florian
e5b260c6e4
Switch nsd control socket from localhost to a unix domain socket.
OK sthen
6 years ago
millert
1bc01393a9
The zoneinfo directories can be mode 755 just like everything else.
OK deraadt@
6 years ago
deraadt
6cbfee9ec9
don't need 61 keys anymore
6 years ago
deraadt
5ed5d3cbc8
crank to 6.4-beta
6 years ago
claudio
48e8908628
Similar to the ldpd.conf change don't use a macro of the secret.
Macros get sometimes logged so we should not encurage to use them for
sensitive data.
6 years ago
mestre
b0cdc9a1b7
Correct example file since reserved words cannot be used as macros. Not only
that, the macro used was password and if we changed it to something like
pass="secret" it would log it if the daemon was ran in verbose mode.
Hint and OK claudio@
6 years ago
ratchov
713244e9c7
sync
6 years ago
ratchov
bea64d8eab
Remove unused /dev/audio and /dev/audioctl symlinks.
ok deraadt
6 years ago
jasper
653c436b9b
s/resolver/nameserver/ to match parse.y -r1.4
6 years ago
jasper
a12a085f80
add rad.conf example
ok florian@
6 years ago
florian
b386599519
add _rad user
OK tb, claudio
6 years ago
florian
4c38166457
Remove rtadvd(8) rc script.
6 years ago
florian
86afacfeac
Remove rtadvd(8) leftovers in etc.
OK deraadt, phessler
6 years ago
florian
3edf9087bf
It's time to switch to rad(8); tested by many.
Unhook rtadvd from build.
OK deraadt, phessler
6 years ago
florian
f305d1954b
It's time to switch to rad(8); tested by many.
Remove rtadvd(8) from rc(8).
OK deraadt, phessler
6 years ago
jmc
e58d581547
document method=https, and use it in the example config;
from lauri tirkkonen;
ok sthen beck
6 years ago
florian
50ad58deca
add rad.conf; from semarie; tweak & OK tb
6 years ago
florian
2aa7a2601f
rc(8) infrastructure for rad
6 years ago
florian
fabfc282cb
Add _rad user and group for rad(8).
This recycles the _btd uid/gid that have been removed in 2013.
Discussed in the hackroom.
6 years ago
sthen
c67ac50576
Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commands
to running VMs (at least for OpenBSD ones), but the stop routine for system
daemons is not usually called at shutdown.
Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me
to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped
it with a "stopping VMs" message (it can take some time, especially when you
have multiple VMs, so better to have some clear feedback).
6 years ago
reyk
f5786aed54
Add -w option to vmctl stop to wait for completion of VM termination.
Use it in /etc/rc.d/vmd accordingly.
OK sthen@
6 years ago
florian
cd73602e69
Don't hide errors when IPv6 forwarding is not enabled.
OK(failed) phessler
OK deraadt
6 years ago
henning
f8ee3dae04
we were refering to 10k states by default here as well, pt out by claudio
6 years ago
tb
4e809e852a
netstart is used during system start, but also interactively.
Show proper error message if a regular user executes netstart.
Only do the privilege check if the id binary is available,
which might not be the case during diskless system startup.
ok deraadt, jasper, jca, krw, rpe (who wrote the same diff), sthen
6 years ago
dlg
8efe1f2175
list the ports for gre in udp, as per rfc8086 and iana assignments.
ok benno@ deraadt@
6 years ago
tb
ceb98dc281
a mirror URLs -> a mirror URL
From Raf Czlonka
6 years ago
job
960aed9420
Add 6to4 anycast prefixes to bogon filter
Globally anycasted 6to4 has outlived its usefulness.
Operational discussion: http://seclists.org/nanog/2018/Jun/268
OK deraadt@
6 years ago
reyk
e563c271ca
Rename httpd.conf "root strip" option to "request strip".
"root strip" was semantically incorrect and did cause some confusion
as it never stripped the root but the client's request path.
Discussed with many. Heads up: this is a grammar change that also
affects acme-client(1) configurations (see current.html).
OK claudio@
6 years ago
claudio
c5da7cc273
Adjust example after the announce (all|self|...) change.
Adjust filters and comment them to explain the basic operation.
Use large-community and a prefix-set to ensure no bad prefixes are
leaked to eBGP speakers.
With and OK job@
6 years ago
matthieu
a901c5446c
prepare for dri3proto
6 years ago
jmc
4706701ee3
remove "from local" (the default) from one of the match rules: the line
immediately above also uses this notation, it's shorter, and it keeps
two examples in the man page which claim to be the same as the default config
(but with exceptions) in sync;
ok gilles
6 years ago
gilles
d2be86d37b
update default config to new grammar
ok eric@
6 years ago
florian
5eee69a22f
Put commented minimal-reponses and refuse-any defaults into nsd.conf
so that the changed default will be pointed out to the admin by
sysmerge.
Idea & OK sthen
6 years ago
mpf
0b3d8e1fc4
Remove default ls -C alias.
OK millert@, kn@, ian@, sthen@
6 years ago
benno
04aba995ed
don't put options in here that should not be needed in the majority of
cases and will just be copied by users without thinking.
ok claudio@
6 years ago
kettenis
9bce2fbaa9
Add std.1500000 entry, mostly because of firmware constraints on various
Rockchip ARM SoCs.
ok millert@, deraadt@
6 years ago
schwarze
369994e74f
stop installing /etc/networks, it is now unused; OK deraadt@ tb@
6 years ago
rpe
728f495514
Add a proper usage() function.
Suggested by and OK jmc.
OK tb
6 years ago
ajacoutot
c930cc9e34
spaces->tab
ok kettenis@+florian@'s OCD
6 years ago
florian
b45fb6b071
"listen on * port 80" means all v4 and v6 addresses these days.
OK benno
6 years ago
jsg
376907d69e
adapt armv7 manual pages for arm64
6 years ago
dtucker
8324e3ea4f
Import regenerated moduli file.
6 years ago
florian
7e2a5e7e2d
Add aggressive-nsec example block.
While here, qname minimisation is an RFC since some time.
tweak & OK sthen
6 years ago
deraadt
8b1b18f87e
probably the correct date
6 years ago
florian
26292f37a1
Provide an example httpd.conf that's actually useful.
With & OK deraadt
input sthen
looks better to beck
OK benno
6 years ago
claudio
c9a2eca5f1
Since a while relayd switched from the TLS session cache to using only TLS
session tickets instead. Adjust example relayd.conf file.
From Matt Schwartz, reminded by jmc@ OK deraadt@
6 years ago
robert
fda1a6ede1
add syspatch public keys for 6.3 and 6.4
6 years ago
tj
f3a21c728f
remove 6.0 keys
6 years ago
jmc
4f90eb9712
when -n is used, no need to spit out "Missing parameters." before
displaying usage();
ok tb
6 years ago
landry
ef55c3f3d3
Lowercase 'usage' and group -n with interface in it.
From jmc@, ok tb@
6 years ago