:25 +00:00
brian
54fe531ed1
Use the new-style ngpppoe_init_data structure.
...
Approved by: archie
2000-10-31 02:46:12 +00:00
brian
7fd65a0aa9
Mention that ``nat deny_incoming'' drops unrecognised IP packets.
...
Requested by: kris
2000-10-31 02:25:54 +00:00
brian
c6435e2600
Drop PKT_ALIAS_IGNORED packets if ``nat deny_incoming yes'' is in effect.
...
Approved by: rwatson, ru
2000-10-30 18:02:01 +00:00