extend BPF filter drop to allow not capturing packets

2019-03-04 Thread David Gwynne
this extends the fildrop mechanism so you can drop the packets with bpf using the existing fildrop method, but with an extra tweak so you can avoid the cost of copying packets to userland. i wanted to quickly drop some packets in the rx interrupt path to try and prioritise some traffic getting

Re: Patch: relayd support for HTTP 101 Switching Protocols

2019-03-04 Thread Sebastian Benoit
Hi, thanks for bringing this to my attention, i've commited my latest diff. /Benno Daniel Lamando(d...@danopia.net) on 2019.02.28 21:09:35 -0800: > Hi all, > > I noticed that relayd doesn't support Websocket connections. > When a Websocket request is forwarded through relayd, > the handshake

Re: Pass IPv6 through pppx(4)

2019-03-04 Thread David Gwynne
ok. > On 5 Mar 2019, at 02:46, Denis Fondras wrote: > > Simple diff to allow IPv6 through pppx(4). > > Denis > > Index: net/if_pppx.c > === > RCS file: /cvs/src/sys/net/if_pppx.c,v > retrieving revision 1.66 > diff -u -p -r1.66

Re: Patch: relayd support for HTTP 101 Switching Protocols

2019-03-04 Thread Alexander Bluhm
On Mon, Mar 04, 2019 at 07:53:04PM +0100, Sebastian Benoit wrote: > > The RFC says it must be a GET request. We should check at least > > this. If we check more, an attacker can create less dubious states. > > thx, I was looking for something like that and could not find it. > Where? RFC 6455,

Re: Patch: relayd support for HTTP 101 Switching Protocols

2019-03-04 Thread Sebastian Benoit
Alexander Bluhm(alexander.bl...@gmx.net) on 2019.03.04 17:44:08 +0100: > On Sat, Mar 02, 2019 at 12:13:20AM +0100, Sebastian Benoit wrote: > > --- usr.sbin/relayd/parse.y > > +++ usr.sbin/relayd/parse.y > > @@ -176,6 +176,7 @@ typedef struct { > > %token TO ROUTER RTLABEL TRANSPARENT TRAP

Pass IPv6 through pppx(4)

2019-03-04 Thread Denis Fondras
Simple diff to allow IPv6 through pppx(4). Denis Index: net/if_pppx.c === RCS file: /cvs/src/sys/net/if_pppx.c,v retrieving revision 1.66 diff -u -p -r1.66 if_pppx.c --- net/if_pppx.c 11 Jul 2018 21:18:23 - 1.66 +++

Re: Patch: relayd support for HTTP 101 Switching Protocols

2019-03-04 Thread Alexander Bluhm
On Sat, Mar 02, 2019 at 12:13:20AM +0100, Sebastian Benoit wrote: > --- usr.sbin/relayd/parse.y > +++ usr.sbin/relayd/parse.y > @@ -176,6 +176,7 @@ typedef struct { > %token TO ROUTER RTLABEL TRANSPARENT TRAP UPDATES URL VIRTUAL WITH TTL > RTABLE > %token MATCH PARAMS RANDOM

Re: mail(1): use "sendmail" as argv[0] for sendmail

2019-03-04 Thread Theo de Raadt
Todd C. Miller wrote: > On Mon, 04 Mar 2019 16:38:37 +0100, Gilles Chehade wrote: > > > I wish we had an historian who could enlighten us as to why both exist. > > That code actually predates sendmail and was in the original revision > when delivermail was still in use. Sendmail itself never

Re: mail(1): use "sendmail" as argv[0] for sendmail

2019-03-04 Thread Todd C . Miller
On Mon, 04 Mar 2019 16:38:37 +0100, Gilles Chehade wrote: > I wish we had an historian who could enlighten us as to why both exist. That code actually predates sendmail and was in the original revision when delivermail was still in use. Sendmail itself never checked its argv[0] for "send-mail"

Re: mail(1): use "sendmail" as argv[0] for sendmail

2019-03-04 Thread Gilles Chehade
On Fri, Mar 01, 2019 at 03:16:26PM +0200, Lauri Tirkkonen wrote: > For some reason mail(1) is using "send-mail" as argv[0] for sendmail. > /etc/mailer.conf and smtpctl handle this identically to "sendmail", so > it seems a bit redundant. This diff makes mail(1) use "sendmail" as > argv[0],

Re: update xserver to version 1.19.7

2019-03-04 Thread Jeremie Courreges-Anglas
On Sun, Mar 03 2019, Matthieu Herrb wrote: > Hi, > > the patch below updates the X server to version 1.19.7. It's a bug-fix > release. You'll find the change log at the begining of the patch. > > To test, apply the patch with patch -p0 -E in /usr/xenocara/xserver, > and then re build xenocara as

httpd: New log format to log X-Forwarded-{For|Port} headers

2019-03-04 Thread Bruno Flueckiger
Hi, I've completely reworked my patch for httpd(8). The last patch broke the log format combined. And the config option was ugly. This time I've added another log format called forwarded. It appends two fields to the log format combined: The first field contains the value of the header

Re: interface queue drops in systat again, plus netstat

2019-03-04 Thread Claudio Jeker
On Mon, Mar 04, 2019 at 09:17:00PM +1000, David Gwynne wrote: > this combines errors and qdrops into fails, and shows them by default. > if you want to look at drops or errors, you can use d or f to switch to > that view. > > this also changes netstat so it shows fails by default which is a >

Re: mandoc -Tlint systat.1 fix

2019-03-04 Thread Ingo Schwarze
Hi David, David Gwynne wrote on Mon, Mar 04, 2019 at 08:59:12PM +1000: > lint thinks uvm_swap_get() looks like a function name, > so this uses .Fn to mark it up as one. > > ok? Sure. Given that the function uvm_swap_get() appears to be important enough to be mentioned even in a userland

interface queue drops in systat again, plus netstat

2019-03-04 Thread David Gwynne
this combines errors and qdrops into fails, and shows them by default. if you want to look at drops or errors, you can use d or f to switch to that view. this also changes netstat so it shows fails by default which is a combination of errors and qdrops too, but -d and -e force drops or errors

mandoc -Tlint systat.1 fix

2019-03-04 Thread David Gwynne
lint thinks uvm_swap_get() looks like a function name, so this uses .Fn to mark it up as one. ok? Index: systat.1 === RCS file: /cvs/src/usr.bin/systat/systat.1,v retrieving revision 1.110 diff -u -p -r1.110 systat.1 --- systat.1