Remove a __KAME__ block for extracting the scope_id from IPV6_PKTINFO.
struct in6_pktinfo includes the interface index in ipi6_ifindex but no
struct sockaddr_in6.
OK jca@

Include stdarg.h explicitly instead of relying on event.h to bring it in.
prompted by dlg's commit to identd
OK dlg

Sync the severity of the syslog_* functions shared between identd, slowcgi,
tftp-proxy and tftpd to the severity used in log.c style loggers.
This also fixes an issue where syslog_err and syslog_errx

Sync the severity of the syslog_* functions shared between identd, slowcgi,
tftp-proxy and tftpd to the severity used in log.c style loggers.
This also fixes an issue where syslog_err and syslog_errx logged with
different severities.

Sure deraadt@

show more ...

Add format attribute to logger functions.
Add syslog_debug to keep in sync with others.
Input & OK benno@

satisfy whiny compiler on m88k, noticed by aoyama, solution from gsoares

Call daemon(3) later, to catch errors from getpwnam and others.

Also set up syslog logging earlier, so that error messages don't end on
stderr which has been closed by daemon(3). One additional s/e

Call daemon(3) later, to catch errors from getpwnam and others.

Also set up syslog logging earlier, so that error messages don't end on
stderr which has been closed by daemon(3). One additional s/errx/lerrx/
for consistency.

Inspired by a proposal from ajacoutot@, ok ajacoutot@ sthen@

show more ...

switch to new _tftp_proxy user; ok dlg

pledge "stdio inet sendfd" before entering main loop in network speaking
child. (All those I asked to test timed out before commit, so now they
get to test for real...)

Remove repeat of getpwnam() that is not needed at all.

spaces

Convert FIONBIO to SOCK_NONBLOCK

ok dlg@

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_N

Replace <sys/param.h> with <limits.h> and other less dirty headers where
possible. Annotate <sys/param.h> lines with their current reasons. Switch
to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change
MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where
sensible to avoid pulling in the pollution. These are the files confirmed
through binary verification.
ok guenther, millert, doug (helped with the verification protocol)

show more ...

When no address for the current AF was specified with -a generate pass
rules instead of erroring out.
ok dlg, benno, camield

Make it possible to give -a multiple times on the command line.
Initial diff by camield, tweaked by me.
ok dlg, benno, camield
manpage input/ok jmc

Implement -a option in tftp-proxy to make it work on a NAT gateway.
input/ok dlg, benno, camield
manpage input/ok jmc

fix IPv6 in proxy_dst6()
ok florian camield dlg

plug mem leak; Ok benno@

fix usage(); ok dlg

decls before code

fix getopt to not eat t

-t pftag doesnt do anything, trim the getopt side of it until i get to it.

bring in a persistent event driven tftp-proxy to replace the libexec
one run out of inetd.

the libexec tftp-proxy had the same problems as the libexec tftpd, in that
it didnt scale as well as we nee

bring in a persistent event driven tftp-proxy to replace the libexec
one run out of inetd.

the libexec tftp-proxy had the same problems as the libexec tftpd, in that
it didnt scale as well as we needed. it also had a bunch of interesting
races with states and addresses on sockets.

manpage is coming.

ok deraadt@ sthen@ henning@ matthew@

show more ...