CVS: cvs.openbsd.org: src

2022-06-28 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2022/06/28 07:48:06 Modified files: sys/net: pf.c Log message: fix syncookies in conjunction with tcp fast port reuse. This really pointed out that the place syncookies were hooked in was almost,

CVS: cvs.openbsd.org: src

2022-06-13 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2022/06/13 06:48:00 Modified files: sys/net: pf.c Log message: fix logic bug in pf_find_state() a state in PFTM_PURGE could potentially hide another state on the same state key that is active and

CVS: cvs.openbsd.org: src

2020-07-21 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2020/07/21 08:13:18 Modified files: sys/net: pf_ioctl.c Log message: when calculating the ruleset's checksum, skip automatic table names. the checksum is exclusively used for pfsync to verify

CVS: cvs.openbsd.org: src

2020-07-21 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2020/07/21 08:10:51 Modified files: sbin/pfctl : pfctl_optimize.c pfctl_parser.h sys/net: pfvar.h Log message: rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to

CVS: cvs.openbsd.org: src

2018-12-07 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/12/07 05:52:47 Modified files: usr.sbin/dhcpd : pfutils.c Log message: I noticed the "pf table handler" process not going away on dhcpd restart, looked at the error handling here, and oh my. If

CVS: cvs.openbsd.org: src

2018-11-15 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/11/15 06:16:37 Modified files: sys/net: pf.c Log message: in the "pf: key search" debug message, add the direction. interface *and* dir make debugging much easier than the if alone.

CVS: cvs.openbsd.org: src

2018-09-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/09/10 10:07:20 Modified files: sys/net: if.c Log message: if_setrdomain could potentially call if_clone_create recursively in the create rdomain case leading to locking issues and lots of

CVS: cvs.openbsd.org: src

2018-09-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/09/10 09:54:28 Modified files: sys/net: pf_syncookies.c Log message: in pf_syncookie_validate, return early if we don't have syncookies in flight that can possibly match. there is a tiny but

CVS: cvs.openbsd.org: src

2018-09-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/09/09 04:13:21 Modified files: share/man/man4 : rdomain.4 Log message: rdomains can be deleted again - remove caveat, tell ppl how to delete, and show an example. reminded by kn

CVS: cvs.openbsd.org: src

2018-09-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/09/09 04:11:41 Modified files: sys/net: if_loop.c Log message: allow the automatically created loopback interfaces in rdomains to be deleted if the rdomain doesn't contain any other interface.

CVS: cvs.openbsd.org: src

2018-09-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/09/09 04:09:06 Modified files: sys/net: if.c Log message: if_setrdomain: allow empty rtables to be turned into rdomains, not just nonexistant ones as before. nasty error handling with bluhm,

CVS: cvs.openbsd.org: src

2018-09-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/09/09 04:07:38 Modified files: sys/net: rtable.c rtable.h Log message: provide rtable_empty(), returns 1 if the rtable doesn't contain any routes ok bluhm

CVS: cvs.openbsd.org: src

2018-07-12 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/12 13:31:05 Modified files: usr.sbin/ntpd : ntp.c Log message: if we couldn't update the clock for ~1h due to lack of data from peers and sensors, mark us unsynced again. ok reyk krw, pt out /

CVS: cvs.openbsd.org: src

2018-07-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/11 13:52:19 Modified files: sys/net: route.c Log message: superfluous newline

CVS: cvs.openbsd.org: src

2018-07-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/11 05:39:31 Modified files: sys/net: pf.c Log message: the STATE_LOOKUP macro made sense ages ago. It stopped making sense when we moved most of the functionality into a function. g/c the

CVS: cvs.openbsd.org: src

2018-07-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/11 03:08:21 Modified files: sys/net: if.c Log message: in if_addgroup(), call the new pfi_group_addmember() instead of pf_group_change() - the latter is called by _addmemeber now to update

CVS: cvs.openbsd.org: src

2018-07-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/11 03:05:51 Modified files: sys/net: pf_if.c pfvar.h Log message: provide pfi_group_addmember(), which makes the new member interface inherit set flags from the group. ok phessler benno

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 13:28:35 Modified files: etc/examples : pf.conf Log message: we were refering to 10k states by default here as well, pt out by claudio

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 13:27:11 Modified files: share/man/man5 : pf.conf.5 Log message: where we were showing "set limit states 1" make that 100k as well, and adjust adaptive.start/end as well (just like in the

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 10:48:22 Modified files: sys/net: pfvar.h Log message: The year is 2018. Mercury, Bowie, Cash, Motorola and DEC all left us. Just pf still has a default state table limit of 1. Had!

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 07:01:39 Modified files: sys/net: pf.c Log message: in pf_set_protostate(), only decrement the half-open states counter when the state was created on this host, i. e. not for those

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 03:31:07 Modified files: share/man/man5 : pf.conf.5 Log message: document set delay

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 03:30:49 Modified files: sbin/pfctl : parse.y pfctl.c pfctl_parser.c Log message: 'set delay' for the generic packet delay mechanism, ok benno sashan

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 03:30:13 Modified files: sys/net: if.c Log message: if_enqueue: call pf_delay_pkt() if m_pkthdr.pf.delay is set ok benno sashan

CVS: cvs.openbsd.org: src

2018-07-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/07/10 03:28:27 Modified files: sys/net: pf.c pf_ioctl.c pfvar.h sys/sys: mbuf.h Log message: provide a generic packet delay functionality. packets to be delayed are marked by

CVS: cvs.openbsd.org: src

2018-04-02 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/04/02 02:40:46 Modified files: sys/dev/pci: azalia.c Log message: enable snooping on Intel Apollo Lake HD Audio, pt out & ok jsg

CVS: cvs.openbsd.org: src

2018-04-02 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/04/02 02:39:24 Modified files: sys/dev/pci: ichiic.c Log message: attach on Intel Apollo Lake SMBus, ok jsg

CVS: cvs.openbsd.org: src

2018-04-02 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/04/02 02:38:24 Modified files: sys/dev/pci: pcidevs.h pcidevs_data.h Log message: regen

CVS: cvs.openbsd.org: src

2018-04-02 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/04/02 02:37:41 Modified files: sys/dev/pci: pcidevs Log message: add a bunch of Intel Apollo Lake devices found on NUC6CAYH / Celeron J3455 input & ok jsg

CVS: cvs.openbsd.org: www

2018-03-10 Thread Henning Brauer
CVSROOT:/cvs Module name:www Changes by: henn...@cvs.openbsd.org 2018/03/10 23:31:00 Modified files: . : events.html Added files: papers : asiabsdcon2018-xray.pdf asiabsdcon2018-xray-paper.pdf Log message: add my

CVS: cvs.openbsd.org: src

2018-02-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/10 19:17:46 Modified files: sys/net: if_bridge.c Log message: if an interface is added to the bridge that doesn't exist, try to create it triggered by djm's dhclient on vether on bridge

CVS: cvs.openbsd.org: src

2018-02-08 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/08 02:15:46 Modified files: sys/net: pf_syncookies.c pfvar.h sbin/pfctl : parse.y pfctl.c pfctl_parser.h Log message: make the watermarks/thresholds for entering and leaving

CVS: cvs.openbsd.org: src

2018-02-08 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/08 02:14:19 Modified files: share/man/man5 : pf.conf.5 Log message: give jmc another chance to "fix previous" - document syncookies (thanks jmc!)

CVS: cvs.openbsd.org: src

2018-02-07 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/07 19:26:39 Modified files: sbin/pfctl : pfctl.c pfctl_parser.c pfctl_parser.h Log message: show current synflood detection watermarks in pfctl -vsi, for the lack of a more appropriate place. ok

CVS: cvs.openbsd.org: src

2018-02-07 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/07 19:25:44 Modified files: sys/net: pf_ioctl.c pf_syncookies.c pfvar.h Log message: add DIOCGETSYNFLWATS to get current synflood detection watermarks, ok claudio benno procter

CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/06 23:11:43 Modified files: sys/net: pf_ioctl.c Log message: look ma, henning forgot to PF_LOCK/_UNLOCK in the new ioctls, ok procter

CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/06 22:48:47 Modified files: sys/net: pfvar.h pf_syncookies.c Log message: provide counters for # of synfloods detected, # of syncookies sent, # of syncookies successfuly validated, ok

CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/06 16:47:47 Modified files: sbin/pfctl : parse.y pfctl.c pfctl_parser.h Log message: allow control over syncookies: set syncookies never/always/adaptive

CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/06 16:44:48 Modified files: sys/sys: mbuf.h sys/conf : files sys/net: pf.c pf_ioctl.c pfvar.h Log message: syncookies for pf. when syncookies are on, pf will

CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/06 16:37:24 Added files: sys/net: pf_syncookies.c Log message: syncookies implementation to be used in pf, based on the FreeBSD one by Andre Oppermann, heavily adjusted for pf instead of

Re: CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
finger muscles were apparently to sore to include "ok phessler procter" * Henning Brauer <henn...@openbsd.org> [2018-02-06 10:16]: > CVSROOT: /cvs > Module name: src > Changes by: henn...@cvs.openbsd.org 2018/02/06 02:16:11 > > Modified files: >

CVS: cvs.openbsd.org: src

2018-02-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/06 02:16:11 Modified files: sys/net: pf.c pf_if.c pf_ioctl.c pf_lb.c pf_norm.c Log message: some finger muscle workout: bzero -> memset and (very few) bcopy -> memcpy/memmove

CVS: cvs.openbsd.org: src

2018-02-05 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/05 17:05:24 Modified files: usr.sbin/crunchgen: crunchgen.c Log message: chdir to the target directory, run make there and fchdir back after. allows Makefiles with ${.CURDIR} constructs to work with

CVS: cvs.openbsd.org: src

2018-02-04 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/04 22:06:51 Modified files: sys/net: bridgectl.c if_bridge.c Log message: bcmp -> memcmp; kinda req'd / not-just-kinda ok'd by claudio

CVS: cvs.openbsd.org: src

2018-02-04 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2018/02/04 20:51:53 Modified files: sys/net: bridgectl.c if_bridge.c if_bridge.h sbin/ifconfig : brconfig.c ifconfig.8 Log message: implement an arp filter allows arp (and rarp) requests

CVS: cvs.openbsd.org: src

2017-11-13 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/11/13 04:30:11 Modified files: sbin/pfctl : parse.y pfctl_parser.c sys/net: pf.c pf_ioctl.c pfvar.h share/man/man5 : pf.conf.5 Log message: add a generic packet rate

CVS: cvs.openbsd.org: src

2017-08-14 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/08/14 09:58:17 Modified files: sys/net: pf.c pfvar.h Log message: move pf_get_wscale + pf_get_mss prototypes to pfvar.h (diff shrinkage)

CVS: cvs.openbsd.org: src

2017-08-14 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/08/14 09:53:04 Modified files: sbin/pfctl : pfctl_parser.c Log message: expose the half-open tcp states counter, ok bluhm

CVS: cvs.openbsd.org: src

2017-08-14 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/08/14 09:48:29 Modified files: sys/net: pf.c pfvar.h Log message: add half-open tcp states accounting, road paved by sashan increment in pf_create_state(), decrement in pf_set_protostate().

CVS: cvs.openbsd.org: src

2017-08-13 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/08/13 10:57:20 Modified files: sys/net: pf.c pfvar.h Log message: to change a state's state (that term is overloaded in pf, protocol state like ESTABLISHED for tcp here), don't do it directly,

CVS: cvs.openbsd.org: www

2017-06-10 Thread Henning Brauer
CVSROOT:/cvs Module name:www Changes by: henn...@cvs.openbsd.org 2017/06/10 11:46:32 Modified files: . : events.html Log message: link my bsdcan slides

CVS: cvs.openbsd.org: src

2017-06-08 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/06/08 09:39:38 Modified files: share/man/man5 : pf.conf.5 Log message: clarify set prio: the second prio given applies to 1) TCP ACKs 2) packets with ToS=lowdelay and not TCP ACKs that have

CVS: cvs.openbsd.org: src

2017-05-31 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/31 03:30:38 Modified files: share/man/man5 : pf.conf.5 Log message: clarify that translations happen immediately on match rules, not generally Tony Gong

CVS: cvs.openbsd.org: src

2017-05-30 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/30 13:40:55 Modified files: sys/net: pfvar.h Log message: remove XXX from the comments marking "holes" in the ioctls. I see very very little value in these comments at all, but the XXX is

CVS: cvs.openbsd.org: src

2017-05-30 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/30 13:38:47 Modified files: share/man/man4 : pf.4 Log message: remove DIOCCLRRULECTRS here as well, pt out by sashan

CVS: cvs.openbsd.org: src

2017-05-30 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/30 13:37:54 Modified files: sys/net: pf_ioctl.c pfvar.h Log message: g/c DIOCCLRRULECTRS kinda deprecated for a decade now, nothing in base uses it, nothing in ports uses it (thanks sthen)

CVS: cvs.openbsd.org: src

2017-05-30 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/30 06:13:04 Modified files: sbin/pfctl : pfctl.c Log message: fix a comment

CVS: cvs.openbsd.org: src

2017-05-30 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/30 02:10:01 Modified files: sys/net: pf.c pfvar.h Log message: teach pf_build_tcp() about SACK, ok & with sashan

CVS: cvs.openbsd.org: src

2017-05-28 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/28 18:05:28 Modified files: share/misc : airport Log message: mlarkin and airport.7 say "must have been there", not "flown there". Add XFW, Hamburg-Finkenwerder (the Airbus factory) ok mlarkin

CVS: cvs.openbsd.org: src

2017-05-28 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/28 09:16:52 Modified files: usr.sbin/bgpd : bgpd.conf.5 Log message: we're not hardcoded to table 0 any more

CVS: cvs.openbsd.org: src

2017-05-28 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/05/28 09:16:33 Modified files: usr.sbin/bgpd : bgpd.c bgpd.h config.c kroute.c parse.y Log message: so far, bgpd was hardcoded to use rtable 0 for nexthop verification. instead, use the rtable bgpd

CVS: cvs.openbsd.org: src

2017-04-26 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2017/04/26 04:42:38 Modified files: sbin/iked : iked.h ikev2.c ikev2_msg.c Log message: cope with IP address changes. before, we were trying to resend the msg with the no-longer-available address over

CVS: cvs.openbsd.org: src

2016-10-18 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/10/18 07:28:01 Modified files: sys/net: pf.c pfvar.h Log message: split pf_send_tcp() into the part that builds the mbuf and the actual sending, needed soon. ok sashan mikeb lteo

CVS: cvs.openbsd.org: src

2016-10-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/10/09 12:01:57 Modified files: sys/net: pf.c Log message: formatting nit (a tab got lost somewhen)

CVS: cvs.openbsd.org: src

2016-09-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/09/06 05:06:41 Modified files: libexec/spamd : spamd.c Log message: must close our fd unconditionally and not just in the !TLS case; tls_close doesn't do that for us. found, analyzed and patch

CVS: cvs.openbsd.org: src

2016-09-01 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/09/01 10:18:09 Modified files: regress/sbin/pfctl: pf13.in pf13.loaded pf13.ok pf13.optimized Log message: no route-to/reply-to/dup-to on block rules, aka make this pass again triggered by bluhm's

CVS: cvs.openbsd.org: src

2016-07-19 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/07/19 07:34:12 Modified files: sys/net: pf_osfp.c pf_ruleset.c Log message: style: no spaces after # for define/include, ok phessler benno

CVS: cvs.openbsd.org: src

2016-07-19 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/07/19 07:30:51 Modified files: sys/net: pfvar.h Log message: don't hide globals between function prototypes; ok phessler benno

CVS: cvs.openbsd.org: src

2016-07-19 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/07/19 06:51:19 Modified files: sys/net: pf_lb.c Log message: remove wrong and misleading comment, ok phessler

CVS: cvs.openbsd.org: src

2016-07-18 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/07/18 13:11:18 Modified files: sys/net: pfvar.h sbin/pfctl : pfctl_parser.h Log message: no more cbq_opts - CBQ is gone, ok mpi phessler benno

CVS: cvs.openbsd.org: src

2016-07-18 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/07/18 09:21:33 Modified files: sbin/pfctl : parse.y Log message: g/c unused (global!) var: oqueues isn't used any more. ALTQ leftover; not noticed since struct node_queue stayed. ok claudio benno

CVS: cvs.openbsd.org: src

2016-06-23 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/06/23 03:08:56 Modified files: sys/netinet: ip_output.c Log message: when pf_test returns something but PF_PASS, set error to EACCES instead of EHOSTUNREACH. On the latter, ip_forward can generate

CVS: cvs.openbsd.org: src

2016-06-16 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/06/16 09:46:20 Modified files: sbin/pfctl : parse.y Log message: allow include in inline anchors with this, anchor foo { include "/path/to/rules" } works and "load anchor" is obsolete, to be

CVS: cvs.openbsd.org: src

2016-05-25 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/05/25 05:50:05 Modified files: usr.sbin/bgpctl: bgpctl.8 Log message: flesh out "show summary" description a bit, from julien at dhaille.com via jmc, ok benno claudio

CVS: cvs.openbsd.org: src

2016-01-14 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2016/01/14 05:05:51 Modified files: sbin/pfctl : pfctl.c Log message: detect multiple root queues on a single interface and give a nice error message - beats "pfctl: DIOCXCOMMIT: Invalid argument". from

CVS: cvs.openbsd.org: www

2015-12-22 Thread Henning Brauer
CVSROOT:/cvs Module name:www Changes by: henn...@cvs.openbsd.org 2015/12/22 06:13:51 Modified files: openbgpd : papers.html Log message: add some newer presentations; from TJ (at mrsk.de), thanks!

CVS: cvs.openbsd.org: www

2015-12-22 Thread Henning Brauer
CVSROOT:/cvs Module name:www Changes by: henn...@cvs.openbsd.org 2015/12/22 06:13:28 Modified files: openbgpd : index.html Log message: wording fixes + bump copyright; from TJ (at mrsk.de), thanks!

CVS: cvs.openbsd.org: src

2015-12-06 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/12/06 03:03:23 Modified files: sys/net: pf.c Log message: g/c pf_change_a6(). it's exactly the same thing as pf_change_ap() with p = NULL. inspired by Richard Procter

CVS: cvs.openbsd.org: src

2015-12-05 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/12/05 07:58:06 Modified files: sys/net: pf.c Log message: pass a pointer to pf_test()'s reason to pf_test_rule instead of using a local one. While we always intended to keep the logging in

CVS: cvs.openbsd.org: src

2015-12-05 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/12/05 13:32:53 Modified files: libexec/spamd : spamd.c Log message: adjust to newer tls_read/_write semantics. quite involved, due to tls_read potentially needing to write and tls_write potentially

CVS: cvs.openbsd.org: src

2015-12-05 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/12/05 14:23:51 Modified files: sys/net: pf.c Log message: g/c unneeded af (address family) params to pf_change_ap and _icmp both af and naf (af-to case) are in the pf_pdesc some code shuffling

CVS: cvs.openbsd.org: src

2015-12-02 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/12/02 12:03:17 Modified files: libexec/spamd : spamd.c Log message: fix error messages to say tls_write after tls_write and not tls_read... with bluhm

CVS: cvs.openbsd.org: src

2015-12-02 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/12/02 14:10:17 Modified files: libexec/spamd : spamd.c Log message: in response to EHLO, don't offer STARTTLS if we already completed the STARTTLS dance. ok millert

CVS: cvs.openbsd.org: src

2015-05-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/05/11 06:22:14 Modified files: sys/net: pf.c Log message: fix a potential use-after-free in pf_state_rm_src_node found by jsg; ok jsg mikeb

CVS: cvs.openbsd.org: src

2015-04-29 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/04/29 03:58:16 Modified files: sbin/disklabel : disklabel.8 disklabel.c editor.c extern.h Log message: support passing a template file for the auto-allocation to disklabel. template gives mountpoints,

CVS: cvs.openbsd.org: src

2015-04-29 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/04/29 10:56:31 Modified files: sbin/disklabel : disklabel.8 disklabel.c Log message: some fine-tuning in SYNOPSIS, usage, and order of options, with jmc

CVS: cvs.openbsd.org: src

2015-04-29 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/04/29 10:46:39 Modified files: sbin/disklabel : editor.c Log message: g/c unneeded second char * var, ok benno

CVS: cvs.openbsd.org: src

2015-04-26 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/04/26 08:49:24 Modified files: distrib/miniroot: install.sub Log message: get_responsefile: instead of keeping the dhcp-supplied next-server where we fetch the response file from in a local _server

CVS: cvs.openbsd.org: src

2015-04-21 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/04/21 04:58:29 Modified files: distrib/miniroot: install.sub Log message: append the setdir (5.7/amd64, snapshots/vax) as get-parameter path when fetching the autoinstall response file. a webserver

CVS: cvs.openbsd.org: src

2015-03-24 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/03/24 12:25:27 Modified files: usr.sbin/ntpd : ntp_dns.c Log message: instead of routing SIGHUP thru sighdlr_dns() which then ignores it, ignore it directly. no functional change. Rafael Neves

CVS: cvs.openbsd.org: www

2015-03-14 Thread Henning Brauer
CVSROOT:/cvs Module name:www Changes by: henn...@cvs.openbsd.org 2015/03/14 20:39:44 Modified files: papers : index.html Log message: link my asiabsdcon slides

CVS: cvs.openbsd.org: src

2015-03-03 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/03/03 04:14:00 Modified files: sys/net: hfsc.c Log message: make sure hfsc_attach, hfsc_detach, hfsc_addqueue, hfsc_delqueue and hfsc_qstats cope with a NULL ifp. Can happen when refering to

Re: CVS: cvs.openbsd.org: src

2015-02-15 Thread Henning Brauer
0xff suggested by benno. ok benno if henning doesnt like it he can change it when he recovers from jet-lag nope, perfectly fine. Thanks for handling and sorry for missing this case. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services GmbH, http://bsws.de, Full-Service ISP

CVS: cvs.openbsd.org: src

2015-02-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/11 18:29:14 Modified files: share/man/man5 : pf.conf.5 Log message: a shot at documenting the changed log(matches) semantics

CVS: cvs.openbsd.org: src

2015-02-11 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/11 18:24:10 Modified files: sys/net: if_pflog.c if_pflog.h pf.c pfvar.h Log message: change log(matches) semantics slightly to make it more useful. since it is a debug tool change of

CVS: cvs.openbsd.org: src

2015-02-10 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/10 02:28:40 Modified files: sys/net: if_pfsync.c pf.c pfvar.h Log message: include the set prio values. no real compat issue since we're using spare bytes. old - new ends up with set prio

CVS: cvs.openbsd.org: src

2015-02-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/09 23:45:55 Modified files: sys/net: pf.c pf_ioctl.c pfvar.h sbin/pfctl : parse.y pfctl_parser.c Log message: since we inherit prio (as in, the queuing priority) from outside

CVS: cvs.openbsd.org: src

2015-02-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/09 23:47:08 Modified files: share/man/man5 : pf.conf.5 Log message: document matching on prio

CVS: cvs.openbsd.org: src

2015-02-09 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/09 04:01:21 Modified files: share/dict : propernames Log message: tedu Henning and Miod, please add your names to src/share/dict/propernames

CVS: cvs.openbsd.org: src

2015-02-07 Thread Henning Brauer
CVSROOT:/cvs Module name:src Changes by: henn...@cvs.openbsd.org 2015/02/07 02:15:25 Modified files: sys/net: pf.c Log message: pf synproxy will do the 3WHS on behalf of the target machine, and once the 3WHS is completed, establish the backend connection. The

  1   2   3   4   5   6   7   >