| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
| |
Although this code is in contrib/ there is no active upstream.
Reviewed by: brooks
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D36047
(cherry picked from commit 14f102eacc8434a5a1f96466752578a4167140c9)
(cherry picked from commit 899becbfcbf75008c560bae5e5fce0c205a5bc82)
|
|
|
|
|
|
|
|
|
| |
Obtained from: CheriBSD
MFC after: 1 week
Sponsored by: DARPA, AFRL
Notes:
svn path=/head/; revision=350098
|
|
|
|
|
|
|
|
| |
NI_WITHSCOPEID, and our getaddrinfo(3) does nothing special
for it, now.
Notes:
svn path=/head/; revision=146187
|
|
|
|
|
|
|
|
| |
PR: bin/59674
Submitted by: Vaclav Rehak <vasek@zoom-int.cz>
Notes:
svn path=/head/; revision=123895
|
|
|
|
|
|
|
|
|
| |
import.
Submitted by: Tony Finch <dot@dotat.at>
Notes:
svn path=/head/; revision=79249
|
|
|
|
|
|
|
|
|
|
|
| |
- validate scope in sockaddr comparison logic
patch was originally submitted by itojun and slightly modified by me.
Reviewed by: itojun, kris
Notes:
svn path=/head/; revision=66329
|
|
|
|
|
|
|
|
|
|
|
| |
implementation of getaddrinfo() may return NULL ai_canonname.
There is no consensus how getaddrinfo() should fill ai_canonname
when numeric hostname is given.
Reported by: kris
Notes:
svn path=/head/; revision=66297
|
|
|
|
|
|
|
|
|
|
|
| |
It enables us to control link-local connections by interface like
this:
ALL : [fe80::%ed0]/10 : allow
ALL : [fe80::]/10 : deny
Notes:
svn path=/head/; revision=63158
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Now when tcp_wrapper is enabled by inetd -wW,
several accesses which should be permitted are refused only for IPv6,
if hostname is used to decide the host to be allowed.
IPv6 users will be just upset.
About security related concern.
-All extensions are wrapped by #ifdef INET6, so people can completely
disable the extension by recompile libwrap without INET6 option.
-Access via IPv6 is not enabled by default.
People need to enable IPv6 access by changing /etc/inetd.conf at first,
by adding tcp6 and/or tcp46 entries.
-The base of patches are from KAME package and are actually daily used
for more than a year in several Japanese IPv6 environments.
-Patches are reviewed by markm.
Approved by: jkh
Submitted by: Hajimu UMEMOTO <ume@mahoroba.org>
Reviewed by: markm
Obtained from: KAME project
Notes:
svn path=/head/; revision=56977
|
|
Rest of build to follow.
Notes:
svn path=/vendor/tcp_wrappers/dist/; revision=44743
svn path=/vendor/tcp_wrappers/7.6/; revision=44745; tag=vendor/tcp_wrappers/7.6
|