| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Reminded by: bde
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
maintainers.
After we established our branding method of writing upto 8 characters of
the OS name into the ELF header in the padding; the Binutils maintainers
and/or SCO (as USL) decided that instead the ELF header should grow two new
fields -- EI_OSABI and EI_ABIVERSION. Each of these are an 8-bit unsigned
integer. SCO has assigned official values for the EI_OSABI field. In
addition to this, the Binutils maintainers and NetBSD decided that a better
ELF branding method was to include ABI information in a ".note" ELF
section.
With this set of changes, we will now create ELF binaries branded using
both "official" methods. Due to the complexity of adding a section to a
binary, binaries branded with ``brandelf'' will only brand using the
EI_OSABI method. Also due to the complexity of pulling a section out of an
ELF file vs. poking around in the ELF header, our image activator only
looks at the EI_OSABI header field.
Note that a new kernel can still properly load old binaries except for
Linux static binaries branded in our old method.
*
* For a short period of time, ``ld'' will also brand ELF binaries
* using our old method. This is so people can still use kernel.old
* with a new world. This support will be removed before 5.0-RELEASE,
* and may not last anywhere upto the actual release. My expiration
* time for this is about 6mo.
*
|
| |
|
|
|
|
| |
Submitted by: Jim Bloom <bloom@acm.org>
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
connections, after SYN packets were seen from both ends. Before this,
it would get applied right after the first SYN packet was seen (either
from client or server). With broken TCP connection attempts, when the
remote end does not respond with SYNACK nor with RST, this resulted in
having a useless (ie, no actual TCP connection associated with it) TCP
link with 86400 seconds TTL, wasting system memory. With high rate of
such broken connection attempts (for example, remote end simply blocks
these connection attempts with ipfw(8) without sending RST back), this
could result in a denial-of-service.
PR: bin/17963
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
but with `dst_port' work for outgoing packets.
This case was not handled properly when I first fixed this
in revision 1.17.
This change is also required for the upcoming improved PPTP
support patches -- that is how I found the problem.
Before this change:
# natd -v -a aliasIP \
-redirect_port tcp localIP:localPORT publicIP:publicPORT 0:remotePORT
Out [TCP] [TCP] localIP:localPORT -> remoteIP:remotePORT aliased to
[TCP] aliasIP:localPORT -> remoteIP:remotePORT
After this change:
# natd -v -a aliasIP \
-redirect_port tcp localIP:localPORT publicIP:publicPORT 0:remotePORT
Out [TCP] [TCP] localIP:localPORT -> remoteIP:remotePORT aliased to
[TCP] publicIP:publicPORT -> remoteIP:remotePORT
|
|
|
|
|
|
| |
Use .Li for type
Suggested-by: sheldonh
|
|
|
|
|
|
| |
Fix hard sentence breaks.
Submitted by: George Cox <gjvc@sophos.com>
|
|
|
|
|
|
| |
PR: 17681
Submitted by: "David E. Cross" <crossd@cs.rpi.edu>
Obtained from: NetBSD
|
|
|
|
|
| |
Better man formatting
Add reference to multibyte(3)
|
|
|
|
|
|
|
| |
<netch@segfault.kiev.ua>
Remove allocation failure check from 'A' option, the 'X' option does
this as a standalone check now.
|
| |
|
|
|
|
| |
can use its own UDP interface.
|
|
|
|
|
|
|
|
|
| |
- Minor optimizations.
- Minor spelling fixes.
PR: 14305
Submitted by: ume
Rewritten by: ru
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Minor spelling fixes.
- Make IcmpAliasOut2() really work.
Before this change:
# natd -v -n PUB_IFACE -p 12345 -redirect_address 192.168.1.1 P.P.P.P
natd[87923]: Aliasing to A.A.A.A, mtu 1500 bytes
In [UDP] [UDP] X.X.X.X:49562 -> P.P.P.P:50000 aliased to
[UDP] X.X.X.X:49562 -> 192.168.1.1:50000
Out [ICMP] [ICMP] 192.168.1.1 -> X.X.X.X 3(3) aliased to
[ICMP] A.A.A.A -> X.X.X.X 3(3)
# tcpdump -n -t -i PUB_IFACE host X.X.X.X and "(udp or icmp)"
tcpdump: listening on PUB_IFACE
X.X.X.X.49562 > P.P.P.P.50000: udp 3
A.A.A.A > X.X.X.X: icmp: A.A.A.A udp port 50000 unreachable
After this change:
# natd -v -n PUB_IFACE -p 12345 -redirect_address 192.168.1.1 P.P.P.P
natd[89360]: Aliasing to A.A.A.A, mtu 1500 bytes
In [UDP] [UDP] X.X.X.X:49563 -> P.P.P.P:50000 aliased to
[UDP] X.X.X.X:49563 -> 192.168.1.1:50000
Out [ICMP] [ICMP] 192.168.1.1 -> X.X.X.X 3(3) aliased to
[ICMP] P.P.P.P -> X.X.X.X 3(3)
# tcpdump -n -t -i PUB_IFACE host X.X.X.X and "(udp or icmp)"
tcpdump: listening on PUB_IFACE
X.X.X.X.49563 > P.P.P.P.50000: udp 3
P.P.P.P > X.X.X.X: icmp: P.P.P.P udp port 50000 unreachable
|
|
|
|
| |
- Minor spelling fixes.
|
| |
|
|
|
|
| |
Requested by: Charles Mott <cmott@scientech.com>
|
|
|
|
| |
(Sorry, this should be committed with previous commit to Makefile.)
|
|
|
|
| |
Suggested by: bruce
|
|
|
|
|
|
|
|
|
|
| |
INADDR_NONE: Incoming packets go to the alias address (the default)
INADDR_ANY: Incoming packets are not NAT'd (direct access to the
internal network from outside)
anything else: Incoming packets go to the specified address
Change a few inaddr::s_addr == 0 to inaddr::s_addr == INADDR_ANY
while I'm there.
|
|
|
|
|
|
|
|
| |
match the documented interface.
Previously it returned 0 on error.
PR: bin/10511
|
|
|
|
|
|
|
| |
redirected and when no target address has been specified, NAT
the destination address to the alias address rather than
allowing people direct access to your internal network from
outside.
|
| |
|
|
|
|
|
| |
PR: 17360
Submitted by: Andrew J. Korty <ajk@iu.edu>
|
|
|
|
| |
the world build.
|
|
|
|
|
| |
Reword test condition better. Previous variant was true for negative
characters too.
|
|
|
|
|
|
| |
it cause building world failure.
Specified by: Nickolay Dudorov <nnd@mail.nsk.ru>
|
|
|
|
| |
calling ctype functions with signed char as an argument.
|
|
|
|
|
| |
Fixed some style bugs (some usual ones for DPADD and LDADD, and
misformatting of $FreeBSD$).
|
|
|
|
| |
Fixed style bug for LDADD (don't use += for variables defined only once).
|
|
|
|
|
|
| |
modify this file when building GCC 2.96 [by hand or via the port].
Submitted by: Zack Weinberg <zack@wolery.cumb.org>
|
| |
|
|
|
|
|
|
|
| |
some reason. This will prevent an infinite loop if (say) a sigalarm is
being scheduled at a more frequent interval than the poll timeout.
PR: 2191, 8847, 10553
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
A RR is not found.
Reviewed by: shin
|
|
|
|
|
| |
Fixed spelling error in prototype for inet_option_space().
Fixed syntax error in prototype for inet6_option_alloc().
|
| |
|
| |
|
|
|
|
|
|
| |
reflect the fact that aio_cancel() works now.
Submitted by: Christopher Sedore <cmsedore@maxwell.syr.edu>
|
|
|
|
| |
NO_FW_PUNCH isn't defined.
|
|
|
|
| |
rather than getting lucky due to header dependencies.
|
|
|
|
| |
Losh).
|
|
|
|
| |
the .rhosts file just because there is no ending linefeed.
|
|
|
|
| |
libc_r.
|