d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
60,532 Commits 6 Branches 133 Tags 2.6 GiB
65f28919b3
Commit Graph

60532 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jesper Skriver
65f28919b3 Silby's take one on increasing FreeBSD's resistance to SYN floods: 
One way we can reduce the amount of traffic we send in response to a SYN
flood is to eliminate the RST we send when removing a connection from
the listen queue.  Since we are being flooded, we can assume that the
majority of connections in the queue are bogus.  Our RST is unwanted
by these hosts, just as our SYN-ACK was.  Genuine connection attempts
will result in hosts responding to our SYN-ACK with an ACK packet.  We
will automatically return a RST response to their ACK when it gets to us
if the connection has been dropped, so the early RST doesn't serve the
genuine class of connections much.  In summary, we can reduce the number
of packets we send by a factor of two without any loss in functionality
by ensuring that RST packets are not sent when dropping a connection
from the listen queue.

Submitted by:	Mike Silbersack <silby@silby.com>
Reviewed by:	jesper
MFC after:	2 weeks
 2001-06-06 19:41:51 +00:00
Daniel C. Sobral
db97c662cf Use ${EDITOR} as claimed. 
Source rc.conf and use ${firewall_script} instead of rc.firewall.

Textwidth formatting of comments and text.

PR:
Submitted by:	Maxim <maxim@news1.macomnet.ru>

(sorry if I got name/email/committer status wrong :)
 2001-06-06 19:34:02 +00:00
Bill Paul
765a54f4c9 Disable extra TCP/UCP checksum checking in nge_rxeof() for now. 2001-06-06 19:17:10 +00:00
Bill Paul
1c352ef74a Use LGE_INC() macro to increment tx producer index in lge_encap(). 
Disable the extra TCP/UCP checksum checking in lge_rxeof() since it
doesn't appear to actually work as advertised.
 2001-06-06 19:16:02 +00:00
Daniel C. Sobral
295458873b Unbreak world by adding the new example directiory. 
Reminded by:	Niels Chr. Bank-Pedersen <ncbp@bank-pedersen.dk>
MFC after:	1 week
 2001-06-06 19:11:32 +00:00
Chris Costello
f5e28e4a4f Spelling fix ("independantly" -> "independently") 
PR:		25648
Submitted by:	Jens Schweikhardt <schweikh@schweikhardt.net>
 2001-06-06 19:07:03 +00:00
Jonathan Lemon
a8fb4e2810 o If the file being tailed is moved back to the original location, 
resume using kqueue to monitor it, if possible.
  o auto-clear the read filter on EOF; this is needed when tailing a FIFO.
 2001-06-06 17:47:13 +00:00
Jonathan Lemon
3b6e32b01e Add a wrapper for the fifo kqfilter which falls through to the ufs routine. 
This permits the fifo to inherit the ufs VNODE kqfilter.
 2001-06-06 17:40:57 +00:00
Jonathan Lemon
2247e23a97 The kq write filter was hooked up to the wrong socket, and thus was 
not behaving correctly.  Fix by attaching to the correct socket.

Also call so{rw}wakeup in addition to the fifo wakeup, so that any
kqfilters attached to the socket buffer get poked.
 2001-06-06 17:38:36 +00:00
Bruce A. Mah
794f125157 Properly key RELNOTESng language selection from RELNOTES_LANG instead 
of DOC_LANG.

Submitted by:	Thomas Seck <tmseck@web.de>
 2001-06-06 16:58:09 +00:00
David E. O'Brien
7b91cad987 Add the single suffix rules for FORTRAN. 2001-06-06 16:58:08 +00:00
David E. O'Brien
eb73cacd43 Add the single suffix rules for C++. 
(While there, I also moved the single suffix C rules beside the double
suffix ones so they are easier to find)

PR:		24438
Submitted by:	Georg-W. Koltermann <gwk@sgi.com>
 2001-06-06 16:51:38 +00:00
Ruslan Ermilov
3c5021685e Fetch the default maximum TTL value from the net.inet.ip.ttl MIB. 
PR:		bin/19598
MFC after:	1 week
 2001-06-06 16:12:59 +00:00
Daniel C. Sobral
7b4d3c72cc Introduce an example script of safe changing of ipfw(8) rules. 
I'm sure this can be much improved, but this works fairly well.

PR:		27887
Submitted by:	Alexandre Peixoto <alexandref@tcoip.com.br>
MFC after:	1 week
 2001-06-06 15:45:04 +00:00
Andrew Gallatin
b8da8ef880 hold the vm_mtx around vm_map_lookup_entry() and vm_map_findspace() 2001-06-06 14:07:52 +00:00
Ruslan Ermilov
4589be70fe Unbreak setregid(2). 
Spotted by:	Alexander Leidinger <Alexander@Leidinger.net>
 2001-06-06 13:58:03 +00:00
Andrew Gallatin
751eb2452f Apparently, the vm_mtx must be held around vm_map_find(). I'm assuming 
that it needn't be held around vm_mmap() since vm_mmap() itself aquires
it.

Sleuthing by: obrien
 2001-06-06 13:46:16 +00:00
Noriaki Mitsunaga
36afc45690 Sorry, an "ARCHIVE Python 06408" does not need SA_QUIRK_NOCOMP. 2001-06-06 13:01:44 +00:00
Ruslan Ermilov
be5c8032a0 Note that -a is ignored if -s is also specified. 2001-06-06 12:48:22 +00:00
Ruslan Ermilov
1438aefc25 fmt(1) rewrite by Gareth McCaughan. 
PR:		bin/5901, bin/12242, bin/19071
Submitted by:	Gareth McCaughan <gjm11@dpmms.cam.ac.uk>
Obtained from:	OpenBSD + ctype(3), WARNS=2, and manpage cleanup
MFC after:	2 weeks
 2001-06-06 10:17:05 +00:00
Bruce Evans
c7ff38250f Fixed missing parentheses in the definition of KTR_COMPILE. KTR_COMPILE 
is usually (always?) used in expressions like (KTR_COMPILE & KTR_FOO).
Defining it as KTR_INTR|KTR_PROC gave the wrong value in approximately
8497 places according to error output for compiling LINT.
 2001-06-06 06:58:13 +00:00
Joerg Wunsch
d137c337ae Part #2 of the <machine/ioctl_fd.h> => <sys/fdcio.h> move: handle the 
tools in usr.sbin/fd*.
 2001-06-06 06:16:19 +00:00
Joerg Wunsch
e774b25111 Nuke the various poorly maintained copies of ioctl_fd.h. The file is 
not machine-dependant, thus it has been moved out (repo-copied) into
<sys/fdcio.h>.
 2001-06-06 06:15:03 +00:00
Seigo Tanimura
326f419bb9 Lock VM Giant prior to locking a vm map. 
Spotted by:	Daniel Rock <D.Rock@t-online.de>
Tested by:	David Wolfskill <david@catwhisker.org>,
		Sean Eric Fagan <sef@kithrup.com>
 2001-06-06 04:13:11 +00:00
John Baldwin
262c9f8a3b Don't hold sched_lock across addupc_task(). 
Reported by:	David Taylor <davidt@yadt.co.uk>
Submitted by:	bde
 2001-06-06 00:57:24 +00:00
Warner Losh
ca604d262f Use bus_space when reading CIS. This allows us to access it in 8 bit 
mode, which is what the standard mandates.

Submitted by: Takanori Watanabe-san
Reviewed by: jhb
 2001-06-05 23:42:51 +00:00
Warner Losh
656f411d33 Back out my changes describing how snprintf nul terminates. It 
was from the iso standard.  Keep the sentence that says it is always
NUL terminated to make sure that people understand that.

Requested by: bde
 2001-06-05 23:39:45 +00:00
Bill Paul
6048cd628a In lge_detach(), don't contigfree() the jumbogram buffer memory; 
lge_free_jumbo_mem() does it for us.
 2001-06-05 23:16:52 +00:00
Warner Losh
64c30c9cb5 Commit part of the patch that I have for card eject problems with the 
ep driver.  The rest of the patch will wait until I can put the time
into it to get it righter than the kludge it is.

This protects us against card eject problems at all times,e xecpt when
we're in the epintr ISR.
 2001-06-05 22:29:16 +00:00
Jacques Vidrine
cc66540e0e Add parens to get the cast that was meant in previous commit. 
While we're at it, this file seems to prefer `unsigned int'
over `u_int', so go with that.
 2001-06-05 21:55:57 +00:00
Matt Jacob
b3e8643ffa Wrong. The size of size_t is *not* the same as the size of an integer. 
MFC after:	2 weeks
 2001-06-05 21:16:27 +00:00
Poul-Henning Kamp
c689eed5f3 There is no reason for logname to call getopt(3), it doesn't take 
any options.

PR:		26689
Submitted by:	Félix-Antoine Paradis <reel@sympatico.ca>
 2001-06-05 21:04:42 +00:00
Joerg Wunsch
7998b1245d Make the FDC (state machine) state an enum, as opposed to an int 
abusing a bunch of #defines, for clarity and better debugging support.
 2001-06-05 21:01:46 +00:00
Bill Paul
357dfe502a Fix mindo: 
PCN_BCR_CLRBIT(sc, PCN_BCR_MIICTL, PCN_MIICTL_DANAS);

should be:

	PCN_BCR_SETBIT(sc, PCN_BCR_MIICTL, PCN_MIICTL_DANAS);

Turning this bit on is what disables MII autoneg, not turning it off.
Without this, manually setting the media doesn't work.

Noticed by: Jim Browne <jbrowne@jbrowne.com>
 2001-06-05 20:51:17 +00:00
Garrett Wollman
80d444c883 Don't mung the user's tm_sec field if we don't need to. (Belt-and-suspenders 
version.)

PR:		bin/27630
Submitted by:	Arthur David Olson <ado@nci.nih.gov>
Obtained from:	Timezone mailing-list <tz@elsie.nci.nih.gov>
MFC after:	1 month
 2001-06-05 20:13:28 +00:00
Shafeeq Sinnamohideen
ba8aae1baf Now works again and as a module and with devfs. 
Used the bpf & tun drivers as examples as to what is necessary for devfs.
 2001-06-05 19:45:16 +00:00
Joerg Wunsch
4a70e151df Document /usr/include/dev/{ic,wi}. 
Reminded by:	ru
 2001-06-05 18:52:55 +00:00
Thomas-Henning von Kamptz
25e3465064 fix a bug of a only partitally initialization which could result 
in an unclean filesystem after growing by a large amount of cylinder
groups

Reviewed by:	chm
 2001-06-05 18:39:57 +00:00
Bruce A. Mah
1fa0e3cde3 New release note: SA-01:40. 2001-06-05 18:23:54 +00:00
Matt Jacob
6a23026c6e Fix botch for state levels. Role minor release. Start adding code for a 
'force logout' path.

MFC after:	4 weeks
 2001-06-05 17:11:06 +00:00
Warner Losh
7528c356f5 I neglected to notice that the change text had already been added in a 
different place. Back out what I added since the other text is better.

Noticed by: nectar
 2001-06-05 16:43:51 +00:00
Bruce A. Mah
4ac5181d4c Forced commit; CVS didn't prompt for a log message for the original 
commit.

Add a README file where the old *.TXT files used to live, redirecting
developers to the doc directory and giving a URL for a Web-accessible
version of RELNOTESng.

Submitted by:		dd (with some editing)
 2001-06-05 15:33:30 +00:00
Hellmuth Michaelis
a272144a13 PR: i386/26347 
Submitted by:	Nicola Vitale <nivit@libero.it>
Reviewed by:	hm
Fix screen number display in HP mode in case PCVT_NSCREENS > 10
 2001-06-05 15:31:47 +00:00
Bruce A. Mah
f583629fe5 Revert previous commit. I have no idea how CVS let me do this; it 
didn't even ask me for a log message.
 2001-06-05 15:31:35 +00:00
Bruce A. Mah
b819823b29 *** empty log message *** 2001-06-05 15:28:41 +00:00
Hellmuth Michaelis
40390c0719 PR: bin/26817 
Submitted by:	Clement Ballabriga <clement@asso.ups-tlse.fr>
Reviewed by:	hm
Check for read errors from the controlling tty when in fullscreen mode.
 2001-06-05 15:16:45 +00:00
Brian Somers
72155f03b6 Talk a bit about how cloning works with devfs(5). 
Make it clearer about what's going on with TUNSIFHEAD and TUNSLMODE.
Tidy up a little.
 2001-06-05 14:26:17 +00:00
Bruce A. Mah
a9b6158aa7 Use WITHOUT_X11, not NO_X, as the standardized way of turning off doc 
ports' dependencies on X Windows during release builds.
 2001-06-05 14:16:50 +00:00
Jonathan Lemon
4e92ec9dd0 Add a kqueue filter for writing to ufs filesystems which always returns 
true.  This permits better interoperability with programs which register
filters on their stdin/stdout handles.

Submitted by: Niels Provos <provos@citi.umich.edu>
 2001-06-05 13:52:37 +00:00
Maxim Sobolev
1cdc139280 Correct cross-references: 
setsockopt.3 --> setsockopt.2
  syslog.8 --> syslogd.8
  tcpdump.8 --> tcpdump.1

MFC after:	1 week
 2001-06-05 12:50:33 +00:00