Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
83,602 Commits 606 Branches 0 Tags 3.1 GiB
Commit Graph

105 Commits

Author SHA1 Message Date
wiz 14dbdf5518 Negative exit code cleanup: Replace exit(-x) with exit(x). 
As seen on tech-userlevel.
 2001-04-06 11:13:45 +00:00
fair 1cab78c82a Document TCPmux internal service, per additional discussion of PR 12325. 
The text was snatched directly from the comment about it in inetd.c and
modified for better clarity.
 2001-03-16 08:19:13 +00:00
fair 232ed76f81 Add text to more clearly document that tcpd is not needed, per PR 10754. 
Add a FILES section. Add a few more references to SEE ALSO.
Clean up nroff nits (e.g. spaces at end of line).
 2001-03-10 11:52:51 +00:00
bjh21 e4fc14ba1d Mention relevant RFCs in "SEE ALSO". 2001-03-04 14:18:32 +00:00
cgd 25bdbb661e convert to use getprogname() 2001-02-19 23:22:40 +00:00
jlam c5d65e2d74 Improve grammar slightly in the description for IPsec policy settings. 2001-01-25 21:49:31 +00:00
lukem 0645f2f67b use explicit name rather than __progname in openlog 2001-01-11 01:34:28 +00:00
hubertf 1e2914d00b Document that the path to the configuration file given on the command 
line must be absolute, unless the -d option is given on the command line.
 2000-12-02 02:15:34 +00:00
ad b8bb84a3b0 Clean one paragraph. 2000-09-19 16:28:52 +00:00
itojun 51156effd6 be more paranoid about UDP-based echo services validation. namely, 
reject the following sources:
	0.0.0.0/8 127.0.0.0/8 240.0.0.0/4 255.0.0.0/8
	ff00::/8 ::/128
	::ffff:0.0.0.0/96 and ::0.0.0.0/96 obeys IPv4 rule.
hint from deraadt.
 2000-08-01 18:42:08 +00:00
mycroft 70c4e41552 Remove bogus typeof hack, and just use the type directly. 2000-07-23 22:54:51 +00:00
itojun b44d184dec permit square-bracket notation (as in RFC2732) for the first element 
in inetd.conf.  otherwise, we'll have (minor) problem putting IPv6 address in.
sync with kame.

[::1]:ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -ll
 2000-07-08 01:55:24 +00:00
itojun 7bf16d3ecc explicitly check if the address family is supported, by using socket(2). 2000-07-07 14:56:45 +00:00
itojun 358c3cf8dc more change on getaddrinfo error handling. 
XXX enami, I admit it is not a good thing to check the error code from
getaddrinfo.  it is sometimes mandatory, however.  gai_strerror message
can be too generic in some cases.  we can't really extend getaddrinfo,
as it was not invented by kame (see RFC2553)
 2000-07-05 12:43:06 +00:00
itojun 798ee6865c add faithd(8) support. with "faith/tcp6" protocol specification, 
it will open a socket with setsockopt(IPV6_FAITH).
 2000-07-04 13:25:39 +00:00
itojun 9282955dca emit more friendly message on nonexistent service name. 
From: enami
 2000-07-04 09:33:55 +00:00
itojun 0f20cdad3f check for mux service by ISMUX(), not by != NORM_TYPE 
(the assumption can bite us if we extend se_type to have more cases).
 2000-07-03 23:40:59 +00:00
itojun ee1989a0d1 remove duplicated ipsec setup code. we always call setup() on 
socket reinitialization (like SIGHUP).
sync with kame.
 2000-07-03 23:37:17 +00:00
itojun 80a16c051d typo 2000-06-14 16:06:43 +00:00
itojun 59996dbc2b clarify tcp4/tcp6 interaction. 2000-06-14 15:57:26 +00:00
fvdl 2db4d2fdfe Modify to support RPC over IPv6. 2000-06-02 23:17:55 +00:00
itojun 2e33d275dc use LOG_WARNING for syslog output for address family mismatch. 
suggested by: thorpej
 2000-05-13 06:42:13 +00:00
itojun 31eb929ec0 correct extremely unfriendly error message when the kernel does not 
support the address family (like including "tcp6" in inetd.conf, on
non-IPv6 kernel).

was:
inetd[185]: ftp/tcp6: *: hostname nor servname provided, or not known
now:
inetd[315]: ftp/tcp6: *: the address family is not supported by the kernel
 2000-05-13 02:56:47 +00:00
itojun 8fb9de8e46 fix IPsec policy parser. #@ should affect multiple lines as documented. 2000-03-06 19:52:13 +00:00
itojun 4b061adfdb sync with latest libipsec. 
since outgoing and incoming policy is separated, inetd can take multiple
policy specification, separated by ";".
 2000-01-31 14:28:17 +00:00
itojun 55ffb1ce63 make error check against getnameinfo(). 2000-01-27 19:52:43 +00:00
itojun a31f62a92c call sigsetmask() on ipsec initialization failure. 2000-01-13 15:53:00 +00:00
itojun ad663a8d32 refrain using non-standard .Sh. use .Ss. 1999-11-21 17:28:23 +00:00
kristerw 2220c68654 Typos (from OpenBSD) 1999-11-18 19:02:31 +00:00
ad d3f47cfba9 A colon is the preferred way to split a user and group name pair; make this 
possible and depreciate the use of dot.
 1999-10-06 21:54:10 +00:00
itojun f7c22e9eaa fix internal servers (like echo) so that they can accept AF_INET6 connections. 
add AF_INET6 support for port_good_dg().
 1999-09-15 09:59:41 +00:00
simonb fd8040a031 s/acknowledgment/acknowledgement/ 1999-09-10 03:24:14 +00:00
itojun 35a68ecb71 avoid multiple BUGS section. 1999-08-13 13:57:52 +00:00
sommerfeld fdadab8fc8 Fix PR7739: correct -DRPC rot in inetd.c 1999-08-02 01:12:21 +00:00
itojun e1b53de44e query service name properly on libwrap warnings. 
NetBSD PR: 8101
 1999-07-28 10:58:31 +00:00
ghudson 113b4934fe se_wait stores pids; make it a pid_t. 1999-07-19 15:49:39 +00:00
itojun 93de5675b3 be more friendly with non-IPsec kernel (hide warnings). 1999-07-04 00:31:57 +00:00
itojun d161ab0018 clearify and woring fix. 1999-07-02 16:55:45 +00:00
itojun 0d5c089973 document tcp4/tcp6 manipulation. 1999-07-02 16:49:34 +00:00
itojun a77871b871 dual-stack inetd. you can write "tcp6" or "tcp4" into "protocol" field. 
(the style is the rough consensus among v6 implementers so it will be
the standard style)

TODO: test rpc and tcpmux on IPv6.
TODO: test identd over IPv6.
 1999-07-02 04:48:19 +00:00
thorpej 78688ba793 Use pidfile(3). 1999-06-06 01:50:23 +00:00
hwr f6aa0f509c Prevent sending udp data to the obvious bad ports that are used for 
DoS attacks (e.g. looping packets between two echo ports).
This should "fix" PR bin/2455.
Could please anyone with an appropriate "hacker tools" check this?
 1999-04-11 15:40:58 +00:00
garbled d1407362ba More and more .Os cleanups. .Os is defined in the tmac.doc-common file, 
so we shouldn't override it with versions in the manpages.  Many more to
come.
 1999-03-22 18:43:46 +00:00
tsarna c51f63ace5 Clarify the syntax a bit 1999-01-29 19:41:47 +00:00
mycroft e37d13ec69 Revert previous. 1999-01-20 09:24:06 +00:00
mycroft 24285e691d Make all listening sockets non-blocking. 1999-01-20 04:42:17 +00:00
lukem 786b86d71b use AF_LOCAL instead of AF_UNIX 1998-07-18 05:04:35 +00:00
tron ec7c8ec161 From "buqtraq": avoid file descriptor leak if service is looping. 1998-07-16 08:55:43 +00:00
lukem fc90756956 Implement a new manual page category ``SECURITY CONSIDERATIONS'' 
(suggested by mycroft)
 1998-06-08 12:41:41 +00:00
thorpej 723fb3cccc Add support for specifying the send and receive socket buffer sizes. This 
is especially useful for TCP servers which must specify the receive
socket buffer size before the connection is made so that the connection's
window scale factor can be properly advertised.

Example /etc/inetd.conf configuration line:

shell stream tcp,rcvbuf=1m nowait root /usr/libexec/rshd rshd

That line will cause the rshd to advertise a 1 megabyte window, which could
improve the performance of an rcp in some situations.
 1998-05-01 01:57:26 +00:00