CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2015/07/19 19:18:33
Modified files:
sys/net: pfvar.h pf.c
Log message:
INET6 is here to stay, so stop hauling around never-compiled code
to optimize for an INET-only kernel, as well as the fantasy
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2015/07/17 23:32:56
Modified files:
usr.sbin/tftpd : tftpd.8 tftpd.c
Log message:
Have tftpd provide a block of random data when clients request the file
/etc/random.seed.
This allows netbooted systems to
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2015/03/18 09:17:46
Modified files:
sys/dev/pci: pcidevs.h
Log message:
sync
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2015/03/18 09:16:52
Modified files:
sys/dev/pci: pcidevs
Log message:
Baytrail/e3800 devices found in MinnowboardMax.
Based on
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2015/03/18 09:31:31
Modified files:
sys/dev/pci: pcidevs_data.h
Log message:
sync
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2015/03/17 19:12:16
Modified files:
share/man/man4 : gre.4
sys/netinet: ip_gre.c
Log message:
handle wccp2 packets if net.inet.gre.wccp is set to 2 by truncating
skipping the wccp 2 header.
CVSROOT:/cvs
Module name:www
Changes by: mcbr...@cvs.openbsd.org 2015/01/01 08:16:16
Modified files:
build : support.dat
Log message:
Remove DixonGroup on request from Jason Dixon.
CVSROOT:/cvs
Module name:www
Changes by: mcbr...@cvs.openbsd.org 2015/01/01 05:15:20
Modified files:
build : support.dat
Log message:
Remove Countersiege.
CVSROOT:/cvs
Module name:www
Changes by: mcbr...@cvs.openbsd.org 2015/01/01 05:16:33
Modified files:
. : support.html
Log message:
sync
CVSROOT:/cvs
Module name:www
Changes by: mcbr...@cvs.openbsd.org 2015/01/01 08:17:03
Modified files:
. : support.html
Log message:
sync
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/12/19 05:31:03
Modified files:
sys/net: pf_lb.c
Log message:
Comment is no longer true, remove it.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/04/29 07:46:55
Modified files:
sys/dev/usb: usbdevs
Log message:
Add Microsoft Wireless Mobile Mouse 3500 and Wireless Arc Mouse.
ok mpi
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/04/29 07:49:19
Modified files:
sys/dev/usb: usbdevs.h usbdevs_data.h
Log message:
regen
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/04/24 06:21:26
Modified files:
lib/libssl/src/ssl: s3_clnt.c s3_lib.c ssl_lib.c
Log message:
KNF
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/04/24 07:06:52
Modified files:
lib/libssl/src/ssl: s3_clnt.c s3_lib.c s3_srvr.c ssl_lib.c
Log message:
More KNF, things that couldn't be verified with md5(1), and some whitespace
I missed on the first
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/04/24 14:44:49
Modified files:
lib/libssl/src/ssl: s3_clnt.c
Log message:
Fix indentation.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/04/15 18:13:30
Modified files:
lib/libssl/src/ssl: s3_srvr.c
Log message:
KNF
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2014/01/01 02:24:54
Modified files:
usr.sbin/mkuboot: copy_elf.c
Log message:
Fix 'make bsd.umg' by skipping PT_OPENBSD_RANDOMIZE segments, as well as
other innocuous segment types (PT_NOTE, PT_NULL).
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2013/12/31 00:15:57
Modified files:
usr.sbin/mkuboot: copy_elf.c
Log message:
s/hphdr/phdr/ to fix compile with DEBUG
ok miod
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2013/06/04 12:49:13
Modified files:
libexec/login_yubikey: login_yubikey.c yubikey.c yubikey.h
Added files:
libexec/login_yubikey: keymaps.h
Log message:
Add handling for keyboard layouts which
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2013/03/27 07:32:29
Modified files:
sys/net: pf_ioctl.c
Log message:
Use the correct src/dst ports depending on direction (one of src or dst was
wrong in each direction).
Report and fix from
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/12/03 05:44:56
Modified files:
sbin/pfctl : pfctl.c
Log message:
Avoid loading garbage hostid and other values not always initialised,
by bzero()ing the 'struct pfsync' properly.
ok dlg mpf
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/12/03 05:46:16
Modified files:
sbin/pfctl : parse.y pfctl.c pfctl_parser.h
Log message:
pfctl_set_hostid always returns 0; don't pretend otherwise and make it a
void function instead.
ok dlg
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/12/01 13:43:03
Modified files:
sys/net: if_pfsync.c
Log message:
Make sure we only enter pf_route() when undefering in the PF_ROUTETO case.
ok dlg claudio
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/11/25 20:28:47
Modified files:
sys/net: if_pfsync.c pf.c pfvar.h
Log message:
Apply route-to to deferred packet; without this the first packet of a
connection does not observe the route-to
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/08/20 00:21:32
Modified files:
sys/net: if_mpe.c if_pppx.c if_vlan.c
Log message:
Fix packet accounting in error cases.
From Christiano F. Haesbaert.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/08/07 20:50:57
Modified files:
share/man/man5 : pf.conf.5
Log message:
sync 'set-tos' with 'tos' keyword (DiffServ is supported by both)
ok deraadt
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/08/02 07:13:57
Modified files:
sys/net: if_pfsync.c pfvar.h
Log message:
Replace one byte of padding with sa_family_t af in pfsync_state_key;
Reject states with pfsync_state-af == 0 in
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/29 04:48:35
Modified files:
sys/net: pf_lb.c
Log message:
Make sure we use the right tbl/dyn pointer to check the pfrkt_refcntcost;
improved debugging for error cases inside the weighted
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/29 04:51:47
Modified files:
share/man/man5 : pf.conf.5
sbin/pfctl : parse.y
Log message:
Remove requirement to quote 'debug' loglevel for the 'debug' option.
ok henning
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/28 08:07:01
Modified files:
sys/kern : kern_malloc_debug.c
Log message:
Kill integer from pointer warning when compiling with MALLOC_DEBUG.
ok kettenis
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/27 04:40:05
Modified files:
regress/sbin/pfctl: Makefile pf46.loaded pf46.ok pf46.optimized
pfr13.in pfr13.ok
Added files:
regress/sbin/pfctl: pfr14.in pfr14.ok
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/27 04:41:31
Added files:
regress/sbin/pfctl: pfr.addrs3
Log message:
oops, missing file for weighted round-robin test.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/26 18:26:10
Modified files:
share/man/man5 : pf.conf.5
sys/net: pf.c pf_lb.c pf_table.c pfvar.h
sbin/pfctl : parse.y pfctl.h pfctl_optimize.c pfctl_parser.c
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/24 06:13:11
Modified files:
sys/net: pf.c
Log message:
OS fingerprinting can only be done on rules that explicitly specify TCP
now, put it in the IPPROTO_TCP case of the pf_test_rule() inner
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/23 20:22:52
Modified files:
regress/sbin/pfctl: pfr.exec pfr13.ok pfr4.ok pfr5.ok pfr6.ok
Log message:
Handle 'show' specially to prepare for regress tests on pfrke_route
and pfrke_cost entries.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/22 08:57:31
Modified files:
sys/net: pf.c
Log message:
Sync 'block return' behaviour for ICMP packets with our IP stack:
Rather than silently dropping ALL icmp packets, return icmp/icmp6
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/13 14:57:10
Modified files:
sbin/pfctl : parse.y
Log message:
Force user to specify protocol when filtering on user, gid, and os
attributes (this is now required by pf_rule_test().
ok sthen
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/13 15:29:07
Modified files:
regress/sbin/pfctl: pf39.in pf39.loaded pf39.ok pf39.optimized
Log message:
Must now specify correct protocol (tcp, udp) for user and group attributes.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/08 00:17:58
Modified files:
regress/sbin/pfctl: pf1.loaded pf1.ok pf1.optimized pf10.loaded
pf10.ok pf10.optimized pf100.loaded pf100.ok
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/08 01:27:38
Modified files:
regress/sbin/pfctl: pf43.in pf43.ok
Log message:
'prio' will be a reserved keyword soon.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/08 15:57:48
Modified files:
regress/sbin/pfctl: Makefile
Added files:
regress/sbin/pfctl: pf101.in pf101.loaded pf101.ok pfail51.in
pfail51.ok
Log message:
Add
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/07 16:32:51
Modified files:
sys/net: pipex.c
Log message:
We should not have any direct initialization of ifq structures.
(in this case it's unnecessary, bss is initialized to zero at boot)
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/06 18:47:19
Modified files:
sys/net: if_pflog.c pf.c pfvar.h
sbin/pfctl : parse.y pfctl_optimize.c
Log message:
Fold pf_test_fragment() into pf_test_rule(), reduce code and
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/06 19:58:12
Modified files:
regress/sbin/pfctl: Makefile pf22.in pf22.ok pf31.in pf31.ok
pf55.in pf55.ok pf95.in pf95.include pf95.ok
pf98.in
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/07/06 20:00:25
Modified files:
sbin/pfctl : pfctl_parser.c
Log message:
Don't print 'keep state' anymore unless it's needed for state options, it's
been implicit for years now.
ok henning@
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/06/14 04:14:01
Modified files:
sys/net: pf.c pf_table.c
Log message:
KNF (no change in .o files)
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/05/12 12:36:07
Modified files:
usr.sbin/ftp-proxy: ftp-proxy.8
Log message:
Make it clear that ftp-proxy needs to make outbound connections.
ok claudio
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2011/01/10 03:26:38
Modified files:
sys/net: pf.c
Log message:
DPFPRINTF already adds the pf: , no need to put it in the error
string.
ok henning dlg claudio
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/09/30 01:14:02
Modified files:
sys/net: pf_table.c
Log message:
Convert printf()'s to DPFDEBUG() macro.
ok dlg
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/09/23 08:17:04
Modified files:
sys/net: pf.c
Log message:
Break out rule counter update code into a separate function, makes the
behaviour consistent between IPv4 and IPv6.
From
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/07/02 20:05:17
Modified files:
sbin/pfctl : pfctl_parser.c
Log message:
Use our own enum here rather than abusing the PF rule type enums, which
will be getting cleaned up soon.
ok henning
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/07/02 20:28:57
Modified files:
sbin/pfctl : parse.y pfctl.c pfctl_parser.c
Log message:
Fix a couple of problems with printing of anchors, in particular recursive
printing, both of inline anchors
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/06/28 17:21:41
Modified files:
sys/net: pf_if.c pf_ioctl.c pfvar.h
sbin/pfctl : pfctl.c
Log message:
Clean up iterface stats handling:
- 'make -Fi' reset ALL the interface
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/06/26 19:28:44
Modified files:
sys/net: pf_ioctl.c
Log message:
Fix DIOCCHANGERULE ioctl broken in the remove of the address pools.
Reported by Alexander Vladimirov.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/05/03 03:38:03
Modified files:
usr.bin/tmux : key-string.c
Log message:
Make C-] and other punctuation-based control key combinations work again.
ok nicm
CVSROOT:/cvs
Module name:www
Changes by: mcbr...@cvs.openbsd.org 2010/03/25 15:06:03
Modified files:
papers : index.html
Added files:
papers/asiabsdcon2010_pf: index.html mgp1.html
mgp1.idx.png mgp1.png
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/20 14:41:17
Modified files:
sys/net: pfvar.h
Log message:
One \ too many in pfvar.h. From Daniel Dickman didick...@gmail.com
ok otto
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/14 13:43:19
Modified files:
sys/net: pf.c
Log message:
henning and I are both dumbasses, testing foo against NULL is pointless.
ok claudio
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/13 18:19:46
Modified files:
sys/net: pf.c
Log message:
When printing states in debug output, print the rule number that created
it if we have it.
Requested by dlg, ok henning.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 07:44:26
Modified files:
sbin/pfctl : parse.y pfctl_parser.c
Log message:
Fix some issues in redir spec handling, discovered thanks to dlg testing
- purge irrelevant addresses from the lists
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 08:49:43
Modified files:
sbin/pfctl : pfctl_parser.c
Log message:
Unbreak 10/8 and friends.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 09:21:24
Modified files:
sbin/pfctl : pfctl_parser.c
Log message:
Only print route specs with @if notation if there is an IP address.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 08:56:23
Modified files:
regress/sbin/pfctl: pf41.in
Log message:
nat-anchor, rdr-anchor, binat-anchor are no longer legal in the grammar.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 08:52:07
Modified files:
sbin/pfctl : parse.y
Log message:
Add restrictions to make @if illegal in outside of routing specs;
Fix binat-to sanity checks.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 09:22:49
Modified files:
sbin/pfctl : parse.y
Log message:
Set roundrobin flag correctly, and don't treat a bare interface
like a dynamic one in the routespec.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 12:18:55
Modified files:
sbin/pfctl : parse.y
Log message:
We actually have to keep the translate/route spec addresses around after
collapsing into tables, so that we can handle all possible
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 17:52:14
Modified files:
regress/sbin/pfctl: Makefile
Log message:
Remove random component of auto-generated table names in loaded rules.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 17:56:14
Modified files:
sbin/pfctl : parse.y
Log message:
Allow /netmask notation in redir spec, fix the rest of the regress
tests for illegal conditions in translation/routing.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 17:57:49
Modified files:
sbin/pfctl : pf_print_state.c
Log message:
In some cases the netmask gets set to a full 128 bit mask even if no
address family is selected; don't print the v6 mask if
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/12 18:08:38
Modified files:
regress/sbin/pfctl: pf13.loaded pf13.ok pf13.optimized
pf17.loaded pf17.ok pf17.optimized
pf18.loaded
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/11 03:29:16
Modified files:
sys/conf : GENERIC
Log message:
Add PIPEX option, disabled by default for now.
ok deraadt yasuoka
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/11 20:20:52
Modified files:
libexec/tftp-proxy: filter.c
sbin/pfctl : parse.y pfctl.c pfctl_optimize.c pfctl_parser.c
pfctl_parser.h pfctl_table.c
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2010/01/11 20:33:28
Modified files:
sbin/pfctl : parse.y
Log message:
Don't leak @if0 format routing host names, pointed out by claudio.
CVSROOT:/cvs
Module name:www
Changes by: mcbr...@cvs.openbsd.org 2009/10/19 21:52:39
Modified files:
. : index.html
Log message:
Point 'Patches' link in sidebar to errata46.html.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/03/14 17:44:09
Modified files:
sys/net: pf.c
Log message:
Some ICMP types that also have icmp_id, pointed out by markus@
ok henning markus
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/03/09 07:53:10
Modified files:
sys/net: pf.c pf_if.c pf_ioctl.c pfvar.h
Log message:
Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls
transactional, closing PRs 4941 and 5910.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/03/06 18:15:41
Modified files:
sys/net: pf.c
Log message:
Make sure pd2 has a pointer to the icmp header in the payload; fixes
panic seen with some some icmp types in icmp error message
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/03/04 20:09:37
Modified files:
sys/net: pf.c pf_lb.c
Log message:
Stricter state checking for ICMP and ICMPv6 packets: include the ICMP type
in one port of the state key, using the type to
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/03/03 22:29:09
Modified files:
etc: rc
Log message:
Don't synchronise carp states in default PF ruleset, these get created
on each host and end up conflicting, so they never sync anyways.
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/02/17 18:53:06
Modified files:
usr.sbin/tcpdump: print-ipsec.c
Log message:
Print spi in lowercase hex for consistency with print-enc.c and ipsecctl.
ok hshoexer msf
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/01/30 03:47:46
Modified files:
sys/netinet6 : in6.c in6_ifattach.c nd6_rtr.c
Log message:
XXX: should this be performed under splnet()?... Yes, yes it should.
Interface configuration causes neighbour
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/01/05 20:11:50
Modified files:
usr.sbin/authpf: authpf.8 authpf.c
Log message:
Support group and login class in authpf.allow (%group, @class)
ok beck
CVSROOT:/cvs
Module name:src
Changes by: mcbr...@cvs.openbsd.org 2009/01/01 15:50:39
Modified files:
usr.bin/systat : pftop.c
Log message:
Unclutter 'systate rules' by printing the flags option using the minimal
pf.conf syntax (flags S/SA is implicit).
ok henning
84 matches
Mail list logo
