Home | History | Annotate | only in /src/usr.sbin/faithd
History log of /src/usr.sbin/faithd
RevisionDateAuthorComments
 1.5 26-Nov-2010  christos KNF, pass lint.
 1.4 28-May-2007  tls Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.
 1.3 09-May-2002  itojun drop support for rsh/rlogin relaying.
use of .rhosts authentication should be discouraged with relaying service.
sync w/kame
 1.2 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.1 13-Jul-1999  itojun add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.13 12-Nov-2003  grant fix a typo
 1.12 12-Nov-2003  grant s/netbsd.org/NetBSD.org/i
 1.11 09-May-2002  itojun drop support for rsh/rlogin relaying.
use of .rhosts authentication should be discouraged with relaying service.
sync w/kame
 1.10 11-Jan-2001  lukem fix tyop
 1.9 14-Sep-2000  itojun sync document with latest kame. now uses 3ffe:501:ffff::/48 in example.
 1.8 04-Jul-2000  thorpej Update ifconfig example to show that the interface has to be created.
 1.7 02-Jul-2000  itojun correct usage of route(8) in example.
 1.6 31-May-2000  itojun branches: 1.6.2;
sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.5 25-Feb-2000  itojun branches: 1.5.2;
fix pathname for netbsd-current (/usr/local/v6/libexec -> /usr/libexec).
 1.4 21-Dec-1999  itojun wording fix.
 1.3 09-Dec-1999  itojun sync with latest KAME. nuke use of ss_{len,family}.
CVsA: ----------------------------------------------------------------------
 1.2 17-Jul-1999  itojun branches: 1.2.4;
typo and wording fixes. sync'ed with latest KAME.
 1.1 13-Jul-1999  itojun add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.2.4.1 27-Dec-1999  wrstuden Pull up to last week's -current.
 1.5.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.6.2.1 03-Jul-2000  thorpej Pull up 1.7:
correct usage of route(8) in example.
 1.29 15-Mar-2012  njoly Use Lk macro when dealing with URLs. While here update or remove some
dead URL links. Another part of PR/29238.
 1.28 15-Jan-2010  joerg branches: 1.28.6;
Use .%U for URLs instead of .%O.
 1.27 09-Jan-2010  mbalmer Various language fixes.
From FreeBSD.
 1.26 25-Oct-2009  wiz Bump date for previous.
 1.25 25-Oct-2009  jakllsch Renumber 6bone addresses to documentation prefix.
Fix broken URL for totd site.
Add reference to pkgsrc/net/totd.
 1.24 08-Apr-2009  joerg Fix markup.
 1.23 07-Sep-2003  wiz branches: 1.23.40;
Consistently use 'RFC 1234' instead of 'RFC1234' or 'RFC-1234'.
From jmc@openbsd.
 1.22 04-Jul-2003  wiz Remove superfluous Ns.
 1.21 01-Jul-2003  wiz Ic Ar -> Ar.
 1.20 01-Jul-2003  dogcow make the given example actually work.
 1.19 25-Feb-2003  wiz .Nm does not need a dummy argument ("") before punctuation or
for correct formatting of the SYNOPSIS any longer.
 1.18 09-May-2002  itojun drop support for rsh/rlogin relaying.
use of .rhosts authentication should be discouraged with relaying service.
sync w/kame
 1.17 19-Jan-2002  wiz Drop .Pp before subsection, whitespace nit and sort sections.
 1.16 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.15 30-Jun-2001  itojun faith(4) is now documented in RFC3142.
 1.14 25-Apr-2001  itojun avoid null pointer deref. sync with kame.
 1.13 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.12 14-Sep-2000  itojun sync with latest kame.
- improve logging.
- correct multicast address check for the relayed destination.
- repair EPRT translation.
- support 227 result without paren.
- change behavior on no-argument to more sensible side
(before: relay telnet, now: error)
WARNING: you may need to change your startup script.
 1.11 04-Sep-2000  kleink For commands and utilities, use EXIT STATUS rather than RETURN VALUES or
DIAGNOSTICS as appropriate (and documented in mdoc(7)).
 1.10 04-Jul-2000  itojun allow faithd(8) to be invoked via inetd(8), just like tcpd (of tcp_wrappers).
sync with kame.

benefits: allows us to access-control inbound traffic by using hosts.allow(5).
possible drawbacks: inetd mode has no chance for multi-connection-per-single-
process enhancement. current faithd(8) needs 1 process per 1 connection
anyways.
 1.9 03-Jul-2000  itojun add more security notice about relaying rsh/rlogin taffic. (sync with kame)
 1.8 31-May-2000  itojun branches: 1.8.2;
sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.7 12-Mar-2000  itojun branches: 1.7.2;
wording
 1.6 12-Mar-2000  itojun improve SECURITY section. (sync with kame)
 1.5 25-Feb-2000  itojun add reference to i-d.
 1.4 13-Dec-1999  itojun s/.Os KAME/.Os/
 1.3 09-Dec-1999  itojun sync with latest KAME. nuke use of ss_{len,family}.
CVsA: ----------------------------------------------------------------------
 1.2 17-Jul-1999  itojun branches: 1.2.4;
typo and wording fixes. sync'ed with latest KAME.
 1.1 13-Jul-1999  itojun add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.2.4.1 27-Dec-1999  wrstuden Pull up to last week's -current.
 1.7.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.8.2.1 03-Jul-2000  itojun pullup 1.8 -> 1.9 (approved by: releng-1-5)
add more security notice about relaying rsh/rlogin traffic. (sync with kame)
 1.23.40.1 13-May-2009  jym Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
 1.28.6.1 17-Apr-2012  yamt sync with head
 1.36 19-Oct-2013  christos use new scopeid functions
 1.35 16-Sep-2011  joerg branches: 1.35.2; 1.35.8;
Use __dead
 1.34 30-Aug-2011  joerg __dead + __printflike
 1.33 26-Nov-2010  christos KNF, pass lint.
 1.32 15-Dec-2007  perry include sys/cdefs.h so that __attribute__ can be fixed later
 1.31 16-Oct-2003  itojun branches: 1.31.22;
poll() argument mistake. Tatoku Ogaito
 1.30 02-Sep-2003  itojun use poll(2) instead of select(2). based on patch from deraadt@openbsd, via kame
 1.29 15-May-2003  itojun simplify by strdup. expilcitly specify IPPROTO_TCP (to cope with sctp-ready
getaddrinfo).
 1.28 08-Sep-2002  itojun socklen_t audit. from deraadt, sync w/kame
 1.27 20-Aug-2002  itojun die if fd_set overrun. explicitly turn off use of IPv4 mapped addr on AF_INET6
socket.
 1.26 07-Jun-2002  itojun remove unmaintained option (#ifdef FAITH4). sync w/kame
 1.25 09-May-2002  itojun drop support for rsh/rlogin relaying.
use of .rhosts authentication should be discouraged with relaying service.
sync w/kame
 1.24 24-Apr-2002  itojun handle ECONNABORTED at accept(2). correct error handling for connect(2)
sync w/ kame
 1.23 11-Jan-2002  itojun daemon(3) has to be called before opening file descriptors.
noticed by markus@openbsd, sync with kame
 1.22 21-Nov-2001  itojun assume the presense of getifaddrs(3). sync with kame
 1.21 21-Nov-2001  itojun deal with wait3() returning -1. be careful on malloc failures. sync with kame
 1.20 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.19 25-Apr-2001  itojun avoid null pointer deref. sync with kame.
 1.18 20-Mar-2001  itojun avoid zombies on abnormal disconnects. sync with kame
 1.17 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.16 11-Jan-2001  lukem fix tyop
 1.15 06-Oct-2000  itojun printf-format audit. from sommrfeld@netbsd.org. sync with kame.
 1.14 14-Sep-2000  itojun sync with latest kame.
- improve logging.
- correct multicast address check for the relayed destination.
- repair EPRT translation.
- support 227 result without paren.
- change behavior on no-argument to more sensible side
(before: relay telnet, now: error)
WARNING: you may need to change your startup script.
 1.13 05-Jul-2000  itojun always use %s for setproctitle. from openbsd-current
 1.12 04-Jul-2000  itojun allow faithd(8) to be invoked via inetd(8), just like tcpd (of tcp_wrappers).
sync with kame.

benefits: allows us to access-control inbound traffic by using hosts.allow(5).
possible drawbacks: inetd mode has no chance for multi-connection-per-single-
process enhancement. current faithd(8) needs 1 process per 1 connection
anyways.
 1.11 29-Jun-2000  itojun use %s with syslog, to prevent abuse. from: deraadt (sync with kame)
 1.10 31-May-2000  itojun branches: 1.10.2;
sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.9 25-Feb-2000  itojun branches: 1.9.2;
use getifaddrs, not SIOCGIFCONF.
 1.8 30-Dec-1999  itojun typo (sa_family must be sa_len)
NetBSD PR: 9084
 1.7 20-Dec-1999  itojun void unbounded sprintf().
fix proc title.
 1.6 20-Dec-1999  itojun fix wrong indentation.
 1.5 20-Dec-1999  itojun oops, fix typo.
 1.4 20-Dec-1999  itojun fix uninitialized pointer access on mapped addr handling.
add more debugging info on setsockopt errors.
 1.3 20-Dec-1999  itojun fix possible infinite loop in tcp relay (avoid possible DoS).
PR: 8640
From: Feico Dillema
 1.2 09-Dec-1999  itojun sync with latest KAME. nuke use of ss_{len,family}.
CVsA: ----------------------------------------------------------------------
 1.1 13-Jul-1999  itojun branches: 1.1.4;
add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.1.4.1 27-Dec-1999  wrstuden Pull up to last week's -current.
 1.9.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.10.2.4 24-Nov-2001  he Pull up revision 1.14 (partial, via patch, requested by itojun):
Fix missing ntohl().
 1.10.2.3 18-Oct-2000  tv Pullup by patch [itojun]:
printf-format audit. from sommrfeld@netbsd.org. sync with kame.
 1.10.2.2 07-Jul-2000  itojun pullup, approved by releng-1-5
udit setproctitle() - don't use variable alone, use with "%s".
from openbsd

usr.sbin/faithd/faithd.c 1.12 -> 1.13
libexec/ftpd/ftpd.c 1.96 -> 1.97
usr.sbin/rpc.lockd/lockd_lock.c 1.2 -> 1.3
 1.10.2.1 29-Jun-2000  itojun pullup 1.10 -> 1.11; careful about syslog(3) arg
 1.31.22.1 09-Jan-2008  matt sync with HEAD
 1.35.8.1 20-Aug-2014  tls Rebase to HEAD as of a few days ago.
 1.35.2.1 22-May-2014  yamt sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")
 1.12 16-Sep-2011  joerg Use __dead
 1.11 30-Aug-2011  joerg __dead + __printflike
 1.10 26-Nov-2010  christos KNF, pass lint.
 1.9 09-May-2002  itojun drop support for rsh/rlogin relaying.
use of .rhosts authentication should be discouraged with relaying service.
sync w/kame
 1.8 24-Apr-2002  itojun handle ECONNABORTED at accept(2). correct error handling for connect(2)
sync w/ kame
 1.7 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.6 06-Oct-2000  itojun printf-format audit. from sommrfeld@netbsd.org. sync with kame.
 1.5 14-Sep-2000  itojun sync with latest kame.
- improve logging.
- correct multicast address check for the relayed destination.
- repair EPRT translation.
- support 227 result without paren.
- change behavior on no-argument to more sensible side
(before: relay telnet, now: error)
WARNING: you may need to change your startup script.
 1.4 04-Jul-2000  itojun allow faithd(8) to be invoked via inetd(8), just like tcpd (of tcp_wrappers).
sync with kame.

benefits: allows us to access-control inbound traffic by using hosts.allow(5).
possible drawbacks: inetd mode has no chance for multi-connection-per-single-
process enhancement. current faithd(8) needs 1 process per 1 connection
anyways.
 1.3 31-May-2000  itojun branches: 1.3.2;
sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.2 20-Dec-1999  itojun branches: 1.2.2;
fix default daemon pathname.
 1.1 13-Jul-1999  itojun branches: 1.1.4;
add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.1.4.1 27-Dec-1999  wrstuden Pull up to last week's -current.
 1.2.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.3.2.1 18-Oct-2000  tv Pullup by patch [itojun]:
printf-format audit. from sommrfeld@netbsd.org. sync with kame.
 1.20 09-Feb-2024  andvar s/connetion/connection/ in messages.
 1.19 26-Nov-2010  christos KNF, pass lint.
 1.18 19-Apr-2009  lukem Fix -Wsign-compare issues
 1.17 24-May-2006  christos branches: 1.17.28;
Coverity CID 1321: False -gative detection.
 1.16 23-May-2006  christos Coverity CID 3671: Cast close to void and don't close negative fds.
 1.15 16-Mar-2005  itojun plug memory leak. Patrick Latifi
 1.14 29-Oct-2004  dsl Add (unsigned char) cast to ctype functions
 1.13 02-Sep-2003  itojun use poll(2) instead of select(2). based on patch from deraadt@openbsd, via kame
 1.12 08-Sep-2002  itojun socklen_t audit. from deraadt, sync w/kame
 1.11 20-Aug-2002  itojun die if fd_set overrun. explicitly turn off use of IPv4 mapped addr on AF_INET6
socket.
 1.10 24-Jun-2002  itojun correct ftp relay functionality.
 1.9 07-Jun-2002  itojun remove unmaintained option (#ifdef FAITH4). sync w/kame
 1.8 24-Apr-2002  itojun branches: 1.8.2;
handle ECONNABORTED at accept(2). correct error handling for connect(2)
sync w/ kame
 1.7 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.6 14-Sep-2000  itojun sync with latest kame.
- improve logging.
- correct multicast address check for the relayed destination.
- repair EPRT translation.
- support 227 result without paren.
- change behavior on no-argument to more sensible side
(before: relay telnet, now: error)
WARNING: you may need to change your startup script.
 1.5 31-May-2000  itojun sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.4 20-Dec-1999  itojun branches: 1.4.2;
void unbounded sprintf().
fix proc title.
 1.3 20-Dec-1999  itojun fix uninitialized pointer access on mapped addr handling.
add more debugging info on setsockopt errors.
 1.2 09-Dec-1999  itojun sync with latest KAME. nuke use of ss_{len,family}.
CVsA: ----------------------------------------------------------------------
 1.1 13-Jul-1999  itojun branches: 1.1.4;
add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.1.4.1 27-Dec-1999  wrstuden Pull up to last week's -current.
 1.4.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.8.2.1 24-Jun-2002  lukem Pull up revision 1.10 (requested by itojun in ticket #355):
correct ftp relay functionality.
 1.17.28.1 13-May-2009  jym Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
 1.9 23-Jan-2018  sevan ansify - drop the K&R style prototypes & implementations.
 1.8 26-Nov-2010  christos KNF, pass lint.
 1.7 19-Apr-2009  lukem Fix -Wsign-compare issues
 1.6 02-Sep-2003  itojun branches: 1.6.40;
initialize sentinel.next so that config_list does not get garbage
 1.5 08-Sep-2002  itojun socklen_t audit. from deraadt, sync w/kame
 1.4 07-Jun-2002  itojun remove unmaintained option (#ifdef FAITH4). sync w/kame
 1.3 21-Nov-2001  itojun deal with wait3() returning -1. be careful on malloc failures. sync with kame
 1.2 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.1 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.6.40.1 13-May-2009  jym Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
 1.3 23-Jan-2018  sevan More K&R style prototypes missed in the previous run
 1.2 09-May-2002  itojun drop support for rsh/rlogin relaying.
use of .rhosts authentication should be discouraged with relaying service.
sync w/kame
 1.1 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.6 20-Aug-2003  itojun no longer in use
 1.5 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.4 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.3 31-May-2000  itojun sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.2 09-Dec-1999  itojun branches: 1.2.2;
sync with latest KAME. nuke use of ss_{len,family}.
CVsA: ----------------------------------------------------------------------
 1.1 13-Jul-1999  itojun branches: 1.1.4;
add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.1.4.1 27-Dec-1999  wrstuden Pull up to last week's -current.
 1.2.2.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.11 30-Aug-2011  joerg __dead + __printflike
 1.10 26-Nov-2010  christos KNF, pass lint.
 1.9 20-Aug-2002  itojun die if fd_set overrun. explicitly turn off use of IPv4 mapped addr on AF_INET6
socket.
 1.8 07-Jun-2002  itojun remove unmaintained option (#ifdef FAITH4). sync w/kame
 1.7 24-Apr-2002  itojun handle ECONNABORTED at accept(2). correct error handling for connect(2)
sync w/ kame
 1.6 21-Nov-2001  itojun deal with wait3() returning -1. be careful on malloc failures. sync with kame
 1.5 05-Sep-2001  itojun sync with the latest kame.
- select() with the right maxfd.
- don't write() with len <= 0.
- no wacky macro ERRSTR.
 1.4 15-Feb-2001  itojun pull latest faithd from kame. /etc/faithd.conf allows you to filter by prefix.
manpage cleanups.
 1.3 14-Sep-2000  itojun sync with latest kame.
- improve logging.
- correct multicast address check for the relayed destination.
- repair EPRT translation.
- support 227 result without paren.
- change behavior on no-argument to more sensible side
(before: relay telnet, now: error)
WARNING: you may need to change your startup script.
 1.2 31-May-2000  itojun sync with latest kame code. a bug with malloc() size (that can lead to
SEGV) is corrected.
 1.1 13-Jul-1999  itojun branches: 1.1.6;
add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".
 1.1.6.1 22-Jun-2000  minoura Sync w/ netbsd-1-5-base.

RSS XML Feed