version 1.31, 2012/09/07 02:04:13 |
version 1.32, 2012/09/07 02:27:05 |
|
|
<li>Increased TCP initial window to 14600 bytes as proposed in |
<li>Increased TCP initial window to 14600 bytes as proposed in |
draft-ietf-tcpm-initcwnd. |
draft-ietf-tcpm-initcwnd. |
<li>Cleanup handling of sockaddrs in degenerate use cases. |
<li>Cleanup handling of sockaddrs in degenerate use cases. |
<li>Improved handling of error and limit cases in file-descriptor passing. |
<li>Improved handling of error and limit cases in file descriptor passing. |
<li>Improved socketbuffer handling for AF_UNIX sockets. |
<li>Improved socketbuffer handling for AF_UNIX sockets. |
<li>Improved error handling in socket splicing. |
<li>Improved error handling in socket splicing. |
<li>IPv6 privacy addresses now appear alongside SLAAC addresses. |
<li>IPv6 privacy addresses now appear alongside SLAAC addresses. |
|
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpbench&sektion=1">tcpbench(1)</a> and |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpbench&sektion=1">tcpbench(1)</a> and |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&sektion=1">tmux(1)</a> |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tmux&sektion=1">tmux(1)</a> |
now rate limit their accepting of new connections when experiencing file descriptor exhaustion. |
now rate limit their accepting of new connections when experiencing file descriptor exhaustion. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a> destination/prefixlen syntax for ipv6 routes. |
<li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a> destination/prefixlen syntax for IPv6 routes. |
<li>ASCII packet dumping support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>ASCII packet dumping support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Better etherip and BGP protocol support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li>Better etherip and BGP protocol support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> |
|
|
<li>Adjust the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> route decision code to cover checks needed due to route reflection. |
<li>Adjust the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> route decision code to cover checks needed due to route reflection. |
<li>Various fixes to improve error reporting in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> including support of RFC 6608. |
<li>Various fixes to improve error reporting in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> including support of RFC 6608. |
<li>For debugging purposes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> can load MRT dumps into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>For debugging purposes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> can load MRT dumps into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Fixed distribution of MPLS VPN routes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> |
<li>Fixed distribution of MPLS VPN routes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>. |
<li>Introduce selected to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> as show rib attribute to only show selected routes. |
<li>Introduced a new option "selected" to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8">bgpctl(8)</a> "show rib" command to show only selected routes. |
<li>Correctly support the LSA_TYPE_AREA_OPAQ and LSA_TYPE_AS_OPAQ types in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ospfd&sektion=8">ospfd(8)</a>. |
<li>Correctly support the LSA_TYPE_AREA_OPAQ and LSA_TYPE_AS_OPAQ types in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ospfd&sektion=8">ospfd(8)</a>. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a> client now supports IPv6. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tftp&sektion=1">tftp(1)</a> client now supports IPv6. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&sektion=8">relayd(8)</a> able to handle transactions larger than 2GB in size. |
<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=relayd&sektion=8">relayd(8)</a> able to handle transactions larger than 2GB in size. |
|
|
<li>The prio and tos options are now part of the "set { }" block. |
<li>The prio and tos options are now part of the "set { }" block. |
See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>. |
See <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>. |
<li>Allow to set the tos on IPv6 packets. |
<li>Allow to set the tos on IPv6 packets. |
<li>Better demotion handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to prevent failovers w/o having a full state table. |
<li>Better demotion handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to prevent failovers without having a full state table. |
<li>Fixed printing of wildcard anchors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. |
<li>Fixed printing of wildcard anchors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. |
<li>... |
<li>... |
</ul> |
</ul> |
|
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">sshd-keygen(1)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">sshd-keygen(1)</a>: |
Add options to specify starting line number and number of lines to process |
Add options to specify starting line number and number of lines to process |
when screening moduli candidates, allowing processing of different parts of |
when screening moduli candidates, allowing processing of different parts of |
a candidate moduli file in parallel |
a candidate moduli file in parallel. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
The Match directive now supports matching on the local (listen) address and |
The Match directive now supports matching on the local (listen) address and |
port upon which the incoming connection was received via LocalAddress and |
port upon which the incoming connection was received via LocalAddress and |
LocalPort clauses. |
LocalPort clauses. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
Extend sshd_config Match directive to allow setting AcceptEnv and {Allow,Deny}{Users,Groups} |
Extend sshd_config Match directive to allow setting AcceptEnv and {Allow,Deny}{Users,Groups}. |
<li>Add support for RFC6594 SSHFP DNS records for ECDSA key types. (bz#1978) |
<li>Add support for RFC6594 SSHFP DNS records for ECDSA key types. (bz#1978) |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">sshd-keygen(1)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">sshd-keygen(1)</a>: |
Allow conversion of RSA1 keys to public PEM and PKCS8 |
Allow conversion of RSA1 keys to public PEM and PKCS8 |
|
|
Allow the sshd_config PermitOpen directive to accept "none" as an argument to |
Allow the sshd_config PermitOpen directive to accept "none" as an argument to |
refuse all port-forwarding requests. |
refuse all port-forwarding requests. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
Support "none" as an argument for AuthorizedPrincipalsFile |
Support "none" as an argument for AuthorizedPrincipalsFile. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">sshd-keyscan(1)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&sektion=1">sshd-keyscan(1)</a>: |
Look for ECDSA keys by default. (bz#1971) |
Look for ECDSA keys by default. (bz#1971) |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>: |
|
|
<p> |
<p> |
|
|
<li>Over 7600 ports, major performance and stability improvements in |
<li>Over 7600 ports, major performance and stability improvements in |
the package build process |
the package build process: |
<ul> |
<ul> |
<li>dpb got simpler and faster. Handles distfiles, works without any |
<li>dpb got simpler and faster. Handles distfiles, works without any |
option. |
option. |