===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/70.html,v
retrieving revision 1.39
retrieving revision 1.40
diff -u -r1.39 -r1.40
--- www/70.html 2021/10/02 14:38:53 1.39
+++ www/70.html 2021/10/02 14:39:31 1.40
@@ -519,19 +519,19 @@
Other userland network changes:
- Fixed acme-client(1) SAN generation for CSRs.
-
- Altered slowcgi(8) so it no longer sends debug logging to syslog unless debug logging is requested via the new -v flag.
- Added the ability for snmpd(8) to send SNMPv3 traps.
- Changed the default snmp(1) version to -v3 and removed the default community.
- Allowed "any" to be used as a listen on address in snmpd.conf(5).
- Allowed setting of the engineid in snmpd(8).
- Switched default snmpd(8) and snmp(1) auth back to hmac-sha1.
-
- Fixed incorrect status code for expired mails resulting in a misleading bounce report in smtpd(8).
- Removed default communities, changed seclevel default from none to enc and only allowed SNMPv3 by default in snmpd(8). Changed default authentication to SHA-256 and privacy protocol to AES in snmpd(8) and snmp(1).
+
- Fixed incorrect status code for expired mails resulting in a misleading bounce report in smtpd(8).
- Added TLS options cafile=(path), nosni, noverify and servername=(name) to smtp(1).
- Allowed specification of TLS ciphers and protocols in smtp(1).
-
- Prevented httpd(8) from trying to chunk encode an empty http body coming from an fcgi upstream.
- Added pledge(8) for ftpd(8) user processes.
- Allowed router solicitations from the unspecified address (::) in rad(8).
+
- Altered slowcgi(8) so it no longer sends debug logging to syslog unless debug logging is requested via the new -v flag.
+
- Prevented httpd(8) from trying to chunk encode an empty http body coming from an fcgi upstream.
- Used relative reference URIs in Location header on directory redirects in httpd(8), adding support for front-ending httpd with a TLS-terminating gateway that forwards unencrypted http traffic.
- Prevented a crash on strict alignment architectures of tcpdump(8) WireGuard printer.
- Made tcpdump(8) split the 802.11 sequence number field into its sequence number and fragment number components rather than printing the whole field in decimal.