document the flags field, and combine flags in the rpki example;
ok deraadt

Suggest to update RPKI once an hour.

In autonomous systems running bgpd(8) and rpki-client(8) on their edge
routers, it may be beneficial when out-of-the-box all routers don't all
do rpki fetches &

Suggest to update RPKI once an hour.

In autonomous systems running bgpd(8) and rpki-client(8) on their edge
routers, it may be beneficial when out-of-the-box all routers don't all
do rpki fetches & bgp loads at the same time. It is expected behavior
for RPKI information to un-evenly percolate towards the BGP edge in a
staggered way.

The 'once an hour' pace may be a reasonable balance between the needs of
internet users, and what network operators tolerate in churn.

OK deraadt@

show more ...

Use the new random interval support in cron instead of a random sleep.
The random intervals used can be adjusted as needed. OK deraadt@

Insert missing &&

OK claudio@

Attempt to smear out stampedes on the RPKI rsync servers

OK claudio@ benno@

Uncomment a single line in root's crontab to run rpki-client and reload
bpgd configuration, which enables Enterprise-Ready Industry-Leading-by-Example
RPKI ROA filtering on your OpenBGP edge.
Argumen

Uncomment a single line in root's crontab to run rpki-client and reload
bpgd configuration, which enables Enterprise-Ready Industry-Leading-by-Example
RPKI ROA filtering on your OpenBGP edge.
Arguments remain about how often to run this operation, for now we propose
9AM when people who can fix their shit are in the office.
ok claudio benno

show more ...

bump the random timeout to taking % 2048 sec to avoid modulus bias

ok phessler

Remove sendmail tentacles. ok krw@ ajacoutot@

switch over to smtpd by default.
ok deraadt gilles todd

add a random sleep of up to half an hour to distribute the server
load from spamd-setup. Brought up by phessler@ who also pointed out
that the percent sign must be escaped in the command.

ok ajacout

add a random sleep of up to half an hour to distribute the server
load from spamd-setup. Brought up by phessler@ who also pointed out
that the percent sign must be escaped in the command.

ok ajacoutot@ joerg@ phessler@ and sort of @blambert

show more ...

make weekly and monthly silent by default
add the same infrastructure to daily; silencing daily needs another step
discussed with ajacoutot@ okan@ todd@ sthen@ deraadt@ jmc@
"immediately commit" dera

make weekly and monthly silent by default
add the same infrastructure to daily; silencing daily needs another step
discussed with ajacoutot@ okan@ todd@ sthen@ deraadt@ jmc@
"immediately commit" deraadt@ (without seeing the final diff)

show more ...

revert previous, requested by kettenis@ and deraadt@

remove the empty script /etc/monthly
in preparation for improvements in /etc/daily and /etc/weekly
using feedback and suggestions from jmc@ and sthen@
ok jmc@, and sthen@ agreed with the general dire

remove the empty script /etc/monthly
in preparation for improvements in /etc/daily and /etc/weekly
using feedback and suggestions from jmc@ and sthen@
ok jmc@, and sthen@ agreed with the general direction

show more ...

spamd-setup now doesn't take -g - this is the new default.
noticed by jmc@

Make greylisting the default when spamd is enabled. Uses the new -g flag
for spamd-setup. OK beck@

Don't allow anyone but root to read /var/log/{daily,weekly,monthly}.out.
Unfortunately this does not fix existing file permissions.

Spotted by Antti Harri <iku at openbsd dot fi>.

OK millert@.

commented hourly spamd-setup run

spamd startup stuff

Move atrun(8) functionality into cron(8) proper. This fixes the
long-standing annoyance that atrun's granularity is 10 minutes.
Most at jobs run with a 1 minute granularity. Jobs submitted via
"at

Move atrun(8) functionality into cron(8) proper. This fixes the
long-standing annoyance that atrun's granularity is 10 minutes.
Most at jobs run with a 1 minute granularity. Jobs submitted via
"at now" or "batch" will run immediately. Includes a rewritten
cron(8) man page. at(1) will be integrated more closely into
cron at a future date.

Upgrading notes:
the atrun job in root's crontab should be removed.
the /var/at/spool directory is no longer used

show more ...

Scaffolding to support sendmail 8.12. Note that the new smmsp user/group
are *required*.

newsyslog/newsyslog -m shouldn't conflict in scheduling.

put hostname in mail subject; jbernard@tater.mines.edu

Example (commented out) entry for running newsyslog -m.

Avoid confusion on running /etc/daily on daylight-savings change days.

/etc does not contain bins