d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
49,025 Commits 4 Branches 49 Tags
Commit Graph

3764 Commits

Author SHA1 Message Date
ru
314acb2e38 Apply TCP_EXPIRE_CONNECTED (86400 seconds) timeout only to established 
connections, after SYN packets were seen from both ends.  Before this,
it would get applied right after the first SYN packet was seen (either
from client or server).  With broken TCP connection attempts, when the
remote end does not respond with SYNACK nor with RST, this resulted in
having a useless (ie, no actual TCP connection associated with it) TCP
link with 86400 seconds TTL, wasting system memory.  With high rate of
such broken connection attempts (for example, remote end simply blocks
these connection attempts with ipfw(8) without sending RST back), this
could result in a denial-of-service.

PR:		bin/17963
 2000-04-14 15:34:55 +00:00
ru
0e49e08db1 A complete reformatting of manual page. 2000-04-13 14:04:01 +00:00
ru
c93d494562 Make partially specified permanent links without `dst_addr' 
but with `dst_port' work for outgoing packets.

This case was not handled properly when I first fixed this
in revision 1.17.

This change is also required for the upcoming improved PPTP
support patches -- that is how I found the problem.

Before this change:

# natd -v -a aliasIP \
  -redirect_port tcp localIP:localPORT publicIP:publicPORT 0:remotePORT

Out [TCP]  [TCP] localIP:localPORT -> remoteIP:remotePORT aliased to
           [TCP] aliasIP:localPORT -> remoteIP:remotePORT

After this change:

# natd -v -a aliasIP \
  -redirect_port tcp localIP:localPORT publicIP:publicPORT 0:remotePORT

Out [TCP]  [TCP] localIP:localPORT -> remoteIP:remotePORT aliased to
           [TCP] publicIP:publicPORT -> remoteIP:remotePORT
 2000-04-12 18:44:50 +00:00
ache
c3fb688657 Add comment after locales 
Use .Li for type

Suggested-by: sheldonh
 2000-04-12 18:38:30 +00:00
asmodai
e486fe2ee6 Fix typo, reported by George Cox. 
Fix hard sentence breaks.

Submitted by:	George Cox <gjvc@sophos.com>
 2000-04-12 13:38:26 +00:00
sheldonh
a365f1d25a Do proper byte swapping in 64bit routines. 
PR:		17681
Submitted by:	"David E. Cross" <crossd@cs.rpi.edu>
Obtained from:	NetBSD
 2000-04-12 08:41:16 +00:00
ache
3a0797d2a4 Better wording according to multibyte(3) 
Better man formatting
Add reference to multibyte(3)
 2000-04-11 14:41:37 +00:00
phk
296f8c148a Add a missing THREAD_UNLOCK() found missing by Valentin Nechayev 
<netch@segfault.kiev.ua>

Remove allocation failure check from 'A' option, the 'X' option does
this as a standalone check now.
 2000-04-10 09:24:44 +00:00
archie
e0670dffd3 Document EWOULDBLOCK as a possible errno return value. 2000-04-09 19:10:57 +00:00
ps
1e90e50f9f Break out sendudp and readudp from net.c. This is for PXE, so it 
can use its own UDP interface.
 2000-04-08 01:18:04 +00:00
ru
f8d3448a0b - Add support for FTP EPRT (RFC 2428) command. 
- Minor optimizations.
- Minor spelling fixes.

PR:		14305
Submitted by:	ume
Rewritten by:	ru
 2000-04-06 15:54:52 +00:00
ru
73d40971f4 - Remove unused includes. 
- Minor spelling fixes.
- Make IcmpAliasOut2() really work.

Before this change:

# natd -v -n PUB_IFACE -p 12345 -redirect_address 192.168.1.1 P.P.P.P
natd[87923]: Aliasing to A.A.A.A, mtu 1500 bytes
In  [UDP]  [UDP] X.X.X.X:49562 -> P.P.P.P:50000 aliased to
           [UDP] X.X.X.X:49562 -> 192.168.1.1:50000
Out [ICMP] [ICMP] 192.168.1.1 -> X.X.X.X 3(3) aliased to
           [ICMP] A.A.A.A -> X.X.X.X 3(3)

# tcpdump -n -t -i PUB_IFACE host X.X.X.X and "(udp or icmp)"
tcpdump: listening on PUB_IFACE
X.X.X.X.49562 > P.P.P.P.50000: udp 3
A.A.A.A > X.X.X.X: icmp: A.A.A.A udp port 50000 unreachable

After this change:

# natd -v -n PUB_IFACE -p 12345 -redirect_address 192.168.1.1 P.P.P.P
natd[89360]: Aliasing to A.A.A.A, mtu 1500 bytes
In  [UDP]  [UDP] X.X.X.X:49563 -> P.P.P.P:50000 aliased to
           [UDP] X.X.X.X:49563 -> 192.168.1.1:50000
Out [ICMP] [ICMP] 192.168.1.1 -> X.X.X.X 3(3) aliased to
           [ICMP] P.P.P.P -> X.X.X.X 3(3)

# tcpdump -n -t -i PUB_IFACE host X.X.X.X and "(udp or icmp)"
tcpdump: listening on PUB_IFACE
X.X.X.X.49563 > P.P.P.P.50000: udp 3
P.P.P.P > X.X.X.X: icmp: P.P.P.P udp port 50000 unreachable
 2000-04-05 14:27:34 +00:00
ru
d5c73e2c54 - Moved NULL definition into private include file. 
- Minor spelling fixes.
 2000-04-05 14:23:42 +00:00
ru
f3f77cc662 Minor spelling fixes. 2000-04-05 07:45:39 +00:00
brian
cf3efd5926 Correct Charles Mott's email address 
Requested by: Charles Mott <cmott@scientech.com>
 2000-04-02 20:16:45 +00:00
shin
d63032307c Replace the prefix for yylval to less confusing one. 
(Sorry, this should be committed with previous commit to Makefile.)
 2000-04-02 05:08:07 +00:00
shin
79ce44e001 Replace the prefix for yylval to less confusing one. 
Suggested by: bruce
 2000-04-01 22:28:36 +00:00
brian
67534b228a Allow PacketAliasSetTarget() to be passed the following: 
INADDR_NONE:   Incoming packets go to the alias address (the default)
  INADDR_ANY:    Incoming packets are not NAT'd (direct access to the
                 internal network from outside)
  anything else: Incoming packets go to the specified address

Change a few inaddr::s_addr == 0 to inaddr::s_addr == INADDR_ANY
while I'm there.
 2000-03-31 20:36:29 +00:00
nectar
4cb901960c Change the return value of kvm_read/kvm_write to be -1 on error, to 
match the documented interface.

Previously it returned 0 on error.

PR:		bin/10511
 2000-03-31 15:04:25 +00:00
brian
942ce5d318 When an incoming packet is received that is not specifically 
redirected and when no target address has been specified, NAT
the destination address to the alias address rather than
allowing people direct access to your internal network from
outside.
 2000-03-31 14:03:37 +00:00
kato
54a7094e5d Changes for PC-98. 2000-03-29 15:10:28 +00:00
kris
77771891cb Fix a memory leak. 
PR:		17360
Submitted by:	Andrew J. Korty <ajk@iu.edu>
 2000-03-29 08:24:37 +00:00
green
beae0af3f3 Actually, ${LIBY}/-ly aren't needed either. This should finish unbreaking 
the world build.
 2000-03-29 00:54:06 +00:00
ache
15bf78e6dc Back out valid argument domain change - sneak to this function by error. 
Reword test condition better. Previous variant was true for negative
characters too.
 2000-03-28 11:46:40 +00:00
shin
dccba108fa Remove libl related dependencies, because it is not necessary, and even more, 
it cause building world failure.

Specified by: Nickolay Dudorov <nnd@mail.nsk.ru>
 2000-03-28 11:41:18 +00:00
ache
68cad6a3ea Describe valid argument domain for 8-bit wide locales to prevent common error 
calling ctype functions with signed char as an argument.
 2000-03-28 11:36:31 +00:00
bde
44d97ac9b0 Fixed missing libraries in DPADD. 
Fixed some style bugs (some usual ones for DPADD and LDADD, and
misformatting of $FreeBSD$).
 2000-03-27 15:24:45 +00:00
bde
e6431f6910 Fixed missing DPADD. 
Fixed style bug for LDADD (don't use += for variables defined only once).
 2000-03-27 15:16:06 +00:00
obrien
533621041a MFS: Add a "magic" comment to help fixincludes realize it doesn't need to 
modify this file when building GCC 2.96 [by hand or via the port].

Submitted by:	Zack Weinberg <zack@wolery.cumb.org>
 2000-03-27 02:04:45 +00:00
obrien
cc06168002 -Wall, which caught a real bug where buflen wasn't being set properly. 2000-03-27 00:33:45 +00:00
jlemon
8ab55710ca Decrement the timeout being passed to poll() if poll was interrupted for 
some reason.  This will prevent an infinite loop if (say) a sigalarm is
being scheduled at a more frequent interval than the poll timeout.

PR:	2191, 8847, 10553
 2000-03-26 19:20:50 +00:00
charnier
abcb2d08a5 Spelling, fprintf -> err, remove unneeded variable declaration 2000-03-26 15:18:12 +00:00
charnier
df60edbd20 lowercase error message 2000-03-26 15:14:16 +00:00
mpp
fbc1e8d37a Fix some spelling errors. 2000-03-24 00:58:49 +00:00
ume
f3ae48fd50 Return IPv4 native address for IPv4 mapped IPv6 address, even if 
A RR is not found.

Reviewed by:	shin
 2000-03-23 17:25:00 +00:00
bde
c5722a7ded Fixed missing #include of <sys/types.h> in synopsis. 
Fixed spelling error in prototype for inet_option_space().
Fixed syntax error in prototype for inet6_option_alloc().
 2000-03-23 16:29:05 +00:00
bde
fce3c66cc6 Fixed missing #include of <sys/types.h> in synopsis. 2000-03-23 16:20:20 +00:00
bde
d9abbd8cc8 Fixed wrong arg type in synopsis. 2000-03-23 15:28:30 +00:00
jasone
d7816647ef Add a man page for aio_waitcomplete(). Update the aio_cancel() man page to 
reflect the fact that aio_cancel() works now.

Submitted by:	Christopher Sedore <cmsedore@maxwell.syr.edu>
 2000-03-21 10:25:22 +00:00
brian
ab3c427b15 Make _FindLinkIn() static and only define GetDestPort when 
NO_FW_PUNCH isn't defined.
 2000-03-19 09:11:05 +00:00
jasone
c35fe5e157 Explicitly include sys/cdefs.h to get the definition of __strong_reference(), 
rather than getting lucky due to header dependencies.
 2000-03-18 22:36:46 +00:00
bsd
c1a1c736a7 Back out that last commit, it may be insecure (pointed out by Warner 
Losh).
 2000-03-16 23:53:41 +00:00
bsd
bf05d34440 Slight adjustment to __ivaliduser() - don't ignore the last line in 
the .rhosts file just because there is no ending linefeed.
 2000-03-16 22:58:34 +00:00
jasone
23c4215cb0 Take care to avoid having "strong" and "weak" symbols of the same name in 
libc_r.
 2000-03-16 02:14:41 +00:00
jlemon
859f9435c8 Fix uninitialized variable. 
Submitted by:	tanimura
 2000-03-15 15:04:54 +00:00
deischen
228266df11 Fix pthread_suspend_np/pthread_resume_np. For the record, suspending a 
thread waiting on an event (I/O, condvar, etc) will, when resumed using
pthread_resume_np, return with EINTR.  For example, suspending and resuming
a thread blocked on read() will not requeue the thread for the read, but
will return -1 with errno = EINTR.  If the suspended thread is in a critical
region, the thread is suspended as soon as it leaves the critical region.

Fix a bogon in pthread_kill() where a signal was being delivered twice
to threads waiting in sigwait().

Reported by (suspend/resume bug):	jdp
Reviewed by:	jasone
 2000-03-15 13:59:27 +00:00
shin
602b08acfa Merge from NetBSD. Addition of inet_ntop() and inet_pton() description. 
Specified by: Robert Muir <rmuir@looksharp.net>

Obtained from: NetBSD
 2000-03-12 19:38:22 +00:00
shin
12c8708cdb Cosmetic fix. Re-order MLINKS for if_indextoname.3 and inet.3 as alphabetical 
order.
 2000-03-12 19:29:52 +00:00
shin
7fac483886 Correct MLINKS contents for rcmd.3, because it is obsolete due to 
recent changes to rcmd.3.

  links to iruserok_af.3, ruserok_af.3 are removed.
  link to iruserok_sa.3 is added.
 2000-03-12 19:12:03 +00:00
shin
4a9ac000d9 Import from KAME. Advanced API related function descriptions. 
Obtained from: KAME project
 2000-03-12 18:45:49 +00:00