Commit Graph

429 Commits

Author SHA1 Message Date
andvar 765c526966 s/recomended/recommended/ and s/unknonwn/unknown/ 2021-12-08 19:28:30 +00:00
abs 52b076ef20 Adjust example path to kde/sounds
Wherever sounds may be on a current NetBSD system, /usr/X11R6 is
unlikely to be in that set...
2021-11-02 21:55:38 +00:00
jmcneill 84b16ca6b7 build fix 2021-07-06 09:30:07 +00:00
sevan f692f6d8b0 Rename the block table to something else to make it easier to differentiate
between action and name. Use this table as the example for populating by npfctl.

Drop the int-block table, it's quite cumbersome to have a firewall which
needs the internal network lists added if reboot. Use the localnet variable to
indicated which network we should pass in traffic from instead.
2019-11-18 22:27:27 +00:00
christos 66434e381d remove sup examples 2019-10-15 18:32:59 +00:00
sevan 1e625733bf Add support for blacklistd 2019-09-22 19:51:18 +00:00
sevan 4c89ad8172 Passive FTP works as a client without this and we're not hosting an FTP server (port are not listed in services_tcp) 2019-09-22 19:30:15 +00:00
sevan 6a10ef685a pastos 2019-09-21 23:55:01 +00:00
sevan 34b316756b improve description 2019-09-21 21:10:56 +00:00
sevan 9a6d582b1c Add descriptions for all rules and make use of localnet variable in place of direct IP address 2019-09-21 20:41:52 +00:00
sevan 91b0bc2c1f default policy is to blockall 2019-09-21 20:35:52 +00:00
sevan 7fbde1b12f Drop the final keyword to use the default policy of last matching rule wins 2019-09-21 20:31:31 +00:00
sevan b058b370e0 With bin/54124 fixed, the rule needs to be explicitly set to stateful. 2019-09-21 11:46:25 +00:00
sevan b59b1793d5 sup.NetBSD.org is no longer around. 2019-05-03 11:29:06 +00:00
sevan 92b94ad4f3 Indent to improve readability.
Add a description for log event.
2019-04-16 10:52:28 +00:00
sevan d249bc88a9 Provide a simpler config for a host which permits any traffic from the host out,
and small subset of traffic in (DHCP (v4 and v6), All ICMPv6, ICMP echo
requests, traceroute, mDNS).
2019-04-15 22:38:48 +00:00
sevan bc3d9c27b1 s/ifnets/ifaddrs 2019-04-11 10:17:21 +00:00
sevan d421b01773 Revert previous & just use the inets function to handle both address families.
Heads up by <leot>
2019-04-11 09:59:24 +00:00
sevan ef38acce77 typo 2019-04-10 23:14:46 +00:00
sevan 3689214e37 Use a separate variable for IPv6.
Found with npfctl validate.
2019-04-10 23:13:02 +00:00
sevan 4dcf217b7e Switch out deprecated keywords.
Found with npfctl validate.
2019-04-10 23:00:43 +00:00
maxv 43c9320743 Remove compat_svr4 and compat_svr4_32, as discussed on tech-kern@ recently,
but also as discussed several times in the past.
2018-12-19 13:57:44 +00:00
maxv 6049b090a1 Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.
2018-09-23 07:24:19 +00:00
maxv 2ce97679ef Add KAUTH_REQ_PROCESS_CANSEE_EPROC, and use it for the kern.proc node.
Same permission as before, so no functional change.
2018-08-25 09:54:37 +00:00
rjs a8c55f0d8d Fix cvs id. 2018-08-20 20:45:52 +00:00
maxv 94924a7495 Retire ipkdb entirely. The option was removed from the config files
yesterday.

ok kamil christos
2018-07-15 05:16:40 +00:00
maya 7912995173 dhclient->dhcpcd 2018-07-13 21:45:37 +00:00
skrll ac34435581 Remove port-acorn26
OK core@
2018-01-24 09:04:40 +00:00
riastradh ef315f7931 Remove MKCRYPTO option.
Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export.  The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated.  I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S.  Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet...  That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.
2017-05-21 15:28:36 +00:00
mbalmer e6b9421d36 Clarify gpio example. 2017-05-10 07:51:07 +00:00
mbalmer acc324c63c Fix flags for DB open. 2017-05-10 07:37:33 +00:00
tnn 5569b39ef7 fix build of puffs examples; need _KERNTYPES for register_t 2016-08-26 22:12:22 +00:00
riastradh 5e51ceb9a4 Add $NetBSD$ tag. 2016-02-06 20:19:28 +00:00
pooka d35b86acad Don't include <rump/rumpvnode_if.h> from rump.h. It's not needed
unless you're doing something special, but requires register_t.
Adjust the few places which actually need rumpvnode_if.h.
2016-01-25 11:45:57 +00:00
pooka 6cd39ddb85 add -D_KERNTYPES 2016-01-25 11:01:17 +00:00
kamil 8ad8b0676c Correct mistakes in the sqlite.lua example
Changes:
- The open flag: sqlite.OPEN_CREATE will open the DB for reading and
  writing, adding sqlite.OPEN_READWRITE to sqlite.OPEN_CREATE will cause
  the DB to not be created and prevent the script from continuing
- When using stmt:bind_parameter_index() the parameter needs to be
  prefixed with ':' if that was used in the prepared statement,
  otherwise the incorrect index of 0 is returned.
- The drop table statement has an "x" appended to the table name, looks
  like a typo.

Patch by Travis Paul

Closes PR misc/50493
2015-12-08 23:04:40 +00:00
hubertf f8f91eb838 Move today's most common config (WPA) to the front
Add a WPA config with hidden (non-broadcasting) SSID
2015-11-26 16:07:40 +00:00
hubertf d5d989696c add RCS is 2015-11-26 16:03:18 +00:00
christos 071faa13f8 add a shm example 2015-03-04 16:18:04 +00:00
snj 682be92a68 de-foodify comment 2014-10-18 07:11:07 +00:00
szptvlfn 5c4c6feb2f use proper address, ok spz@. 2014-08-04 22:13:23 +00:00
lneto 4ab4902eb2 lua: updated from 5.1 to 5.3 work3
* lua(1):
  - changed lua_Integer to intmax_t
  - updated distrib/sets/lists and etc/mtree
  - updated bsd.lua.mk
  - fixed bozohttpd (lua-bozo.c)
  - compatibilized bindings: gpio, sqlite
* lua(4):
  - removed floating-point and libc dependencies using '#ifndef _KERNEL'
  - fixed division by zero and exponentiation
  - libkern: added isalnum(), iscntrl(), isgraph(), isprint() and ispunct()
  - acpica: removed isprint() from acnetbsd.h
  - libc: moved strcspn.c, strpbrk.c and strspn.c to common
  - removed stub headers
  - compatibilized bindings: luapmf, luasystm
* reorganized luaconf.h
* updated doc/CHANGES and doc/RESPONSIBLE
2014-07-19 18:38:33 +00:00
spz a9c93eb0a8 - match up comment and interface identifiers
- use RFC5737 documentation prefixes
- use a variable for the RFC1918 private address ranges
2014-05-31 12:33:14 +00:00
spz af8b224c4c example for port remapping added 2014-05-31 11:54:37 +00:00
christos a6ec449286 need esp 2014-05-27 23:34:43 +00:00
christos 4b88b7d425 just allow l2tp not regular ipsec. 2014-05-27 23:24:42 +00:00
riastradh 6cb10275d0 Merge riastradh-drm2 to HEAD. 2014-03-18 18:20:35 +00:00
christos 161079ca45 put more info about the sierra modem 2014-02-15 18:17:59 +00:00
rmind c5b92e4a87 Sync some NPF config examples with the reality. 2014-02-08 01:32:19 +00:00
spz 8797028bc7 - make etc/rc.d/wpa_supplicant create directory /var/run/wpa_supplicant
on startup
- create share/examples/wpa_supplicant/wpa_supplicant.conf and make it
  known in the relevant places. Improvements welcome, my point was
  ctrl_interface and "you seriously want this"
2014-01-23 07:26:50 +00:00