We are working on OpenBSD-current.
! The following list sums up (almost) all the changes made up to December 27.
-
+
- Allow the log keyword in pf(4) scrub rules. +
- Some fixes to pf(4) ioctl handling. +
- When pf(4) is routing a stateful connection, use the correct pool address. +
- Fix kernel pf(4)'s ability to match binat-anchor rules. +
- Add a missing initialisation that was causing a crash in pf(4). + +
- Add spamd(8) support to rc(8). rc.conf and root's crontab. +
- More paranoia checks in kernel pf(4) routing. + +
- Unbreak spamd(8)'s connection timeout. +
- Honour the -R and -N flags to pfctl(8). +
- Tweak gcc(1)'s handling of inline functions w.r.t. the stack protector. + +
- New _spamd user and group for, uh, spamd(8). +
- Fix pfctl(8)'s display of 'control' keyword for CBQ rules. + +
- Make libc/md/md5c.c compile again for big-endian machines. +
- Avoid a null deref in pppd(8). +
- Remove a couple of extra ntohs(3) calls in pfsync(4). +
- Cleanup of atactl(8). + +
- Update Perl's Safe(3p) module to 2.09, fixing a security hole. +
- newsyslog(8) error messages now contain the line number. +
- Have 'chroot -U' do a setlogin(2) if the caller is, or can be made into, the session leader. +
- Make chroot(8) check for $SHELL defined as null as well as for undef. +
- Increase the receive buffer length of the correct socket in syslogd(8). +
- Fix pfctl(8)'s display of binat rules that use nat pools. +
- authpf(8) rules are now managed in their own anchor instead of at the end of the main rulebase. New *anchor rules are needed to activate authpf. + +
- Make sure the queue identifier returned by msgget(2) is greater than zero.
- Correctly display pf(4) rdr rules with no proxy port.
- Fix a missing initialisation in pfctl(8).
***************
*** 521,527 ****
www@openbsd.org
!
$OpenBSD: plus.html,v 1.853 2002/12/26 19:41:05 henning Exp $