We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to December 21.
-
+
- Correctly display pf(4) rdr rules with no proxy port. +
- Fix a missing initialisation in pfctl(8). + +
- Add spamd(8), which uses new pf(4) features to stop spammers even hitting the mail server. +
- Fix an Alpha-specific crash in pfsync(4) by using bcopy() instead of structure assignment. +
- Fix a use-after-free() in mailwrapper(8). +
- Add a new kernel pool(9) flag, PR_DEBUG, the use of which causes pool memory to be malloc(9)'d using M_DEBUG. + +
- Add new kernel malloc(9) type M_DEBUG. +
- Also support CORENIC handles in whois(1). +
- Add dsiz and ssiz keywords to ps(1) to show data size and stack size respectively. +
- Update awk(1) to 'one true awk' version 20021213 (Friday 13th ed.) +
- Add the -6 and -c registry shortcuts to whois(1), and deal with VNIC handles starting with '!'. +
- Better resolver error checking, a few fixes and a lot of message cleanup in ftp-proxy(8). +
- Stop '-k' being used as an abbreviation for '--keep-locals' in GNU as(1). +
- Optimise pf(4) skip-step calculation to O(n) from O(n-squared). +
- Fix pf(4) 'no {binat,nat,rdr}' evaluation. + +
- Allow pfctl(8) (with the -vsn) option to display translation statistics as -vsr does for rules. +
- When logging pf(4) rules from anchored rules, display the *anchor rule number, not the rule number within the anchored rules. (Hopefully both will be displayed sometime soon.) +
- Make sure that state table entry display doesn't try to print rules that are no longer in place. +
- Prevent changes to different rule types overwriting pf(4) DIOCCHANGE* tickets. +
- Support a single destination port in pf(4) rdr-anchor rules. +
- Match pf(4) {binat,nat,rdr}-anchor parsing to what is actually supported. + +
- Always compile in PRIQ and HFSC schedulers if ALTQ is included in the kernel. +
- Make SysV shared memory and semaphore limits configurable via sysctl(8). Oh yes. +
- whois(1) no longer barfs totally if just one of its query list is not found. +
- Add PRIQ scheduler support to pfctl(8). +
- su(1) only calls setlogin(2) if it's the session leader (as noted in the setlogin manpage.) +
- More compress(1)-works-like-gzip(1): Add -r (recurse) option, and make it truncate existing files when extracting. +
- Since pf(4) rule comparison is now done in userland, remove unused pf_compare* functions from the kernel. +
- pf(4) DIOCCHANGE* ioctls now require a ticket, to prevent races. +
- Merge pf(4) nat, binat and rdr structures and pools into pf_rule. +
- Fix the signedness of wsconsctl(8) variable display.focus, so a test against -1 now makes sense. + +
- Teach imake(1) how to detect automagically the gcc(1) stack protector. +
- Now pf(4) supports other queue types, only try to create a root queue for CBQ. +
- For some peculiar reason, support decoding in ppt(6). +
- Make linux emultation *stat64() work again. +
- Convert altq(9) disciplines HFSC, PRIQ and RIO to pf(4)-based (CDNR and RED to come,) and remove other queuing disciplines. + +
- iostat(8), systat(1) and vmstat(8) now update their disk stats automatically when a device is detached. +
- Enable login failure recording by default, by installing a blank /var/log/failedlogin (see login(1).)
- Fix some problems with the new inlined <ctype.h> functions on 64-bit architectures.
- Make cdio(1) deal properly with multiline CDDB responses. *************** *** 73,79 ****
- Stop close(2) clobbering errno in ld(1).
- Convert <ctype.h> macros into functions so they are consistent with those in libc.
- Change XDR.x_handy from int to u_int to avoid sign bugs.
!
Make ar(1) work more like its GNU and Solaris counterparts and not require an archive for the d,m,q and r operations. - Fix an mbuf-related panic in kernel PF_KEY v2 code.
- More ANSIfication in /sbin.
- Fix a potential (non-exploitable) buffer overrun in the httpd(8) macro FIX_PRECISION. --- 117,123 ----
- Stop close(2) clobbering errno in ld(1).
- Convert <ctype.h> macros into functions so they are consistent with those in libc.
- Change XDR.x_handy from int to u_int to avoid sign bugs. !
- Make ar(1) work more like its GNU and Solaris counterparts and not require an archive for the d,m,q and r operations.
- Fix an mbuf-related panic in kernel PF_KEY v2 code.
- More ANSIfication in /sbin.
- Fix a potential (non-exploitable) buffer overrun in the httpd(8) macro FIX_PRECISION. *************** *** 477,483 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.851 2002/12/15 21:47:45 deraadt Exp $