8fb9de8e46
fix IPsec policy parser. #@ should affect multiple lines as documented.
2000-03-06 19:52:13 +00:00
4b061adfdb
sync with latest libipsec.
...
since outgoing and incoming policy is separated, inetd can take multiple
policy specification, separated by ";".
2000-01-31 14:28:17 +00:00
55ffb1ce63
make error check against getnameinfo().
2000-01-27 19:52:43 +00:00
a31f62a92c
call sigsetmask() on ipsec initialization failure.
2000-01-13 15:53:00 +00:00
ad663a8d32
refrain using non-standard .Sh. use .Ss.
1999-11-21 17:28:23 +00:00
2220c68654
Typos (from OpenBSD)
1999-11-18 19:02:31 +00:00
d3f47cfba9
A colon is the preferred way to split a user and group name pair; make this
...
possible and depreciate the use of dot.
1999-10-06 21:54:10 +00:00
f7c22e9eaa
fix internal servers (like echo) so that they can accept AF_INET6 connections.
...
add AF_INET6 support for port_good_dg().
1999-09-15 09:59:41 +00:00
fd8040a031
s/acknowledgment/acknowledgement/
1999-09-10 03:24:14 +00:00
35a68ecb71
avoid multiple BUGS section.
1999-08-13 13:57:52 +00:00
fdadab8fc8
Fix PR7739: correct -DRPC rot in inetd.c
1999-08-02 01:12:21 +00:00
e1b53de44e
query service name properly on libwrap warnings.
...
NetBSD PR: 8101
1999-07-28 10:58:31 +00:00
113b4934fe
se_wait stores pids; make it a pid_t.
1999-07-19 15:49:39 +00:00
93de5675b3
be more friendly with non-IPsec kernel (hide warnings).
1999-07-04 00:31:57 +00:00
d161ab0018
clearify and woring fix.
1999-07-02 16:55:45 +00:00
0d5c089973
document tcp4/tcp6 manipulation.
1999-07-02 16:49:34 +00:00
a77871b871
dual-stack inetd. you can write "tcp6" or "tcp4" into "protocol" field.
...
(the style is the rough consensus among v6 implementers so it will be
the standard style)
TODO: test rpc and tcpmux on IPv6.
TODO: test identd over IPv6.
1999-07-02 04:48:19 +00:00
78688ba793
Use pidfile(3).
1999-06-06 01:50:23 +00:00
f6aa0f509c
Prevent sending udp data to the obvious bad ports that are used for
...
DoS attacks (e.g. looping packets between two echo ports).
This should "fix" PR bin/2455.
Could please anyone with an appropriate "hacker tools" check this?
1999-04-11 15:40:58 +00:00
d1407362ba
More and more .Os cleanups. .Os is defined in the tmac.doc-common file,
...
so we shouldn't override it with versions in the manpages. Many more to
come.
1999-03-22 18:43:46 +00:00
c51f63ace5
Clarify the syntax a bit
1999-01-29 19:41:47 +00:00
e37d13ec69
Revert previous.
1999-01-20 09:24:06 +00:00
24285e691d
Make all listening sockets non-blocking.
1999-01-20 04:42:17 +00:00
786b86d71b
use AF_LOCAL instead of AF_UNIX
1998-07-18 05:04:35 +00:00
ec7c8ec161
From "buqtraq": avoid file descriptor leak if service is looping.
1998-07-16 08:55:43 +00:00
fc90756956
Implement a new manual page category ``SECURITY CONSIDERATIONS''
...
(suggested by mycroft)
1998-06-08 12:41:41 +00:00
723fb3cccc
Add support for specifying the send and receive socket buffer sizes. This
...
is especially useful for TCP servers which must specify the receive
socket buffer size before the connection is made so that the connection's
window scale factor can be properly advertised.
Example /etc/inetd.conf configuration line:
shell stream tcp,rcvbuf=1m nowait root /usr/libexec/rshd rshd
That line will cause the rshd to advertise a 1 megabyte window, which could
improve the performance of an rcp in some situations.
1998-05-01 01:57:26 +00:00
b4d89784ef
Reset the SIGPIPE handler to SIG_DFL after forking.
1998-03-21 06:25:37 +00:00
95f309a67f
adjust documentation to reflect reality per PR#4859
1998-03-11 05:40:06 +00:00
9fab7a4ffa
PR/4837: Jeff Thieleke: inetd does not compile without libwrap.
1998-01-20 16:44:22 +00:00
a88cef6970
Ignore SIGPIPE, which may be caused by non-forking internal TCP services if
...
the remote side closes the connection before we answer.
1997-12-04 06:39:02 +00:00
dc05f41d80
add missing .Nm sections
1997-11-11 10:07:34 +00:00
0a94f4f077
use CPPFLAGS instead of CFLAGS
1997-10-25 06:57:53 +00:00
f5bf267d90
enable WARNS=1 by default, but disable in unclean 3rd party code
1997-10-18 06:42:25 +00:00
7866707a39
minor .Nm cleanup
1997-10-18 06:33:48 +00:00
a352e573d5
fix use of unix domain socketname length, and signal error if this
...
is exceeded. from enami tsugutomo <enami@ba2.so-net.or.jp> [bin/3369]
1997-10-17 13:53:30 +00:00
c5aacdd3b3
Don't sleep if we get EINTR from select(2) (e.g. because we got
...
a SIGCHLD when something died). From PR 4056, by David Holland.
1997-10-08 07:15:59 +00:00
2d06dcebcd
WARNS?=1
1997-10-05 16:40:24 +00:00
7d7091ccdd
merge lite2 [actually, just update ucb sccs id's]
1997-10-05 16:16:10 +00:00
96af70a1c9
Rewrite of wait/nowait information in light of identd(8) use of wait.
...
Removed some blank linkes that made bad formatting. (PR 3647)
1997-06-30 20:55:06 +00:00
52aae8dc8a
Don't do libwrap checking for UDP services; they must do it internally on
...
every packet to be correct.
1997-04-20 22:04:59 +00:00
14656f0069
Don't attempt to use libwrap for `stream wait' services, where
...
we only have the listening socket.
1997-03-19 00:05:05 +00:00
95c740d58b
Oops; for waiting stream services, we don't do an accept(); we
...
pass down the fd of the listening socket.
1997-03-18 04:47:22 +00:00
6ebf01d197
Output a + line for the tcpmux `help' service, and list itself.
1997-03-14 03:18:25 +00:00
b860cb428b
Move all of the libwrap checking and subprocess startup into a separate
...
function. Arrange for tcpmux() to be called like other builtins, and have it
call the aforementioned function recursively. This allows tcpmux to be
wrapped, and always runs it after forking, so we don't freeze everything
else.
Also, use FD_CLOEXEC to close file descriptors, rather than iterating through
them ourself.
1997-03-13 20:15:04 +00:00
a68a078f3e
Fix typo.
1997-03-13 18:39:50 +00:00
51fa5e9be7
Make the previous dependent on LIBWRAP_INTERNAL, which is not defined by
...
default.
1997-03-13 18:36:35 +00:00
249eced8da
If we forked for an internal service, make sure we always exit afterward.
1997-03-13 18:19:35 +00:00
df6ec691b5
If we're using libwrap. always fork. This only affects the time and daytime
...
services anyway.
1997-03-13 18:08:19 +00:00
cf5f8c252d
Slight rearrangement to forking code. Also, always close the new descriptor
...
after a fork failure, even for a waiting service.
1997-03-13 18:06:15 +00:00
itojun