#
267654 |
|
19-Jun-2014 |
gjb |
Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation |
#
225736 |
|
22-Sep-2011 |
kensmith |
Copy head to stable/9 as part of 9.0-RELEASE release cycle.
Approved by: re (implicit)
|
#
216294 |
|
08-Dec-2010 |
syrinx |
In bsnmpd(1) add support for SNMPv3 message processing model, including message authentication, packet encryption & view-based access control (RFC 3412, 3414, 3415).
Sponsored by: The FreeBSD Foundation Reviewed by: philip@ (mostly) Approved by: philip@
|
#
205607 |
|
24-Mar-2010 |
syrinx |
Now actually implement reading/refreshing/returning data from the pfTablesAddrTable and modify the BEGEMOT-PF-MIB to add support for IPV6 address' statistics in the PF tables via pfTablesAddrNetType and pfTablesAddrNet. While here, upgrade the pf_tree.def file to the new format that includes enumerated values. Also make sure to return SNMP_ERR_NOSUCHNAME for ALTQ objects, if ALTQ is disabled, so that the agent will know to skip the pfAltq subtree when servicing GETNEXT requests from SNMP clients (otherwise snmpwalk on begemotPf would stop at the pfAltq subtree with bsnmpd returning SNMP_ERR_GENERR).
|
#
205312 |
|
19-Mar-2010 |
syrinx |
Make sure the snmp_pf module will first refresh its entires if necessary, then find a specific entry, and get the requested value. So far, it found the specific entry, refreshed the entry list if necessary, and got the requested value from the found entry. The problem is that refreshing nukes all old entries and replaces them with new ones and the obtained entry pointer was no longer valid after the refresh.
Reviewed by: bz, philip MFC after: 1 week
|
#
205280 |
|
18-Mar-2010 |
syrinx |
Add support for retrieving labeled pf filter rule counters.
PR: bin/132847 Submitted by: Szalai Andras <szalai (dot) bandi (at) gmail.com>
|
#
200122 |
|
05-Dec-2009 |
syrinx |
Make sure enough memory is allocated for a struct pft_entry when refreshing the list of pf tables.
OKed by: philip MFC after: 1 week
|
#
179476 |
|
01-Jun-2008 |
philip |
Use INSERT_OBJECT_INT_LINK_INDEX macro instead of TAILQ_INSERT_TAIL when filling the table of ALTQ queues retrieved from the kernel.
It is possible for the kernel to return the queues not by pa.altq.qid order. When this happens, pf_snmp would only partially fill its table.
PR: bin/120974 Submitted by: Mykola Dzham <i -at- levsha.org.ua> MFC after: 3 days
|
#
171173 |
|
03-Jul-2007 |
mlaier |
Link pf 4.1 to the build: - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link
Approved by: re (kensmith)
|
#
152970 |
|
30-Nov-2005 |
philip |
Check for altq presence during module init, and allow module to work even if altq is not present (just disable the altq bits in that case).
PR: 89601 Submitted by: Juraj Lutter <otis -at- sk.freebsd.org> MFC after: 3 days
|
#
149571 |
|
29-Aug-2005 |
philip |
Fix unhandled malloc errors.
PR: bin/83467 Submitted by: Dan Lukes <dan -at- obluda.cz> Prodded by: glebius MFC after: 3 days
|
#
146531 |
|
23-May-2005 |
philip |
Catch up with the bsnmpd daemon's 64bit time ticks.
|
#
143654 |
|
15-Mar-2005 |
philip |
time_t is signed, so s/uintmax_t/intmax_t/g. Has anyone got an extra pointy hat for me? I'm running out of them.
Spotted by: des Pointy hat to: philip
|
#
143626 |
|
15-Mar-2005 |
philip |
Cast time_t to uintmax_t so they can be printed as %ju without breaking on various architectures. This should appease tinderbox on alpha and not break it anywhere else.
Suggested by: harti
|
#
143612 |
|
14-Mar-2005 |
philip |
Make this compile properly on 64bit machines.
Pointy hat to: philip
|
#
143611 |
|
14-Mar-2005 |
philip |
Add snmp_pf, a bsnmpd module for monitoring (not managing!) pf firewalls. Currently implemented are most things related to states and interfaces, todo are address tables and altq. I've tried to keep this roughly in sync with a project implementing this for net-snmpd.
Reviewed by: harti, dhartmei MFC after: 1 month
|