CVS: cvs.openbsd.org: src

2018-09-17 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2018/09/17 08:07:48

Modified files:
sys/netinet: tcp_input.c 

Log message:
Do not acknowledge a received ack-only tcp packet that we would drop due to
PAWS. Otherwise we could trigger a retransmit of the opposite party with another
wrong timestamp and produce loop. I have seen this with a buggy server which
messed up tcp timestamps.
Suggested by Prof. Jacobson for FreeBSD.

ok krw, bluhm, henning, mpi

CVS: cvs.openbsd.org: src

2018-07-10 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2018/07/10 15:21:56

Modified files:
usr.sbin/ospf6d: ospfe.c rde.c 

Log message:
pledge(2)

Looks great! deraadt@
OK florian
OK remi@

CVS: cvs.openbsd.org: src

2018-07-10 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2018/07/10 06:17:38

Modified files:
usr.sbin/ospf6d: kroute.c 

Log message:
If intra area prefixes move from one router to another router, cloning routes
may become gateway routes and contrary. The kernel does not allow to change the
flags RTF_GATEWAY / RTF_CLONING in RTM_CHANGE messages, but ospf6d tried this
anyway. The result is a broken route.
Instead of modifying such routes remove the old route and insert a new one.

Thanks to Raimund Specht for reporting the problem and testing the fix.

OK claudio@

CVS: cvs.openbsd.org: src

2018-07-10 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2018/07/10 05:49:04

Modified files:
usr.sbin/ospfd : kroute.c 

Log message:
Since we use multiple cloning routes (mpath) if more than one ip address
exists in the same network, the routes are distinguished by their gateway
address, which is the associated interface address.
The ospfd has to track the gateway addresses so that kroute_matchgw() is able to
find the correct routes.

OK claudio@

CVS: cvs.openbsd.org: src

2018-07-10 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2018/07/10 05:22:54

Modified files:
sys/netinet: ip_carp.c 

Log message:
Remove DELAY(1000) from carp_send_arp() / carp_send_na() since it is not clear
why it was necessary.

OK bluhm@
'ok but watch for fallouts' mpi@

CVS: cvs.openbsd.org: src

2018-07-10 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2018/07/10 04:55:21

Modified files:
usr.sbin/ospf6d: kroute.c 

Log message:
Let kroute_matchgw() select the correct route before checking flags.

OK claudio@

CVS: cvs.openbsd.org: src

2017-10-23 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2017/10/23 02:39:26

Modified files:
usr.sbin/cron  : do_command.c 

Log message:
Close cron sockets in child processes.

ok jca@

CVS: cvs.openbsd.org: src

2017-07-24 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2017/07/24 05:00:01

Modified files:
sbin/dhclient  : kroute.c 
sbin/slaacd: frontend.c 
usr.sbin/bgpd  : kroute.c 
usr.sbin/dvmrpd: kroute.c 
usr.sbin/eigrpd: kroute.c 
usr.sbin/ldpd  : kroute.c 
usr.sbin/ospfd : kroute.c 
usr.sbin/ripd  : kroute.c 
usr.sbin/snmpd : kroute.c 

Log message:
Unify ROUNDUP macros for parsing route messages.
Use the macro from route(8) / ospf6d(8) since it works also with argument 0.

OK claudio@

CVS: cvs.openbsd.org: src

2017-06-19 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2017/06/19 13:55:57

Modified files:
usr.sbin/ospf6ctl: ospf6ctl.c 
usr.sbin/ospf6d: kroute.c ospf6d.h rde.c 

Log message:
Import route priority support from ospfd to ospf6d.
Also remove the RTF_UP flag from hdr.rtm_flags in send_rtmsg() since
ospfd and bgpd don't set the flag.

OK bluhm@ claudio@

CVS: cvs.openbsd.org: src

2017-05-30 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2017/05/30 06:42:31

Modified files:
usr.sbin/ospf6d: kroute.c ospf6d.c ospf6d.h rde.c 

Log message:
Adding multipath route support to ospf6d. Almost copied from ospfd.

OK bluhm@

CVS: cvs.openbsd.org: src

2017-05-30 Thread Florian Riehm 
CVSROOT:/cvs
Module name:src
Changes by: fri...@cvs.openbsd.org  2017/05/30 06:09:27

Modified files:
share/man/man9 : mbuf_tags.9 
sys/netinet: ip_carp.c ip_carp.h ip_icmp.c ip_input.c 
sys/netinet6   : icmp6.c ip6_input.c 
sys/sys: mbuf.h 

Log message:
Carp balancing ip does not work since there is a mac filter in
ether_input(). Now we use mbuf tags instead of modifying the MAC
address.

ok mpi@