| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
These tools declare global variables without using the static keyword,
even though their use is limited to a single C-file, or without placing
an extern declaration of them in the proper header file.
|
|
|
|
| |
Approved by: kib
|
|
|
|
|
|
| |
This should preserve POLA in all other cases (foreground || non-dynamic).
MFC after: 2 weeks
|
|
|
|
|
|
|
|
|
|
|
| |
background.
Suggested by: Garrett Cooper <yanegomi@gmail.com>
Use EAGAIN instead of magic value of -2 to report this condition from the
SetAliasAddressFromIfName routine.
MFC after: 2 weeks
|
|
|
|
|
|
|
| |
This can happen during start-up, when natd starts before dhclient has a
chance to receive IP address from the upstream provider.
MFC after: 2 weeks
|
|
|
|
| |
Submitted by: Marius NĂ¼nnerich <marius@nuenneri.ch>
|
|
|
|
| |
Submitted by: Marius NĂ¼nnerich <marius nuenneri ch>
|
|
|
|
|
|
|
|
|
| |
Fix some wrong usages.
Note: this does not affect generated binaries as this argument is not used.
PR: 137213
Submitted by: Eygene Ryabinkin (initial version)
MFC after: 1 month
|
|
|
|
|
|
| |
to overflow.
MFC after: 5 days.
|
|
|
|
|
| |
PR: bin/58696
Submitted by: sp@alkor.ru
|
|
|
|
|
|
|
| |
on -redirect_XXX arguments length.
PR: bin/86647
Submitted by: Stephen Hurd <shurd@sasktel.net>
|
|
|
|
|
|
| |
is sufficient
MFC after: 2 weeks
|
|
|
|
|
|
|
|
|
| |
Add a MULTIPLE INSTANCES section which provides an example of
setting up natd in multi-instance mode (based on the notes.natd
file from phk@).
Submitted by: "Andrey V. Elsukov" <bu7cher@yandex.ru>
Reviewed by: ru
|
|
|
|
|
|
| |
Bump .Dd.
PR: 41807
|
| |
|
| |
|
|
|
|
|
|
| |
file format and about using NAT "instances".
Submitted by: "Andrey V. Elsukov" <bu7cher@yandex.ru>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
With the first part of my previous Summer of Code work, we get:
-made libalias modular:
-support for 'particular' protocols (like ftp/irc/etcetc) is no more
hardcoded inside libalias, but it's available through external
modules loadable at runtime
-modules are available both in kernel (/boot/kernel/alias_*.ko) and
user land (/lib/libalias_*)
-protocols/applications modularized are: cuseeme, ftp, irc, nbt, pptp,
skinny and smedia
-added logging support for kernel side
-cleanup
After a buildworld, do a 'mergemaster -i' to install the file libalias.conf
in /etc or manually copy it.
During startup (and after every HUP signal) user land applications running
the new libalias will try to read a file in /etc called libalias.conf:
that file contains the list of modules to load.
User land applications affected by this commit are ppp and natd:
if libalias.conf is present in /etc you won't notice any difference.
The only kernel land bit affected by this commit is ng_nat:
if you are using ng_nat, and it doesn't correctly handle
ftp/irc/etcetc sessions anymore, remember to kldload
the correspondent module (i.e. kldload alias_ftp).
General information and details about the inner working are available
in the libalias man page under the section 'MODULAR ARCHITECTURE
(AND ipfw(4) SUPPORT)'.
NOTA BENE: this commit affects _ONLY_ libalias, ipfw in-kernel nat
support will be part of the next libalias-related commit.
Approved by: glebius
Reviewed by: glebius, ru
|
|
|
|
|
|
| |
- Use const where necessary
- Use __unused where applicable
- Rename variables that is conflicit with global definations
|
| |
|
| |
|
|
|
|
| |
This makes it possible to do load-sharing on two xDSL lines etc.
|
|
|
|
|
|
| |
PR: 46761
Philipp Mergenthaler <philipp.mergenthaler@stud.uni-karlsruhe.de>
|
| |
|
|
|
|
| |
Use WARNS?= instead of WARNS=.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Skinny is the protocol used by Cisco IP phones to talk to Cisco Call
Managers. With this code, one can use a Cisco IP phone behind a FreeBSD
NAT gateway.
Currently, having the Call Manager behind the NAT gateway is not supported.
More information on enabling Skinny support in libalias, natd, and ppp
can be found in those applications' manpages.
PR: 55843
Reviewed by: ru
Approved by: ru
MFC after: 30 days
|
|
|
|
|
|
| |
PR: docs/46286
- "IP number" -> "IP address", for consistency.
|
|
|
|
|
| |
PR: bin/37159
Submitted by: "Aleksandr A. Babaylov" <.@babolo.ru>
|
|
|
|
|
|
|
| |
options are not required.
Suggested by: Vaclav Petricek
MFC after: 2 weeks
|
|
|
|
|
|
|
| |
While there's probably a better way to achieve the same,
nothing precludes us from using natd(8) on tun(4) links.
Noticed by: bde
|
|
|
|
| |
Reviewed by: ru
|
| |
|
|
|
|
| |
especially in troff files.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
I'll still be overseeing the changes that go into natd(8) and
will maintain it the way I see it, non-preventing for the rest
of developers.
I will re-ask for the MAINTAINER bit if the ${MAINTAINER} gets
defined.
|
|
|
|
|
|
|
|
|
|
|
|
| |
not return ENOBUFS for unreliable protocols like divert.
This should fix an issue when natd(8) keeps spamming already
full dummynet(4) queues with the same packet forever.
Spotted by: chkno@dork.com
Explained by: luigi
Reviewed by: Ari Suutari <ari.suutari@syncrontech.com>
MFC after: 2 weeks
|
| |
|
|
|
|
|
|
| |
Binary builds that cannot handle this must explicitly set WARNS=0.
Reviewed by: mike
|
|
|
|
| |
Discussed with: phk
|
| |
|
|
|
|
|
|
|
|
|
| |
Set 'log_ipfw_denied' option if you want the old behaviour.
PR: 30255
Submitted by: Flemming "F3" Jacobsen <fj@batmule.dk>
Reviewed by: phk
MFC after: 4 weeks
|
|
|
|
|
|
|
| |
Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text.
Not only this slows down the mdoc(7) processing significantly, but it also
has an undesired (in this case) effect of disabling hyphenation within the
entire enclosed block.
|
| |
|
|
|
|
|
|
| |
missed that natd has a -v option that will give similar functionality.
Requested by: ru
|
|
|
|
|
|
|
| |
of a restrictive firewall rule, also report detail on the packet
that caused the failure.
MFC after: 3 days
|
| |
|
|
|
|
| |
- MAN[1-9] -> MAN.
|