summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * Disable watchlink from the buildStephen Hemminger2008-04-173-5/+2
| | | | | | | | No longer build/start/install watchlink
| * VC4.0.2debian/0.99.9-5Mark O'Brien2008-04-161-0/+18
| |
| * Merge branch 'master' of extreme:git/vyatta-quagga into glendaleStephen Hemminger2008-04-151-1/+1
| |\
| | * Fix packet filter state machineStephen Hemminger2008-04-151-1/+1
| | | | | | | | | | | | | | | | | | | | | The filter rules were incorrect (jump to wrong offset), so the kernel would not accept them. Fixes: 2570
* | | Merge branch 'hollywood' of http://git.vyatta.com/vyatta-quagga into hollywoodTom Grennan2008-04-151-0/+1
|\ \ \
| * | | Merge branch 'glendale' into hollywoodrbalocca2008-04-111-0/+1
| |\| |
| | * | Add upgrade test to prermrbalocca2008-04-101-0/+1
| | | |
* | | | TCP MD5SIG patchMichael H. Warfield2008-04-158-0/+421
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | from http://www.gossamer-threads.com/lists/quagga/dev/15611 [clear_shim] Re: [quagga-users 9315] New md5 signature patch for bgp... quagga_md5_bsd_linux_v9.diff Remove Highlighting [In reply to] mhw at wittsend ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Jan 28, 2008, 12:55 PM And, of course, the moment I send off a patch against 0.99.9 and claim it should patch the CVS, I find out it does not. Post #2 of 3 (192 views) On Mon, 2008-01-28 at 14:50 -0500, Michael H. Warfield wrote: Permalink > Hello all! > Building on the efforts of Leigh Brown and the earlier works on an MD5 > signature patch for bgpd, I've incorporated the autoconf efforts by > Sargun Dhillon on top of my own changes for IPv6 along with filling in a > few missing spots in the autoconf stuff myself. Leigh had released a v7 > and I subsequently released a v8 patch for md5 signatures for Linux and > BSD to deal with conflicts with IPv6. This is now a v9 patch > incorporating some of the changes from Sargun and adding a few of my own > to complete the autoconf changes. > This patch is still against 0.99.9 but should patch cleanly against > CVS. Attached is the patch against CVS. It does NOT have a patch for config.h.in (that was a mistake on my part, it's not in CVS, it's generated but it's not regenerated if you are working from the releases and don't rerun autoheader) and fixes a problem with a header file and some alignments. [cl] > This adds a configure option, --enable-tcp-md5, to enable tcp md5 [cl] > signatures. This is not qualified against the operating system on which > it is being built. The patch should work on BSD and Linux. Other > operation systems are a crap shoot. I don't know. I presume some other > errors will occur on other operating systems which do not support MD5 > signatures in this manner. Since they're not supported now, this is no > great loss. Someone might want to test this in other environments, > though, and enhance it for those other environments. > > Attached... > > quagga_md5_bsd_linux_v9.diff > > http://www.wittsend.com/mhw/md5sig/quagga_md5_bsd_linux_v9.diff > > Is there anything left that needs to be done before this can be > committed to CVS? Can someone with commit privs please do the honors? Mike -- Michael H. Warfield (AI4NB) | (770) 985-6132 | mhw[at]WittsEnd.com /\/\|=mhw=|\/\/ | (678) 463-0932 | http://www.wittsend.com/mhw/ NIC whois: MHW9 | An optimist believes we live in the best of all PGP Key: 0xDF1DD471 | possible worlds. A pessimist is sure of it! Attachments: [unknown] quagga_cvs_md5_bsd_linux_v9.diff (18.4 KB) <http://www.gossamer-threads.com/lists/engine?do=post_attachment;postatt_id=1184;list=quagga> [unknown] signature.asc (0.30 KB) <http://www.gossamer-threads.com/lists/engine?do=post_attachment;postatt_id=1185;list=quagga> Signed-off-by: Tom Grennan <tgrennan@vyatta.com>
* | | Merge branch 'upstream' into hollywoodTom Grennan2008-04-1034-54/+400
|\ \ \ | |/ / |/| | | | | | | | | | | | | | Conflicts: ChangeLog zebra/zebra_rib.c
| * | [bgpd] remove unnecessary 0 entries from struct message'spaul2008-03-134-9/+5
| | | | | | | | | | | | | | | | | | | | | 2008-03-13 Paul Jakma <paul.jakma@sun.com> * (various) Remove 0 entries from struct message's, unneeded due to recent improvements in mes_lookup/LOOKUP.
| * | [ripd] remove unnecessary 0 entries from struct message'spaul2008-03-133-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | 2008-03-13 Paul Jakma <paul.jakma@sun.com> * ripd.c/rip_interface.c: Remove 0 entries from rip_msg ri_version_msg struct message's, not needed with recent fixes to mes_lookup.
| * | [lib] Fix the struct message LOOKUP function to be more robustpaul2008-02-283-10/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2008-02-28 Paul Jakma <paul.jakma@sun.com> * log.c: (mes_lookup) Sowmini Varadhan diagnosed a problem where this function can cause a NULL dereference, on lookups for unknown indices, or messages with NULL strings. Can occur, e.g., debug logging code when processing received messages. Fixed to accept a pointer to a default string to be used if there is no match. * log.h: LOOKUP adjusted to match
| * | [lib/linklist] Enforce "nodes must have data" invariant more rigorouslypaul2008-02-282-5/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2008-02-28 Paul Jakma <paul.jakma@sun.com> * linklist.c: This implementation expects that the data pointer not be null, e.g. listgetdata() asserts this. The list add methods don't apply the same sanity check. Noted by Jim Carlson in bug #437.
| * | + fix bug#326 by rib_lookup_and_pushup()pilot2008-02-264-0/+64
| | |
| * | [c++] remove/rename some names in headers that clash with C++ reserved wordspaul2008-02-265-8/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2008-01-30 Peter Szilagyi <sp615@hszk.bme.hu> * lib/stream.h: Remove named 'new' parameter in prototype for c++ header compatibility. * ospfd/ospf_opaque.h: ditto * ospfd/ospfd.h: Renamed struct export to _export for c++ header compatibility. * ospf6d/ospf6_area.h: ditto
| * | [tests:bgp] Further tests for 0 sized as_path segmentspaul2008-02-232-0/+22
| | | | | | | | | | | | | | | | | | 2008-02-23 Paul Jakma <paul.jakma@sun.com> * aspath_test.c: Test for 0-ASN sequences that still have data.
| * | [isisd] Bug #437: fix ssert caused by bad list managementpaul2008-01-294-5/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2008-01-29 James Carlson <james.d.carlson@sun.com> * Fix bug #437, assert due to bogus index management * isis_flags.c: (flags_initialize) new * (flags_get_index) fix off by one, leading to list assert on null node data. (flags_free_index) ditto. * isisd.c: (isis_area_create) use flags_initialize (isis_area_destroy) deconfigure circuits when taking down area.
| * | [bgpd] fix crash on startup if compiled IPv4-onlypaul2008-01-292-5/+9
| | | | | | | | | | | | | | | | | | | | | 2008-01-29 Jorge Boncompte <jorge@dti2.net> * bgp_network.c: (bgp_socket) IPv4-only version crashes if -l is not used as address will be null.
| * | [solaris] add missing makefile.am dependencypaul2008-01-132-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | 2008-01-13 Paul Jakma <paul.jakma@sun.com> * Makefile.am: pkg target should depend on the 'depend.%' files. Crops up now that solaris/ doesn't get descended into by general Quagga build.
| * | [link-detect] Improve BSD support.ajs2008-01-112-3/+16
| | | | | | | | | | | | | | | | | | 2008-01-11 Ingo Flaschberger <if@xip.at> * configure.ac: Improve HAVE_BSD_LINK_DETECT test.
| * | [link-detect] Improve BSD support.ajs2008-01-115-19/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2008-01-11 Andrew J. Schorr <ajschorr@alumni.princeton.edu> * lib/zebra.h: Revert previous change, no need to include <net/if_media.h> here. * zebra/ioctl.c: If HAVE_BSD_LINK_DETECT is defined, include <net/if_media.h> (if_get_flags) Remove debug messages about BSD link state. * zebra/kernel_socket.c: (bsd_linkdetect_translate) If link state is unknown, we should set the IFF_RUNNING flag.
| * | [link-detect] Try to get BSD link-detect to work properly.ajs2008-01-107-0/+82
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2008-01-10 Ingo Flaschberger <if@xip.at> * configure.ac: Define HAVE_BSD_LINK_DETECT if <net/if_media.h> is present. * lib/zebra.h: If HAVE_BSD_LINK_DETECT is defined, include <net/if_media.h>. * zebra/ioctl.c: (if_get_flags) If HAVE_BSD_LINK_DETECT, use the SIOCGIFMEDIA ioctl to ascertain link state. * zebra/kernel_socket.c: (bsd_linkdetect_translate) New function to map the ifm_data.ifi_link_state value into the IFF_RUNNING flag. (ifm_read) Call bsd_linkdetect_translate to fix the IFF_RUNNING flag before calling if_flags_update.
| * | [link-detect] Static interface routes should behave properly with link-detect.ajs2008-01-082-3/+9
| | | | | | | | | | | | | | | | | | | | | | | | 2008-01-08 Michael Larson <mike@vyatta.com> * zebra_rib.c: (nexthop_active_check) Replace if_is_up with if_is_operative to solve problems with static interface routes not behaving properly with link-detect.
| * | [lib] add mising UL qualifier to numerical constantpaul2008-01-082-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | 2008-01-08 Pavol Rusnak <prusnak@suse.cz> * memory.c: (mtype_memstr) Fix accidental shift past width of type, constant should have been forced to UL, rather than being left to default to int.
| * | [bgpd] Fix number of DoS security issues, restricted to configured peers.paul2007-12-227-8/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2007-12-22 Paul Jakma <paul.jakma@sun.com> * Fix series of vulnerabilities reported by "Mu Security Research Team", where bgpd can be made to crash by sending malformed packets - requires that bgpd be configured with a session to the peer. * bgp_attr.c: (bgp_attr_as4_path) aspath_parse may fail, only set the attribute flag indicating AS4_PATH if we actually managed to parse one. (bgp_attr_munge_as4_attrs) Assert was too general, it is possible to receive AS4_AGGREGATOR before AGGREGATOR. (bgp_attr_parse) Check that we have actually received the extra byte of header for Extended-Length attributes. * bgp_attr.h: Fix BGP_ATTR_MIN_LEN to account for the length byte. * bgp_open.c: (cap_minsizes) Fix size of CAPABILITY_CODE_RESTART, incorrect -2 left in place from a development version of as4-path patch. * bgp_packet.c: (bgp_route_refresh_receive) ORF length parameter needs to be properly sanity checked. * tests/bgp_capability_test.c: Test for empty capabilities.
* | | Merge branch 'master' of git:/git/vyatta-quaggaMark O'Brien2008-04-071-1/+1
|\ \ \ | | |/ | |/|
| * | interface running status fixStephen Hemminger2008-04-041-1/+1
| | | | | | | | | | | | | | | | | | The IFF_RUNNING flag is indeterminate if interface is not IFF_UP. Basically the carrier state is driver dependent and wrong when the interface is admin down.
* | | 3.0.2Mark O'Brien2008-04-041-0/+29
|/ /
* | add locking to prevent file update problemsdebian/0.99.9-4Stephen Hemminger2008-04-031-1/+19
| | | | | | | | | | The vyatta-interfaces script needs to update the linkstatus file, so locking is needed to prevent concurrent read/update problems.
* | fix build on on 64 bit platformsStephen Hemminger2008-04-032-2/+2
| | | | | | | | | | | | Use proper include files so watchlink can be built on 64 bit platforms. Not strictly necessary yet, since vyatta isn't doing 64 bit builds, but some development machines run 64 bit OS.
* | add wildcard for interfaces. use an "*" in place of an interface name--and ↵Michael Larson2008-03-311-2/+1
| | | | | | | | | | | | the address provided will exclude all matching addresses across all ethernet addresses.
* | Merge branch 'master' of http://git.vyatta.com/vyatta-quaggaMichael Larson2008-03-312-1/+33
|\ \
| * | Filter unwanted netlink messagesStephen Hemminger2008-03-312-1/+33
| | | | | | | | | | | | | | | | | | Use socket filter to drop unwanted messages on the netlink listen socket. This prevents problems where the listener socket buffer gets overrruns with echos of the new route update that occurs when link changes.
* | | modified watchlink parser to support the following behaviors:Michael Larson2008-03-314-2/+57
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | > comments are now allowed after the # symbol after each entry > address ranges are now supported in the matching if the user enters a netmask value, then every address within the range is exlcluded > ip value (without a mask) is treated as a /32 for matching > matching is against the masked off address value, the mask is specified by the exclusion entry (and not by the configured address value) > sig_usr1 will reload the configuration and is required after each modification of the exclude file. The format of the file is the following: [interface] [address|network] #comments Only one entry per line is allowed vifs are supported in the interface line (i.e. eth0.1w)
* | added interface/address exclusion support to watchlink. The correct format is:Michael Larson2008-03-306-17/+91
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [interface] [interface] [ip/mask] It should also accept a plain IP--but I haven't tested this yet. Also added syslogging at the info level on interface up/down events. This change provides support for HA to work with interface cable event. HA and VRRP will need to populate the /var/linkstatus/exclude file with the VIPs under their management. In addition to circumvent an additional problem in HA there needs to be an additional address on the monitored interface, otherwise HA will admin down the interface when the cable is pulled
* | Remove unused lintian "ignore" optionrbalocca2008-03-211-1/+0
| |
* | support 64bitMichael Larson2008-03-201-1/+1
| |
* | bumped up netlink recv buffer limits for zebra--should alleviate netlink ↵Michael Larson2008-03-202-3/+3
| | | | | | | | | | | | error msgs that occur under large routing tables when layer 2 event occurs.
* | Merge branch 'master' of git:/git/vyatta-quaggaMark O'Brien2008-03-191-1/+1
|\ \ | | | | | | | | | | | | | | | Conflicts: debian/changelog
| * | 3.0.1Mark O'Brien2008-03-181-0/+29
| | |
* | | VC4.0.1debian/0.99.9-3Mark O'Brien2008-03-181-0/+29
|/ /
* | And with the correct licensing headers.Michael Larson2008-03-171-22/+3
| |
* | revert behavior for watchlink to pulling/pushing address on interface on ↵Michael Larson2008-03-171-6/+38
| | | | | | | | IFF_RUNNING|IFF_UP event.
* | Fix Bug 2750 bgp: large ASN shown as negativeMohit Mehta2008-03-142-5/+5
| | | | | | | | - 'vtysh -c "sh run" | grep bgp' gives an accurate 32-bit AS number now
* | Fix 2842: Protocol debug does not take affect until underlying log levelStig Thormodsrud2008-03-131-1/+2
| | | | | | | | is lowered
* | Merge branch 'glendale'Mohit Mehta2008-03-111-14/+14
|\ \
| * | Fix Bug 2750 bgp: large ASN shown as negativeMohit Mehta2008-03-111-14/+14
| | | | | | | | | | | | - 32 bit asns show allright now
* | | Change license notice from VPL to GPLv2Stephen Hemminger2008-03-1011-242/+33
|/ / | | | | | | Glendale is licensed under GPL version 2.
* | Bugfix: 2845Bob Gilligan2008-03-051-2/+0
| | | | | | | | Re-enable handling of RTM_DELLINK.
* | vc4.0.0debian/0.99.9-2Mark O'Brien2008-02-251-0/+117
| |
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-29 01:49:10 +0000