summaryrefslogtreecommitdiffstats
path: root/sbin
Commit message (Collapse)AuthorAgeFilesLines
* In reference to previous commit: use err(3).nectar2002-09-091-4/+2
| | | | Noticed by: bde
* Back out previous commit. I was a bit overzealous: the fd_set size isnectar2002-09-091-2/+0
| | | | calculated dynamically here.
* Check for FD_SET overrun.nectar2002-09-091-0/+2
|
* Check for FD_SET overrun.nectar2002-09-091-0/+4
|
* Typo: s/o packet/on packet/blackend2002-09-081-1/+1
| | | | | PR: docs/42543 Submitted by: Michael Lyngbøl <lyngbol@bifrost.lyngbol.dk>
* Split cam_argmask and move "commands" into cam_cmdmask. This addressesmdodd2002-09-081-94/+102
| | | | | | | the issue of not having any free bits left for additional commands. Approved by: ken MFC after: 4 weeks
* Bandaid for mount_nfs segfaulting with the more obscure mount optionspeter2002-09-061-22/+34
| | | | | | | | | | | | in /etc/fstab. This isn't a real fix though and I'm still not sure why it started failing. mount(8) breaks up the nfs args into seperate repeated '-o option=value' arguments. But, the altflags variable that we use to track things is incrementally built up each time we see the next option and shows us the cumulative set of flags, not just the flag that we are currently looking at. As a result, the strstr hack for looking up flags in a giant -o opt=val,opt=val, etc string was failing and causing a segfault. I do not know what changed recently that caused this to suddenly break, but the code has been rather bogus for some time.
* Add 'camcontrol load' as a complement to 'camcontrol eject'.mdodd2002-09-062-1/+11
| | | | | Approved by: ken MFC after: 4 weeks
* Removed vestiges of the -a and -d options.bde2002-09-061-5/+3
| | | | Fixed other bugs in the usage message so that it matches the man page.
* Remove the -a maxcontig option, the kernel doesn't inspect fs_maxcontigphk2002-09-062-27/+3
| | | | | | anymore. Sponsored by: DARPA & NAI Labs.
* use 'file system superblock' for the error message. This will match othertrhodes2002-08-311-1/+1
| | | | | | disk utilities. Discussed with: bde
* Mention that fdisk(8) should be used to grow the containing slicekeramida2002-08-291-0/+6
| | | | | | | before growing partitions with growfs(8), if necessary. PR: docs/42148 Submitted by: Chris S.J. Peron <maneo@bsdpro.com>
* Add the -A flag to the usage line.iedowse2002-08-271-1/+1
| | | | | Submitted by: Yutaka KAWASE <yutaka@mailhost.net> MFC after: 3 days
* Fix some 'SYNOPSIS' and 'usage' messages.trhodes2002-08-278-10/+10
|
* Fix Synopsistrhodes2002-08-261-1/+1
|
* Unbreak the -c option by not using connect(2) for mount_nfs'siedowse2002-08-261-1/+2
| | | | | | | communication with the remote NFS server if this flag is specified. PR: bin/42003 Submitted by: Jean-Luc Richier <Jean-Luc.Richier@imag.fr>
* Print a more realistic usage message 'special_device' 'inode_number'. Thistrhodes2002-08-261-2/+2
| | | | | | matches the synopsis given in the manual page. MFC after: 3 days
* Replace various spelling with FALLTHROUGH which is lint()ablecharnier2002-08-257-18/+20
|
* Check if a host argument is a IPv6 presentation format address beforecjc2002-08-251-6/+6
| | | | | | | going to gethostbyname2(3). PR: bin/31632 MFC after: 3 days
* Make this compile without needing NO_WERROR.peter2002-08-251-1/+1
|
* Use '0' instead of NULL when we mean the integer constant 0 and not aimp2002-08-211-1/+1
| | | | "null pointer expression".
* s/filesystem/file system/g as discussed on -developerstrhodes2002-08-21111-870/+870
|
* Don't use NULL where you really mean 0 to sysctlbyname.imp2002-08-211-1/+1
|
* Whoops, the manpage lied... ipfw2 has always accepted addr:maskluigi2002-08-211-11/+14
| | | | specifications.
* Take care of WARNS=3 warnings by using unsigned/signed variablejohan2002-08-201-6/+7
| | | | | | as needed. Approved by: ken, sheldonh (mentor)
* Implement user-setable promiscuous mode (a new `promisc' flag for ifconfig(8)).sobomax2002-08-192-1/+7
| | | | | | | | | Also, for all interfaces in this mode pass all ethernet frames to upper layer, even those not addressed to our own MAC, which allows packets encapsulated in those frames be processed with packet filters (ipfw(8) et al). Emphatically requested by: Anton Turygin <pa3op@ukr-link.net> Valuable suggestions by: fenner
* One more (hopefully the last one) step in cleaning up the syntax,luigi2002-08-192-61/+102
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | following Julian's good suggestion: since you can specify any match pattern as an option, rules now have the following format: [<proto> from <src> to <dst>] [options] i.e. the first part is now entirely optional (and left there just for compatibility with ipfw1 rulesets). Add a "-c" flag to show/list rules in the compact form (i.e. without the "ip from any to any" part) when possible. The default is to include it so that scripts processing ipfw's canonical output will still work. Note that as part of this cleanup (and to remove ambiguity), MAC fields now can only be specified in the options part. Update the manpage to reflect the syntax. Clarify the behaviour when a match is attempted on fields which are not present in the packet, e.g. port numbers on non TCP/UDP packets, and the "not" operator is specified. E.g. ipfw add allow not src-port 80 will match also ICMP packets because they do not have port numbers, so "src-port 80" will fail and "not src-port 80" will succeed. For such cases it is advised to insert further options to prevent undesired results (e.g. in the case above, "ipfw add allow proto tcp not src-port 80"). We definitely need to rewrite the parser using lex and yacc!
* Fix last-minute typo which breaks the world.sobomax2002-08-191-1/+1
| | | | Submitted by: many
* Major cleanup of the parser and printing routines in an attempt toluigi2002-08-192-209/+375
| | | | | | | | | | | | | | | | | | | render the syntax less ambiguous. Now rules can be in one of these two forms <action> <protocol> from <src> to <dst> [options] <action> MAC dst-mac src-mac mac-type [options] however you can now specify MAC and IP header fields as options e.g. ipfw add allow all from any to any mac-type arp ipfw add allow all from any to any { dst-ip me or src-ip me } which makes complex expressions a lot easier to write and parse. The "all from any to any" part is there just for backward compatibility. Manpage updated accordingly.
* Remove unused variable. camcontrol is now WARNS=2 clean on i386.johan2002-08-181-1/+0
| | | | Approved by: ken, sheldonh (mentor)
* Clarify the explanation of the behavior for setuid programs byjdp2002-08-181-2/+2
| | | | | | | | | noting that the restrictions do not apply if the user invoking the program is also the owner of the program. Also, capitalize a section header properly. PR: misc/41180
* Include <nlist.h> for nlist interfaces instead of depending on namespacebde2002-08-181-0/+1
| | | | pollution in <kvm.h>.
* Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoidsobomax2002-08-181-2/+3
| | | | | | | breaking application ABI use unused ifreq.ifru_flags[1] for upper 16 bits in SIOCSIFFLAGS and SIOCGIFFLAGS ioctl's. Reviewed by: -hackers, -net
* Fix more breakage due to FSTYPENAMES/DKTYPENAMES split.bmilekic2002-08-163-0/+3
| | | | Also submitted by: David Wolfskill <david@catwhisker.org>
* Complete list of differences between ipfw1 and ipfw2.luigi2002-08-161-10/+93
|
* sys/netinet/ip_fw2.c:luigi2002-08-162-116/+526
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implement the M_SKIP_FIREWALL bit in m_flags to avoid loops for firewall-generated packets (the constant has to go in sys/mbuf.h). Better comments on keepalive generation, and enforce dyn_rst_lifetime and dyn_fin_lifetime to be less than dyn_keepalive_period. Enforce limits (up to 64k) on the number of dynamic buckets, and retry allocation with smaller sizes. Raise default number of dynamic rules to 4096. Improved handling of set of rules -- now you can atomically enable/disable multiple sets, move rules from one set to another, and swap sets. sbin/ipfw/ipfw2.c: userland support for "noerror" pipe attribute. userland support for sets of rules. minor improvements on rule parsing and printing. sbin/ipfw/ipfw.8: more documentation on ipfw2 extensions, differences from ipfw1 (so we can use the same manpage for both), stateful rules, and some additional examples. Feedback and more examples needed here.
* No need to include sys/time.h, this unbreaks a c89 warning about long longalfred2002-08-161-1/+0
| | | | constants as well.
* Don't '#define DKTYPENAMES', we don't use the variable it exposes fromalfred2002-08-161-1/+0
| | | | the header file.
* Don't depend on namespace pollution in sys/mount.h andmux2002-08-134-0/+4
| | | | include sys/uio.h.
* mdoc(7) police: Removed redundant .Ns calls.ru2002-08-131-1/+1
|
* can not -> cannot.ru2002-08-133-4/+4
|
* mdoc(7) police: laundry.ru2002-08-131-17/+16
|
* mdoc(7) police: Consistently name options' arguments in the SYNOPSIS and ↵ru2002-08-131-16/+23
| | | | DESCRIPTION sections..
* mdoc(7) police: canonize FreeBSD in e-mail address.ru2002-08-131-1/+1
|
* mdoc(7) police: missing markup bits.ru2002-08-131-6/+12
|
* mdoc(7) police: KAMEism in rev. 1.56, nits in rev. 1.58.ru2002-08-131-3/+4
|
* mdoc(7) police: Use the .Ud macro.ru2002-08-131-1/+2
|
* Improve wording even more.ru2002-08-131-4/+5
|
* mdoc(7) police: kill hard sentence break.ru2002-08-131-1/+2
|
* Warn that hex keys are the most portable.imp2002-08-121-0/+3
| | | | | Submitted by: Gregory Bond <gnb@itga.com.au> Pr: 40872
OpenPOWER on IntegriCloud