IABSD.fr/src/sbin
Branch :
Log
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
 |
3570995a | 2019-01-27 12:40:54 | Implement DNS over TLS (DoT). | |
|
5319ea63 | 2019-01-27 12:39:41 | Add ub_ctx_set_tls() to libunbound to enable DNS over TLS on a context. | |
|
5ec49af2 | 2019-01-27 07:46:49 | unwind(8) traces its ancestry to rad(8) and inherited all of its include directives, some of them no longer necessary. Cleanup by Caspar Schutijser, thank you very much! | |
 |
77941e94 | 2019-01-26 23:26:20 | Rename ACTION_NONE to ACTION_USELEASE. TOK_NOACTION to TOK_USELEASE. More consistent, clearer. | |
|
26cd7ad7 | 2019-01-26 23:14:36 | Zap trailing space that stuck its head up. | |
 |
3ba17eef | 2019-01-26 23:00:12 | Mention that -r does reverse DNS lookups for tables as well OK benno | |
|
f11d3b57 | 2019-01-26 22:55:10 | Add 'uselease' statement to allow the disabling of built-in or previously specified 'append', 'default', 'ignore', 'prepend', or 'supersede' actions on the values provided in leases. | |
|
fdee2cad | 2019-01-26 15:59:05 | fix trustanchor path; from Caspar Schutijser. Thanks! | |
|
a6785e6b | 2019-01-26 10:59:30 | hook up unwind(8) to the build; OK deraadt | |
|
4fce4bd6 | 2019-01-25 17:20:45 | We are not holding on to a ref to the resolver if ub_resolve_event fails. | |
|
e051af97 | 2019-01-25 12:15:49 | configparser.c gets generated by the build infrastructure even though the .y file is not hooked up to the build. But since it works out just fine remove configparser.c and hook up configparser.y. (The same does not hold true for configlexer.lex though.) With this obj/configparser.c is not left behind on make clean. | |
|
e3310efd | 2019-01-25 11:08:03 | make sure resolver exists before sending detailed info | |
|
0ca842bc | 2019-01-25 10:16:13 | typo | |
|
fca6e9cb | 2019-01-25 10:15:12 | We also need to check the rcode in the wire paket. This lets us get past the broken Dutch railway wifi that responds NXDOMAIN if an edns0 option is present. | |
|
82aa2f27 | 2019-01-25 09:12:02 | fix dhclient.conf syntax | |
|
703ca25c | 2019-01-25 08:06:41 | pasto; from Caspar Schutijser, thanks! | |
|
9e627e00 | 2019-01-25 08:06:15 | The correct spelling is AF_ROUTE; from Caspar Schutijser, thanks! | |
 |
bf198cc6 | 2019-01-25 00:19:25 | I am retiring my old email address; replace it with my OpenBSD one. | |
|
d265a5d3 | 2019-01-24 17:39:43 | Open and close listening sockets on localhost:53 depending on if we can resolve at all. We come up without listening and open IPv4 and IPv6 sockets once the resolver process has determinded that we can speak DNS to the outside world. Furthermore close the listening sockets when the resolver process notices that we can no longer speak DNS to the outside. This is a last-ditch effort to get out of libc resolver's way and let it speak directly to e.g. dhcp provided resolvers. With the recomended configuration of having 127.0.0.1 first in /etc/resolv.conf and then add dhcp provided resolvers after that our libc resolver will receive a port unreachable error and immediately switch to the next one if unwind is not listening on port 53. (Networks have been observed in the wild that intercept DNS packets and answer NXDOMAIN if an edns0 option is send with the query.) | |
|
5e1857f6 | 2019-01-24 15:59:32 | fix shift/reduce conflict | |
|
7a211805 | 2019-01-24 15:38:09 | Fix a bunch of shadow and missing prototype compiler warnings. | |
|
71f565e7 | 2019-01-24 15:33:44 | Switch to libunbound internals for packet parsing. These functions / macros (from (s)ldns) are not part of the public libunbound API so we couldn't use them before. Due to the way we use libunbound (a local copy) we now have access. | |
|
8e6382e3 | 2019-01-24 15:32:08 | When we switched from the fork based ub_resolve_async() to ub_resolve_event() the heuristic to detect if the authoritative server is unreachable was adapted in the wrong way. Turns out when using ub_resolve_event() we get the correct rcode passed in (SERVFAIL). The rcode in the wire format answer_packet is still wrong though (NOERROR). But that doesn't matter since we can just check the passed in rcode. | |
|
4e8fa63d | 2019-01-23 23:13:48 | Make route(8) show the same flags in RTM_IFINFO messages as ifconfig(8) shows in its display of interface information. ok bluhm@ | |
|
01254cee | 2019-01-23 22:17:58 | Nuke unused variable. ok phessler@ | |
|
018cebfb | 2019-01-23 13:11:00 | Import unwind(8). unwind(8) is a hybrid validating stub & recursive resolver. It actively observes the local net to decide how to best resolve names. It can chose to recurse on it's own or talk to dhcp provided forwardes or statically defined forwarders in the config file. The intention is to be able to run it on localhost on every machine. "toss it in man" deraadt@ | |
|
ae8c6e27 | 2019-01-23 13:05:26 | Import bits from (lib)unbound that we need for unwind(8). This is probably too much but allows us to keep in sync with usr.sbin/unbound to be able to easily apply updates. | |
 |
cf7e464d | 2019-01-22 16:16:26 | Don't use dangerous idiom for qsort comparison function; ok deraadt@ | |
|
b47fcd70 | 2019-01-22 09:25:29 | PF_ROUTE -> AF_ROUTE in the scattered sock()/setsockopt() calls where the "wrong" #define was used. ok dlg@ | |
|
8de5712f | 2019-01-22 03:48:24 | Simply the logic translating 'egress' into an interface name. | |
|
5fcf5677 | 2019-01-21 11:40:20 | Allocate buffer before using it. Encountered, diagnosed, fix tested and ok jca@ | |
|
10d43c9c | 2019-01-21 02:42:46 | Typo. "nterface" -> "interface" | |
|
b953f70e | 2019-01-20 02:42:24 | Don't delay signal(SIGPIPE, SIG_IGN) until go_daemon() does it. First, go_daemon() may not be called before the first error. Second, go_daemon() doesn't do anything when '-d' is specified. | |
|
9e0312ee | 2019-01-19 21:23:18 | Since there is no more exec()'ing, there is no need to save a copy of the original argv. | |
|
778e9b01 | 2019-01-19 21:07:13 | Since dhclient no longer tries to clean up when exiting, there is no need to start a new copy when LLADDR or SSID changes. Just go back to S_PREBOOT and get a new lease. Fewer log messages, faster join'ing new networks, simpler code. | |
 |
87650b7d | 2019-01-19 21:06:02 | properly error out instead of only printing a warning when some join commands failed OK deraadt@ | |
|
27067056 | 2019-01-19 11:48:54 | Use mnemonic PFCTL_SHOW_* macros, terminate string with null character Tweak spacing while here, no object change. Feedback and OK procter, OK sceloha | |
|
f34bc73f | 2019-01-19 02:55:10 | IMSG_HUP -> IMSG_RESTART. sendhup() -> sendrestart. | |
|
b2ecafd1 | 2019-01-19 02:45:05 | Drop pseudo-signal idiom. Rename INTERNALSIG to TERMINATE. Use RESTART instead of overloading SIGHUP. | |
|
2f40e649 | 2019-01-19 02:20:25 | 'quit' no longer holds signals, so strsignal(quit) is both pointless and now in unreachable code. Simplifies dispatch loops by eliminating most uses of INTERNALSIG. | |
|
64388aac | 2019-01-19 01:53:08 | 'quit' is no longer set in a signal handler so it no longer needs to be sig_atomic_t. Plain int should be sufficient. | |
|
7ee2201b | 2019-01-18 20:25:35 | let users automatically use join to connect to any open wifi network. if a known network is visible, always prefer that instead. requested by many, OK stsp@ | |
|
cde498f7 | 2019-01-18 08:07:19 | Move link state change test & check for new lladdr into interface_state(). Simplifies code a bit. | |
|
15e54e32 | 2019-01-18 07:39:53 | Ignore HUP signals. If you need to modify the running configuration just run dhclient again, which does the same thing. i.e. kills existing dhclient processes and exec's a new copy. One less knob. Improves documention by eliminating very non-standard SIGNALS section. Feedback from schwarze@. ok deraadt@ | |
|
b7989a5d | 2019-01-18 02:16:31 | Oops. Nuke debug statement that snuck it. | |
|
78ba71b6 | 2019-01-18 02:12:36 | Shuffle lease file reading code to improve clarity and shorten some lines. No intentional functional change. | |
|
05f85b70 | 2019-01-18 01:46:11 | Yet another long line broke cover. | |
|
16e0481f | 2019-01-18 01:38:58 | Be consistent in explicitly testing memcmp() return values. | |
|
1a930f45 | 2019-01-17 23:36:20 | Split a long line that wandered into the crosshairs. | |
 |
fb84ebc9 | 2019-01-17 06:24:15 | use $OpenBSD marker | |
|
83d04335 | 2019-01-17 05:17:08 | Split a long line that wandered into the crosshairs. | |
|
5a089f65 | 2019-01-17 04:28:21 | do not allow users to specify "join" or "nwid" twice on the same ifconfig call | |
|
488d3f2b | 2019-01-17 03:21:03 | Move "link X -> Y" debug messages into insterface_state() where the link field is actually modified. Thus catching all places where a link state change might be detected. | |
|
80ea9963 | 2019-01-14 04:54:46 | Make apply_ignore_list(), set_default_hostname(), set_default_client_identifier() and read_resolv_conf_tail() local to clparse.c and just call them from read_conf(). | |
|
a30f5dcb | 2019-01-14 04:05:42 | Abstract allocation and initialization of config global variable into init_config() and just call it from read_conf(). | |
|
73733750 | 2019-01-14 03:05:33 | set_default_client_identifier() only needs the struct ether_addr (a.k.a. ifi->hw_address) rather than the entire struct interface_info. | |
|
5b04ec9b | 2019-01-14 02:51:29 | Check NULLness of ignore list inside apply_ignore_list() and not before calling it. | |
 |
dec45198 | 2019-01-13 23:40:30 | Skip open of "network" ttys because they permanently retain the (large) tty buffers after that. from miod | |
|
75007241 | 2019-01-13 23:15:31 | Abstract /etc/resolv.conf.tail reading out of main() and into a read_resolv_conf_tail() in clparse.c. | |
|
4ea9878f | 2019-01-13 21:55:32 | White space nits. | |
|
1ff1dcb5 | 2019-01-13 18:45:21 | Shuffle apply_ignore_list(), set_default_client_identifier() and set_default_host_name() to clparse.c as they are part of config initialization. First step in cleanup of startup logic. | |
|
7863d357 | 2019-01-11 03:09:24 | Defuse `-F all -i interface' Flushing all filter parameters does not make sense on one specific interface only as already noted. However, the main ruleset as well as all tables were still cleared on such invalid usage. Furthermore, an empty interface name was treated like no interface at all, hence source tracking entries, statistics and interface flags were cleared also. Immediately error out if `-i' is given regardless of its argument before flushing anything. OK sashan | |
|
0de3a0c9 | 2019-01-11 01:56:54 | When creating tables inside anchors, pfctl warned about namespace collisions with global tables, but only in certain cases and with limited information sometimes leaving users clueless. Deferring the check to process_tabledefs() where tables are eventually created, both anchor and table name are known which allows for checking all existing anchors. With this, warn on all duplicates even in dry-runs (`-n') and print quoted names so they can be copied to fix configurations right away. No functional change in parsing or ruleset production. Discussed with and OK sashan | |
|
28535c0a | 2019-01-10 22:22:51 | Zap unnused iface function parameter from pfctl_kill_src_nodes() Killing source tracking entries per interface does not make sense and `-i interface' along with `-K key' is completely ignored anyway. There since import in 2006, probably just copy/pasta. OK sashan | |
|
51b3c07d | 2019-01-10 14:49:07 | "AF_* values are *almost* always the correct choice, particularly with POSIX APIs". Also sprach guenther@. So switch PF_ROUTE to AF_ROUTE in socket() and setsockopt() calls. Keep PF_ROUTE in sysctl(2) uses. adding a comment for future visitors, Also replace PF_UNSPEC with 0 in socketpair(), as socketpair(2) points out this is the only sensible value. Cluebat from and ok guenther@ | |
|
c6eaab57 | 2019-01-09 16:48:36 | Use PF_ROUTE consistently rather than tossing in a couple of AF_ROUTE. | |
|
200415a0 | 2019-01-05 21:40:44 | Simplify and clarify (i.e. shrink) code processing the bpf captures. | |
|
15a89f6d | 2019-01-05 19:59:12 | KNF nit. | |
|
39a868ff | 2019-01-03 22:49:00 | Unbreak build under OPT_DEBUG In r1.39 I removed the `af' parameter from `unmask()' but accidently zapped the macro's closing paranthese. Since DEBUG() is needlessly under an OPT_DEBUG guard, this was not effecting normal builds. Add the missing ')' and remove the ifdef. OK sashan | |
|
641cab3e | 2019-01-03 16:42:30 | The need for separate bpf and routing message buffers was eliminated when dhclient moved to processing the entire buffer rather than trying to process one packet per dispatch() loop. So use ifi->rbuf for both purposes, resizing it during initialization to accommodate the larger of the routing socket read size or the bpf socket read size. Eliminates a calloc()/free() per routing socket read. | |
|
97699edb | 2019-01-02 23:08:00 | Error out on missing table command, zap internal wrapper function Table name and table command require each other as reflected in the synopsis [-t table -T command [address ...]], so print usage and exit if only one of them is given. By moving the inter-dependence check right after option parsing is done, we can bail out even before opening pf(4) and drop the internal wrapper pfctl_command_tables() as unneeded indirection with now duplicate checks. OK sashan | |
|
0912627a | 2019-01-02 22:59:54 | Zap unused segment struct definition There since import and last used by ALTQ which henning removed in 2004. OK sashan | |
|
8d423155 | 2018-12-31 09:30:20 | Explicitly mention that tables created by -T{add,replace} are persistent pf.conf(5)'s TABLE section explains it, but lets be clear about it in the table command descriptions, too. "go for it" jmc | |
|
3b64bb01 | 2018-12-28 16:01:39 | Join other daemons in assuming that a single read from a routing socket may contain more than one RTM_* message. Adopt the claudian variant (pointer arithmetic/comparison) of doing this. The isolation of dhclient in assuming each routing socket read will return only one message pointed out by Gregor Best. | |
|
a0bd5231 | 2018-12-27 17:33:15 | Rename ufdesc to udpfd to make the code slightly more intuitive. | |
|
ad191602 | 2018-12-27 17:19:56 | Rename routehandler() to routefd_handler() to make the code slightly more intuitive. | |
|
991c0c97 | 2018-12-27 17:02:03 | Rename bfdesc to bpffd and packethandler() to bpffd_handler() to make the code slightly more intuitive. | |
|
11311f66 | 2018-12-27 16:33:44 | Zap duplicate struct declaration These are in <net/pfvar.h> already. OK sashan | |
|
72cb5f7a | 2018-12-27 16:15:10 | No need to return early when setting the tick stop. | |
|
65e1198b | 2018-12-25 17:05:56 | No need for magic tick_msg(NULL,..) call to set stop time. The stop time is always config->link_timeout seconds after the first call to tick_msg(). | |
|
d5517169 | 2018-12-24 23:28:20 | Always use log_getverbose() instead of sometimes checking OPT_VERBOSE flag. | |
|
dc4c26ea | 2018-12-24 18:36:24 | tick_msg() needs to note that it has called go_daemon(), since dhclient could have been started with '-d'. Which means go_daemon() may not actually daemonize. Which means isatty(STDERR_FILENO) may always return 1. Which means "... sleeping" messages would be emitted forever. e.g. running with '-d' and never successfully obtaining a lease. | |
|
822e8926 | 2018-12-21 11:16:04 | DIOCIGETIFACES provides interfaces and groups, not drivers "driver" is a left-over from earlier implementations. Nowadays each driver such as lo(4) has it's respective interface group of the same name ("lo"), but additional driver-independent groups exist, too: # ifconfig lo0 group foo # pfctl -s I -i foo foo lo0 OK henning | |
 |
31d62911 | 2018-12-10 13:35:54 | Add a velocity sensor type (displayed as m/s) Change distance sensor type to be displayed as meters with 3 decimals instead of millimeters. ok mpi@ kettenis@ | |
|
712955bd | 2018-12-08 23:06:41 | ssize_t and unsigned int may be different sizes. Use ssize_t instead of unsigned int for value being compared to the results of writev() and sendmsg() calls. Noticed by naddy@ on i386 compile. | |
 |
489f3a3d | 2018-12-07 16:23:57 | Make sure the TAP extension is only added to the vector when needed. Fix a problem reported by Mark Patruck and dhill@ ok markus@, dhill@ | |
 |
4ac228f9 | 2018-12-07 08:42:13 | Make sure that the prefixlen returned by mask2prefixlen6 is never bigger than 128 also fail hard when the mask is non contiguous. OK remi@ | |
 |
1e6179e5 | 2018-12-05 05:04:12 | Unbreak "savecore -c". Also add missing unveil(2) for the raw device. ok mestre | |
|
d7bf2755 | 2018-12-04 14:45:29 | The common autolayout with all partitions needs not at least 10GB to be selected. Adjust documentation. OK krw@ | |
 |
806b0dff | 2018-11-29 00:12:34 | handle tunnel ecn configuration and reporting. tested with normal and special ifconfig builds. ok claudio@ | |
|
03d6ed1c | 2018-11-25 17:12:10 | Remove (unused) FS_BOOT training wheels. If you are allowed to newfs a partition, you obviously know what you are doing. Even (especially?) if the new file system will be ffs or ext2fs. ok deraadt@ as part of larger diff | |
|
e4a1d39e | 2018-11-25 17:01:20 | FS_BOOT partitions are just partitions. Not free(ish) space. ok deraadt@ as part of larger diff | |
|
d7eb32e3 | 2018-11-25 12:14:01 | print more details about the join'd networks we have saved when a user runs ifconfig if joinlist OK stsp@ | |
|
604a778e | 2018-11-25 12:10:38 | merge the wpa related settings, instead of overriding them this fixes setting wpaprotos (e.g. enabling wpa1) OK stsp@ | |
|
176dc6c3 | 2018-11-20 20:49:26 | when printing essids return the number of chars we printed, like printf OK stsp@ | |
 |
d4e625e4 | 2018-11-16 12:25:29 | sort previous; | |
|
b51920ba | 2018-11-16 08:44:28 | vlan uses txprio too | |
|
aa3fb363 | 2018-11-16 01:10:51 | document txprio | |
|
1c605f71 | 2018-11-16 00:58:17 | gre has a few siblings now | |
|
87bce72e | 2018-11-15 03:22:01 | scrub opts dont set tos, so remove it from the scrub_opts struct ok deraadt@ |