240c240
<       while ((ch = getopt(argc, argv, "dnuf:m:p:a:")) != -1)
---
>       while ((ch = getopt(argc, argv, "dnusf:m:p:a:")) != -1)
259a260,262
>               case 's':               /* don't bind udp input port */
>                       SecureMode = 2;
>                       break;
337c340,345
<       finet = socket(AF_INET, SOCK_DGRAM, 0);
---
> 
>       if ( SecureMode == 2 )
>         finet = -1;
>       else
>         finet = socket(AF_INET, SOCK_DGRAM, 0);
>         
475c483
<           "usage: syslogd [-dnu] [-f config_file] [-m mark_interval] "
---
>           "usage: syslogd [-dnus] [-f config_file] [-m mark_interval] "

45c45
< .Op Fl dnu
---
> .Op Fl dnus
81a82,86
> .It Fl s
> Select the
> .Dq secure
> mode, in which syslogd will never bind any UDP port.
> This is usefull when you don't need to receive logs from or send logs to remote systems.
122,124c127,133
< opens the above described socket whether or not it is
< running in secure mode.
< If
---
> opens the above described socket by default,
> but all incoming data on this socket is discarded,
> infact the socket is only required to send forwarded messages.
> .Pp
> In
> .Dq secure
> mode
126,127c135,136
< is running in secure mode, all incoming data on this socket is discarded.
< The socket is required for sending forwarded messages.
---
> doesn't open any socket and can't log to a remote host or receive logs.
> This is the best choice if you want to log only locally.

3.0     6 commits	1 year
3.1     2 commits	1 year
3.2     1 commit	1 year
3.3     5 commits	6 months

/usr/src/usr.bin/ssh/sshd_config

-       #Protocol 2,1
+       Protocol 2


/usr/src/usr.bin/ssh/ssh_config

-       #   Protocol 2,1
+       Protocol 2

/usr/src/usr.bin/ssh/sshd_config

-       #ServerKeyBits 768
+       ServerKeyBits 1024

/usr/src/etc/rc

-       if /usr/bin/ssh-keygen -q -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''; then
+       if /usr/bin/ssh-keygen -q -b 2048 -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''; then

-       if /usr/bin/ssh-keygen -q -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''; then
+       if /usr/bin/ssh-keygen -q -b 2048 -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''; then

$ nslookup -type=MX openbsd.org
openbsd.org     preference = 10, mail exchanger = cvs.openbsd.org
openbsd.org     preference = 7, mail exchanger = openbsd.cs.colorado.edu

$ telnet openbsd.cs.colorado.edu 25
Trying 128.138.207.242...
Connected to openbsd.cs.colorado.edu.
Escape character is '^]'.
220 openbsd.org ESMTP Sendmail 8.12.10/8.12.10/millert ready willing and able at Mon, 10 Nov 2003 04:10:07 -0700 (MST)
VRFY root
250 2.1.5 <root@openbsd.cs.colorado.edu>
VRFY www
250 2.1.5 <www@openbsd.cs.colorado.edu>
VRFY hackers
250 2.1.5 <hackers@openbsd.cs.colorado.edu>
VRFY gobbles
550 5.1.1 gobbles... User unknown
VRFY _syslogd
250 2.1.5 Syslog Daemon <_syslogd@openbsd.cs.colorado.edu>
VRFY _x11
250 2.1.5 X server <_x11@openbsd.cs.colorado.edu>
EXPN hackers
250 2.1.5 <"|/var/mj2/bin/mj_enqueue -r -d openbsd.org -l hackers -P20 -p20">
EXPN misc
250 2.1.5 <"|/var/mj2/sbin/runprocmail misc">
EXPN tech
250 2.1.5 <"|/var/mj2/sbin/runprocmail tech">
EXPN ports
250 2.1.5 <"|/var/mj2/sbin/runprocmail ports">
EXPN bugs
250 2.1.5 <"|/var/mj2/sbin/runprocmail bugs">
expn microsoft-lovers
550 5.1.1 microsoft-lovers... User unknown
quit
221 2.0.0 openbsd.cs.colorado.edu closing connection
Connection closed by foreign host.

--- src/etc/rc  Tue Jul 29 19:52:17 2003
+++ rc.tmp      Thu Nov 13 13:23:49 2003
@@ -24,2 +24,10 @@

+# prune quickly with one rm, then use find to clean up /tmp/[lq]*
+# (not needed with mfs /tmp, but doesn't hurt there...)
+prune_tmp() {
+(cd /tmp && rm -rf [a-km-pr-zA-Z]* &&
+    find . ! -name . ! -name lost+found ! -name quota.user \
+       ! -name quota.group -execdir rm -rf -- {} \; -type d -prune)
+}
+
 # End subroutines
@@ -40,2 +48,3 @@
        chmod 600 /var/db/host.random >/dev/null 2>&1
+       prune_tmp
        if [ $? -eq 0 -a -f /etc/rc.shutdown ]; then
@@ -341,7 +350,3 @@

-# prune quickly with one rm, then use find to clean up /tmp/[lq]*
-# (not needed with mfs /tmp, but doesn't hurt there...)
-(cd /tmp && rm -rf [a-km-pr-zA-Z]* &&
-    find . ! -name . ! -name lost+found ! -name quota.user \
-       ! -name quota.group -execdir rm -rf -- {} \; -type d -prune)
+prune_tmp