Commit Graph

6058 Commits

Author SHA1 Message Date
Brian Somers
60498ea783 Correct ``set filter'' usage
Spotted by:	sheldonh
2000-07-12 16:31:47 +00:00
Brian Somers
cb8bd8dd72 Fix a rather nasty latency problem that occurs with single tcp sessions
thorough an MP setup with only a single link.
2000-07-12 15:08:03 +00:00
Robert Watson
aa1d263e0c o Other half of Sheldon's patch to fix initattr arguments, mistakenly
forgotten due to minimal sleep.  Thanks!

Submitted by:	sheldonh
2000-07-12 12:04:02 +00:00
Robert Watson
581e97c5c7 o update extattrctl man page to reflect obligatory arguments to initattr
-r and -w arguments

Submitted by:	sheldonh
2000-07-12 11:50:08 +00:00
David Nugent
d73dd62871 Detect and handle comment lines in master.passwd files.
PR:		bin/19664
2000-07-12 11:00:28 +00:00
Robert Watson
3b88d2796e o Correct getopt() argument so that initattr -r and -w take an additional
argument via optarg.  This corrects a segfault when initattr is invoked
  with either of these two arguments.  Not sure how this got broken given
  that in the original patches it was fine -- presumably a merging
  mistake.

Obtained from:	TrustedBSD Project
2000-07-12 02:20:16 +00:00
Kris Kennaway
9a47755d7c Don't call syslog() without a format string. 2000-07-12 01:43:55 +00:00
Kris Kennaway
ed9ee320b0 Don't call syslog() without a format string. 2000-07-12 00:50:49 +00:00
Kris Kennaway
0e0b415c72 Don't call warn() without a format string. 2000-07-12 00:50:15 +00:00
Kris Kennaway
b6c96d5da5 Don't call err() without a format string. 2000-07-12 00:35:53 +00:00
Kris Kennaway
9cca1d3627 Don't call syslog() without a format string. 2000-07-12 00:00:12 +00:00
Brian Somers
0a4b6c5c5c Allow a ``timeout secs'' filter option to let specific packet types
effect the idle timer in different ways.

Submitted by: Stefan Esser <se@freebsd.org>

With adjustments by me to document the option in the man page and to
give the same semantics for outgoing traffic as incoming.

I made the style more consistent in ip.c - this should really have
been done as a separate commit.
2000-07-11 22:11:36 +00:00
Brian Somers
040cfe28d1 Fix -auto breakage introduced with the last commit. 2000-07-11 09:26:02 +00:00
Brian Feldman
18b8dc18fd Fix an off-by-one error which breaks this (detected by malloc flags):
the line being read in was terminated one byte too late.
2000-07-11 00:06:44 +00:00
Hajimu UMEMOTO
6da1b6ebda removed 'ifndef ADVAPI' parts
Obtained from:	KAME
2000-07-10 18:27:55 +00:00
Hajimu UMEMOTO
a00dc7b4f4 Activate mld6query. 2000-07-10 17:00:26 +00:00
Hajimu UMEMOTO
a61156e3e4 mld6query sends an IPv6 multicast listener discovery (MLD) query packet
toward the specified multicast address.

Obtained from:	KAME
2000-07-10 16:56:19 +00:00
Jun-ichiro itojun Hagino
fcf293ef83 Nm/Xr cleanup. requested by jp-man 2000-07-10 00:02:23 +00:00
Jun-ichiro itojun Hagino
1364bf4a47 use advanced API (-DADVAPI).
From: tkatayam@pi.titech.ac.jp (KATAYAMA, Takeo)
2000-07-09 03:07:48 +00:00
Daniel Harris
00f1e9626b Typo: "is unreliably by default" to "is unreliable by default".
PR:		19411
Submitted by:	Benno Rice <benno@netizen.com.au>
2000-07-08 14:12:34 +00:00
Hajimu UMEMOTO
9bdd4811f4 Sync with latest KAME.
Obtained from:	KAME
2000-07-07 19:19:25 +00:00
Brian Somers
9825166754 o Log the (payload/size) of all packet types, not just TCP packets
o  If the new ``filter-decapsulation'' is enabled, delve into UDP packets
   that contain 0xff 0x03 as the first two bytes, and if we recognise it
   as PROTO_IP, decapsulate it for the purpose of filter checking.

   If we recognise it as PROTO_<anything else> mention this for logging
   purposes only.

This change is aimed at people running PPPoUDP where the UDP traffic is
being sent over another PPP link.  It's desireable to have the top level
link connected all the time, but to have the bottom level link capable
of decapsulating the traffic and comparing the payload against the filters,
thus allowing ``set filter dial ...'' to work in tunnelled environments.

The caveat here is that the top ppp cannot employ any compression layers
without making the data unreadable for the bottom ppp.  ``disable deflate
pred1 vj'' and ``deny deflate pred1 vj'' is suggested.
2000-07-07 14:22:08 +00:00
Maxim Sobolev
0f4dfa202e New option "-s" to query size of the installed package(s).
PR:		19445
Submitted by:	sobomax
Reviewed by:	knu
Approved by:	silence
2000-07-07 13:06:32 +00:00
Kris Kennaway
2b39a7c8ef Sync with latest KAME
Obtained from:	KAME
2000-07-07 07:35:51 +00:00
Kris Kennaway
2637b5fb5d Sync with latest KAME
Obtained from:	KAME
2000-07-07 07:25:56 +00:00
Brian Somers
458cef74eb Correct setproctitle() call
Obtained from: OpenBSD
2000-07-06 19:51:58 +00:00
Hajimu UMEMOTO
c8926106df Make compilable.
Reported by:	Ollivier Robert <roberto@eurocontrol.fr>
2000-07-06 18:17:08 +00:00
Kris Kennaway
9ac104e443 Add two files missing from the KAME sync
Submitted by:	Eric Sabban <esabban@pacbell.net>
2000-07-06 04:01:37 +00:00
Kris Kennaway
8b15840355 Correct style bugs 2000-07-06 02:00:18 +00:00
Kris Kennaway
5bca844f39 Sync with latest KAME code.
Obtained from:	KAME
2000-07-06 01:48:08 +00:00
Kris Kennaway
375477fbf6 Sync with latest KAME
Obtained from:	KAME
2000-07-06 00:38:07 +00:00
Kris Kennaway
b26e03e907 Sync with latest KAME
Obtained from:	KAME
2000-07-05 22:09:50 +00:00
Kris Kennaway
d81c3dbd42 Sync with latest KAME.
Obtained from:	KAME
2000-07-05 21:54:07 +00:00
Kris Kennaway
434d523b2d Sync with latest KAME.
Obtained from:	KAME
2000-07-05 11:12:53 +00:00
Kris Kennaway
de68a0dac8 Sync with latest KAME code.
Obtained from:	KAME
2000-07-05 11:00:58 +00:00
Kris Kennaway
259df286b9 Sync with latest KAME.
Obtained from:	KAME
2000-07-05 10:14:11 +00:00
Jun-ichiro itojun Hagino
5c2fe5afaa sync with more recent KAME tree. handles scoped IPv6 notation.
supports "delete" subcommand.
corrects PR 19663.
2000-07-05 08:42:07 +00:00
Jordan K. Hubbard
632116832b Replace phk's commit with code from my local tree which I happen
to like better (it's commented and easier to read).
2000-07-05 07:15:57 +00:00
Jun-ichiro itojun Hagino
20cecd0f50 sync with latest kame tree. more stable, p2p advert is corrected 2000-07-05 02:14:16 +00:00
Jun-ichiro itojun Hagino
ccf935dd81 sync with latest kame tree 2000-07-04 16:43:14 +00:00
Jun-ichiro itojun Hagino
3c62e87aa3 synchronize with latest kame tree.
behavior change: policy syntax was changed.  you may need to update your
setkey(8) configuration files.
2000-07-04 16:22:05 +00:00
Poul-Henning Kamp
c638a74daa Ignore all md disks, installing on them would be particularly pointless.
Its not fatal to find hardware we don't know.
2000-07-04 13:46:43 +00:00
Poul-Henning Kamp
f05f4f8f37 Yellow hat this way: forgot cvs add. 2000-07-03 17:39:24 +00:00
Poul-Henning Kamp
7095e0970e Experiemntal ascii based device configuration mechanism.
This may or may not survive, decision will be made well before 5.0-R
2000-07-03 13:34:18 +00:00
David Nugent
affc28f940 Fix breakage introduced by bypassing update for additional 'mod'
functionality when nothing had actually changed; -d changes would
not set the 'something had changed flag'. Actually test for a
change in homedir.
PR:		bin/19649
2000-07-03 12:13:10 +00:00
Sheldon Hearn
2f47c46197 Explicitly state that mountd can be made to re-read the exports file,
even though this may seem obvious to some folks.

Requested by:	obrien
2000-07-03 11:43:48 +00:00
Ollivier Robert
4f437f951e Add ftp4.fr.freebsd.org (aka altair.worldonline.fr) and ftp5.fr.freebsd.org
(aka ns1.bsdfr.org)

Strong MFC 4.1 candidate.
2000-07-02 14:25:26 +00:00
Andrey A. Chernov
3d99cebff4 Call login_close() to prevent parent from memory leaking in some
cases due to vfork()
2000-07-02 04:15:15 +00:00
Andrey A. Chernov
fe46d6a8f3 Prevent user from breaking his limits and restrictions or
abusing sendmail by any other way via MAILTO tag (since sendmail is running
from daemon). Now run sendmail from user, as any other cron user command.

Obtained from:	Inspired by OpenBSD, but implementation is different
2000-07-01 22:58:16 +00:00
Andrey A. Chernov
c38d808de1 Make sure argv gets NULL terminated if cron entry has >= MAX_ARGS arguments
Obtained from:	OpenBSD popen.c v1.3
2000-07-01 22:37:02 +00:00