summaryrefslogtreecommitdiff
path: root/net
AgeCommit message (Collapse)AuthorFilesLines
2004-09-19Apply a security patch to correctly drop privileges.kim3-5/+14
No vulnerability exists because of this, but I think it is best to have this applied. (However, no entry in the vulnerabilities file will be added.)
2004-09-18Refer to IPL_NAME if IPL_NAT is not defined. This hopefully fixesuebayasi3-2/+29
a build failure reported by build builds. And while here, suppress GCC3 warnings by doing s/log()/xlog()/.
2004-09-17Assign maintainership to tech-pkg@, requested by David Ferlierxtraeme1-2/+2
in private email.
2004-09-16Change DIST_SUBDIR from PKGNAME_NOREV to PKGNAME, since the man pagewiz2-7/+7
changed again (see previous commit) and to avoid breakage for people who have the old distfile.
2004-09-16Use statvfs on NetBSD>=2.0D.minskim2-1/+24
2004-09-16Use statvfs on NetBSD>=2.0D.minskim3-6/+25
2004-09-16Download a stable distfile instead of a moving target.minskim2-7/+7
2004-09-16The checksum for dnstop.8 changed; sync to the new one.he1-3/+3
2004-09-15Update to version 3.0.8.salo2-5/+5
Changes: Some bugs fixed; http:authorization setting added. - made http:cache-control host specific; added hftp:cache-control. - new setting http:authorization. - fixed sftp and fish protocols working with FreeBSD servers. - fixed transfer of zero length files when modification time is not known. - fixed put over fish protocol when source file grows. - fixed a core dump in FXP transfer mode.
2004-09-15Strip binaries on installadam2-1/+14
2004-09-14Update net/samba to 3.0.7. Changes from version 3.0.5 include:jlam6-232/+229
o Fixes for two Denial of Service vulnerabalities (CVE ID# CAN-2004-0807 & CAN-2004-0808). o Winbind failure to return user entries under certain conditions. o Syntax errors in the OpenLDAP schema file (samba.schema). o Printing errors caused by not setting default values for the various printing commands. * Disable 'winbind enable local accounts' by default. o Schannel failure in winbindd. o Incompatibilities between the 'write list' and 'force user' smb.conf options. o Premature optimization of the open_directory() internal function that broke tools such as the ArcServe backup agent, Macromedia HomeSite, and Robocopy. o Sharing violation errors commonly seen when opening when serving Microsoft Office documents from a Samba file share. o Browsing problems caused by an apostrophe (') in the computer's description field. o Problems creating special file types from UNIX CIFS clients and enabling 'unix extensions'. o Fix stalls in smbd caused by inaccessible LDAP servers. o Remove various memory leaks. o Fix issues in the password lockout feature. o Using a cups server other than localhost. o Maintaining the service principal entry in the system keytab for integration with other kerberized services. Please refer to the 'use kerberos keytab' entry in smb.conf(5). When using the heimdal kerberos libraries, you must also specify the following in /etc/krb5.conf: [libdefaults] default_keytab_name = FILE:/etc/krb5.keytab o Support for maintaining individual printer names stored separately from the printer's sharename. o Support for maintaining user password history. o Support for honoring the logon times for user in a Samba domain. * Reintroduce 'force unknown acl user' parameter. When getting a security descriptor for a file, if the owner sid is not known, the owner uid is set to the current uid. Same for group sid.
2004-09-12Make build on 2.0 with a patch provided by Pavel Cahyna.wiz3-7/+11
Remove NOT_FOR_PLATFORM line.
2004-09-12Correct path to config.h.kristerw2-4/+4
2004-09-12Different platforms expect different names for the NSS winbind andjlam3-7/+42
WINS modules. Fix from PR pkg/26640 by John Benninghoff with modifications by me.
2004-09-10Fix build with gcc3.wiz2-1/+15
2004-09-10Mark as not for NetBSD>1.6ZC, since it uses the obsoleted-in-1.6ZDwiz1-1/+2
if_ieee80211.h header file.
2004-09-10coda5's C++ code doesn't compile with gcc-3.3 and higherdrochner1-1/+6
check and set PKG_FAIL_REASON to get a better error msg
2004-09-101. we need py-soappydrochner1-1/+3
2. py-soappy needs a threaded Python 1+2: we need threads
2004-09-09Fix a dependency to match the current version.wiz1-2/+2
2004-09-09+ ftplibpp (hi cjep!)xtraeme1-1/+2
2004-09-08Complete the job of detecting strcasestr(3) by using it if available.sketch4-1/+52
2004-09-08varargs->stdarg, fixes build with GCC3.sketch4-7/+93
Add dante to CONFLICTS as they install files with the same name (dante already has socks4 in its own CONFLICTS).
2004-09-08Update MASTER_SITES.xtraeme1-6/+6
2004-09-07Avoid invoking automake and autoconf, and instead patch configure directly.jmmv3-11/+36
This fixes the build of this package, which was failing because recent versions of automake do not accept some constructions used in it.
2004-09-06bettercjep1-1/+1
2004-09-06Initial import of ftplibpp version 1.0.1 as net/ftplibpp.cjep5-0/+73
ftplibpp is a C++ class providing ftp client functionality. It is a direct derivate from the great ftplib C library by Thomas Pfau.
2004-09-06Bugfix: a sprintf format string in the distribution patches was incorrect.cjs3-3/+17
2004-09-04AUTOMAKE_REQD should only be set to 1.4 in the few cases where needed,wiz2-4/+2
otherwise the default is better (and the variable doesn't need to be set). Remove a few cases where it was set unnecessarily.
2004-09-02Update to 0.8.4:jmmv2-6/+5
* Fix aclocal quotation issue (Tomasz K³oczko)
2004-09-02Note in DESCR and in README.pkgsrc that {dnscache,tinydns}-showctlschmonz6-16/+28
are useful only for services configured in the standard way (with {dnscache,tinydns}-conf(8)). On second thought, don't use the G prefix for the account names. It makes the dnscache account longer than 8 characters, which in turn makes noise in the nightly report. (Also, it looks a little funny.) Since this is already a heavily customized way of running djbdns services, it's just a little more customized now. Bump version.
2004-09-01Describe this package's particular reasons for RESTRICTED.schmonz1-1/+4
2004-09-01Add and enable djbdns-run.schmonz1-1/+2
2004-09-01I was going to do something that would've resulted in a CONFLICT,schmonz1-3/+1
but I didn't, so there isn't one! This does not imply world peace.
2004-09-01Initial import of djbdns-run, a package that provides NetBSD-styleschmonz11-0/+317
rc.d scripts (inspired by Bennett Todd's Linux init.d scripts) to run djbdns services. It also includes Jonathan de Boyne Pollard's dnscache-showctl and tinydns-showctl scripts.
2004-09-01Whitespace, and remove the "by Dan Bernstein" from COMMENT. Everyoneschmonz1-22/+22
already knows.
2004-09-01Updated man pages to 20031023. From the changelog:schmonz11-187/+122
* merge changes from http://cr.yp.to/djbdns/doc.tar.gz into: axfr-get.8, tinydns-data.8. * pickdns-conf.8, pickdns-data.8, pickdns.8: remove. * dnscache-conf.8, rbldns-conf.8, tinydns-conf.8, walldns-conf.8: adapt. * axfrdns-conf.8: new. pkgsrc changes: * Convert to bsd.options.mk. Available options: "ignoreip2 inet6". * Set USE_BUILDLINK3=yes. * Patch to honor PKG_SYSCONFDIR. * As long as we're patching, patch the installer to avoid setting unusual permissions on ${PREFIX} and ${PREFIX}/bin. * Work around the standard djbware errno problem on recent Linux glibc. * Update to the latest pkgsrc djbware RESTRICTED clause. * Remove the third-party logfile formatters (they can go elsewhere if needed). * Take maintainership (suggested by zuntum). Bump PKGREVISION.
2004-09-01Update to version 3.70.salo3-8/+8
Significant changes: - Rewrote core port scanning engine, which is now named ultra_scan(). Improved algorithms make this faster (often dramatically so) in almost all cases. Not only is it superior against single hosts, but ultra_scan() can scan many hosts (sometimes hundreds) in parallel. This offers many efficiency/speed advantages. For example, hosts often limit the ICMP port unreachable packets used by UDP scans to 1/second. That made those scans extraordinarily slow in previous versions of Nmap. But if you are scanning 100 hosts at once, suddenly you can receive 100 responses per second. Spreading the scan amongst hosts is also gentler toward the target hosts. Nmap can still scan many ports at the same time, as well. If you find cases where ultra_scan is slower or less accurate, please send a report (including exact command-lines, versions used, and output, if possible) to Fyodor. - Added --max_hostgroup option which specifies the maximum number of hosts that Nmap is allowed to scan in parallel. - Added --min_hostgroup option which specifies the minimum number of hosts that Nmap should scan in parallel (there are some exceptions where Nmap will still scan smaller groups -- see man page). Of course, Nmap will try to choose efficient values even if you don't specify hostgroup restrictions explicitly. - Rewrote TCP SYN, ACK, Window, and Connect() scans to use ultra_scan() framework, rather than the old pos_scan(). - Rewrote FIN, Xmas, NULL, Maimon, UDP, and IP Protocol scans to use ultra_scan(), rather than the old super_scan(). - Overhauled UDP scan. Ports that don't respond are now classified as "open|filtered" (open or filtered) rather than "open". The (somewhat rare) ports that actually respond with a UDP packet to the empty probe are considered open. If version detection is requested, it will be performed on open|filtered ports. Any that respond to any of the UDP probes will have their status changed to open. This avoids a the false-positive problem where filtered UDP ports appear to be open, leading to terrified newbies thinking their machine is infected by back orifice. - Nmap now estimates completion times for almost all port scan types (any that use ultra_scan()) as well as service scan (version detection). These are only shown in verbose mode (-v). On scans that take more than a minute or two, you will see occasional updates like: SYN Stealth Scan Timing: About 30.01% done; ETC: 16:04 (0:01:09 remaining) New updates are given if the estimates change significantly. - Added --exclude option, which lets you specify a comma-separated list of targets (hosts, ranges, netblocks) that should be excluded from the scan. This is useful to keep from scannig yourself, your ISP, particularly sensitive hosts, etc. The new --excludefile reads the list (newline-delimited) from a given file. All the work was done by Mark-David McLaughlin (mdmcl(a)cisco.com> and William McVey ( wam(a)cisco.com ), who sent me a well-designed and well-tested patch. - Nmap now has a "port scan ping" system. If it has received at least one response from any port on the host, but has not received responses lately (usually due to filtering), Nmap will "ping" that known-good port occasionally to detect latency, packet drop rate, etc. - Service/version detection now handles multiple hosts at once for more efficient and less-intrusive operation. - Nmap now wishes itself a happy birthday when run on September 1 in verbose mode! The first public release was on that date in 1997. - The port randomizer now has a bias toward putting commonly-accessible ports (80, 22, etc.) near the beginning of the list. Getting a response early helps Nmap calculate response times and detect packet loss, so the scan goes faster. - Host timeout system (--host_timeout) overhauled to support host parallelization. Hosts times are tracked separately, so a host that finishes a SYN scan quickly is not penalized for an exceptionally slow host being scanned at the same time. - When Nmap has not received any responses from a host, it can now use certain timing values from other hosts from the same scan group. This way Nmap doesn't have to use absolute-worst-case (300bps SLIP link to Uzbekistan) round trip timeouts and such. - Enabled MAC address reporting when using the Windows version of Nmap. Thanks to Andy Lutomirski (luto(a)stanford.edu) for writing and sending the patch. - Workaround crippled raw sockets on Microsoft Windows XP SP2 scans. I applied a patch by Andy Lutomirski (luto(a)stanford.edu) which causes Nmap to default to winpcap sends instead. The winpcap send functionality was already there for versions of Windows such as NT and Win98 that never supported Raw Sockets in the first place. - Changed how Nmap sends Arp requests on Windows to use the iphlpapi SendARP() function rather than creating it raw and reading the response from the Windows ARP cache. This works around a (reasonable) feature of Windows Firewall which ignored such unsolicited responses. The firewall is turned on by default as of Windows XP SP2. This change was implemented by Dana Epp (dana(a)vulscan.com). - Fixed some Windows portability issues discovered by Gisle Vanem (giva(a)bgnett.no). - Upgraded libpcap from version 0.7.2 to 0.8.3. This was an attempt to fix an annoying bug, which I then found was actually in my code rather than libpcap :). - Removed Ident scan (-I). It was rarely useful, and the implementation would have to be rewritten for the new ultra_scan() system. If there is significant demand, perhaps I'll put it back in sometime. - Documented the --osscan_limit option, which saves time by skipping OS detection if at least one open and one closed port are not found on the remote hosts. OS detection is much less reliable against such hosts anyway, and skipping it can save some time. - Updated nmapfe.desktop file to provide better NmapFE desktop support under Fedora Core and other systems. Thanks to Mephisto (mephisto(a)mephisto.ma.cx) for sending the patch. - Further nmapfe.desktop changes to better fit the freedesktop standard. The patch came from Murphy (m3rf(a)swimmingnoodle.com). - Fixed capitalization (with a perl script) of many over-capitalized vendor names in nmap-mac-prefixes. - Ensured that MAC address vendor names are always escaped in XML output if they contain illegal characters (particularly '&'). Thanks to Matthieu Verbert (mve(a)zurich.ibm.com) for the report and a patch. - Changed xmloutputversion in XML output from 1.0 to 1.01 to note that there was a slight change (which was actually the MAC stuff in 3.55). Thanks to Lionel CONS (lionel.cons(a)cern.ch) for the suggestion. - Many Windows portability fix and bug fixes, thanks to patch from Gisle Vanem (giva(a)bgnett.no). With these changes, he was able to compile Nmap on Windows using MingW + gcc 3.4 C++ rather than MS Visual Studio. - Removed (addport) tags from XML output. They used to provide open ports as they were discovered, but don't work now that the port scanners scan many hosts at once. They did not specify an IP address. Of course the appropriate (port) tags are still printed once scanning of a target is complete. - Configure script now detects GNU/k*BSD systems (whatever those are), thanks to patch from Robert Millan (rmh@debian.org) - Fixed various crashes and assertion failures related to the new ultra_scan() system, that were found by Arturo "Buanzo" Busleiman (buanzo(a)buanzo.com.ar), Eric (catastrophe.net), and Bill Petersen (bill.petersen(a)alcatel.com). - Fixed some minor memory leaks relating to ping and list scanning as well as the Nmap output table. These were found with valgrind ( http://valgrind.kde.org/ ). - Provide limited --packet_trace support for TCP connect() (-sT) scans. - Fixed compilation on certain Solaris machines thanks to a patch by Tom Duffy (tduffy(a)sun.com) - Fixed some warnings that crop up when compiling nbase C files with a C++ compiler. Thanks to Gisle Vanem (giva(a)bgnett.no) for sending the patch. - Tweaked the License blurb on source files and in the man page. It clarifies some issues and includes a new GPL exception that explicitly allows linking with the OpenSSL library. Some people believe that the GPL and OpenSSL licenses are incompatable without this special exception. - Fixed some serious runtime portability issues on *BSD systems. Thanks to Eric (catastrophe.net) for reporting the problem. - Changed the argument parser to better detect bogus arguments to the -iR option. - Removed a spurious warning message relating to the Windows ARP cache being empty. Patch by Gisle Vanem (giva(a)bgnett.no). - Removed some C++-style line comments (//) from nbase, because some C compilers (particularly on Solaris) barf on those. Problem reported by Raju Alluri <Raju.Alluri(a)Sun.COM>
2004-08-31Add pthread bl3, and some NOT_FOR_PLATFORM lineswiz1-1/+5
for older NetBSD releases, since this package needs the net80211/*.h header files. Addresses PR 26814.
2004-08-30update to ncftp-3.1.8recht2-6/+6
patch submitted by Ove Soerensen in PR 26810 3.1.8.1, 2004-07-27 + A fix for some DNS resolution problems on Linux. 3.1.8, 2004-07-07 + Ncftpget, ncftpput, and ncftpls now try to erase the arguments to the -u/-p/-j (user, password, account) options so they do not show in a "ps" command (Thanks, Konstantin Gavrilenko). + Recognize broken IBM mainframe FTP servers and work around them. + Working around a problem with ProFTPD 1.2.9 and later which would cause recursive downloads to fail. + Fixed a bug where ncftpput in recursive mode could lock up if you used a trailing slash on the directory to upload. + For the malicious server problem that was addressed in 3.1.5, enhanced the fix for better compatibility with mainframe FTP servers. + Ncftpget, ncftpput, and ncftpls, and ncftp's open command now accept an additional advanced option (-o) which lets you do things like disable NcFTP's use of SITE UTIME, FEAT, HELP SITE, etc. + Several HP-UX 10 compatibility bugs fixed (Thanks, Laurent FAILLIE). + A couple of looping problems with ncftpbatch fixed (Thanks, George Goffe). + Bug fixed with the upload socket buffer not being set (Thanks, ybobble). + The utility programs now accept "-" for the config file name used with "-f" to denote standard input (Thanks, Jeremy Monin). + Bug fixed with ncftpput when using both -c and -A (Thanks, Ken Woodmansee). + Support for boldface text in Windows version (Thanks, Adam Gates). 3.1.7, 2004-01-07 + Fixed a memory leak introduced in 3.1.6. + Fixed problem where it was assumed that daylight saving's time occurred at the same time each year for all timezones. + Bug fixed with running a shell escape. + Ncftpget now uses passive-with-fall-back-to-port mode like ncftpput and ncftpls. + Problem fixed with "ls -a" where occasionally a row with ".." and another file would be omitted. + Ncftpbatch now uses the UTC timezone for spool files. + The configure script can now detect when the config.cache file has been improperly recycled from a machine with a different OS. + The Windows version now uses the USERPROFILE environment variable, if it was set, as the location of the user's home directory. + Recognize broken DG/UX servers and work around them.
2004-08-30Updated mrtg to 2.10.15martti3-24/+12
* patches for netware support * the optional Conversion function wants to have the original data pulled in via snmp to work with, mapping \n and \r to nothing and stripping spaces must happen later. * better error message for missing library * Updated to snmp_session 1.05 * fix for cuin and cout values saved in html comments * fix for polish translation * nodetach option for running mrtg under daemontools * fixed indexmaker. added missing last for --section=portname code * fixed scaling bug in rateup (unsigned long) should have been long long * fix indexmaker when used with 14all
2004-08-30Add PAM support (pkg/26522)martti1-13/+28
2004-08-29Fix installation to make less warnings, and make defrag usewiz3-8/+18
bash, since it uses lots of bash features. Addresses PR 26799 by Simon Hitzemann. Bump PKGREVISION for bash dependency.
2004-08-28Improve wording, suggested by iceblox@IRChubertf1-0/+2
2004-08-28Use the new BUILDLINK_TRANSFORM commands to more precisely state thejlam1-2/+2
intended transformation: use "rm" to remove an option, "rmdir" to remove all options containing a path starting with a given directory name, and "rename" to rename options to something else.
2004-08-27libtool uses $(CC) to link objects, not $(LD).jlam2-1/+15
2004-08-27Replace RPATH_FLAG with LINKER_RPATH_FLAG and COMPILER_RPATH_FLAG,jlam4-8/+8
which are the full option names used to set rpath directives for the linker and the compiler, respectively. In places were we are invoking the linker, use "${LINKER_RPATH_FLAG} <path>", where the space is inserted in case the flag is a word, e.g. -rpath. The default values of *_RPATH_FLAG are set by the compiler/*.mk files, depending on the compiler that you use. They may be overridden on a ${OPSYS}-specific basis by setting _OPSYS_LINKER_RPATH_FLAG and _OPSYS_COMPILER_RPATH_FLAG, respectively. Garbage-collect _OPSYS_RPATH_NAME and _COMPILER_LD_FLAG.
2004-08-27Import ppp-lzs from pkgsrc-wip. Thank you, Iain Hibbert.reed1-1/+2
This is a NetBSD decompressor for PPP compatible with the Stac LZS scheme as described in rfc1974. The algorithm is apparently covered by patents held by Hifn in the USA and Europe though it was written independently with no help from Hifn or anybody associated with them, and with no reference to the patents. You might want to consider this 'example' code only if that makes you feel better. This package patches the included pppd in NetBSD and thus, in order to compile this, you will need to have the NetBSD source sets installed.
2004-08-27This is initial import of ppp-lzs-1.2.reed5-0/+85
It is a PPP daemon and LKM with Stac LZS decompression. This was packaged by Iain Hibbert and provided via pkgsrc-wip. This is a NetBSD decompressor for PPP compatible with the Stac LZS scheme as described in rfc1974. The algorithm is apparently covered by patents held by Hifn in the USA and Europe though it was written independently with no help from Hifn or anybody associated with them, and with no reference to the patents. You might want to consider this 'example' code only if that makes you feel better. This package patches the included pppd in NetBSD and thus, in order to compile this, you will need to have the NetBSD source sets installed. NOTE: I didn't test this software.
2004-08-25Rather than saying "family = family;", say nothing at all. This does notcjs2-5/+4
change the way the program works, so the package version has not been changed.
2004-08-22Change the way that legacy USE_* and FOO_USE_* options are convertedjlam2-31/+23
into the bsd.options.mk framework. Instead of appending to ${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes the default options to be the union of PKG_DEFAULT_OPTIONS and any old USE_* and FOO_USE_* settings. This fixes PR pkg/26590.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-11 04:46:25 +0000