Commit Graph

613 Commits

Author SHA1 Message Date
z3APA3A
48b330da7c intermediate commit for logging 2020-10-30 11:17:28 +03:00
z3APA3A
4965bb5d9f Merge remote-tracking branch 'refs/remotes/origin/devel' into devel-logthread 2020-10-28 18:44:02 +03:00
z3APA3A
7124b4a141 Corrected: acl was ignored if preacl is empty 2020-10-28 17:08:12 +03:00
z3APA3A
8d73f977de initial logging refatoring commit, should be very buggy 2020-10-28 16:45:21 +03:00
z3APA3A
fa4322afee Merge remote-tracking branch 'refs/remotes/origin/devel' into devel-logthread
# Conflicts:
#	src/plugins.c
#	src/proxymain.c
#	src/sockmap.c
2020-10-24 11:35:47 +03:00
z3APA3A
cc8d3fc494 readme update 2020-10-19 13:28:02 +03:00
z3APA3A
677ed39c8f More accurate conditions in sockmap's main event loop 2020-10-19 13:03:55 +03:00
z3APA3A
53521393e9 fail portmapping if name can not be resolved 2020-10-16 23:15:28 +03:00
z3APA3A
5ee573dc7f correct IPv6 parsing where hostname is expected 2020-10-16 23:15:10 +03:00
z3APA3A
f4efbf12c2 README updated 2020-10-16 02:33:59 +03:00
z3APA3A
da215a152e Preauthorization added
ACL which can be checked prior to request parsing and authentication
(first entries with only IP and time, if any) are automatically marked
as preauthentication and checked immediately after connection is
accepted, prior to any resources are allocated. Connection is silently
dropped if preauthentication fails.
2020-10-16 01:38:21 +03:00
z3APA3A
b1a3755a94 Minor documentation update 2020-10-15 18:31:57 +03:00
z3APA3A
cb509c360f Use MAXFAILATTEMPT to limit socket failuers 2020-10-15 16:45:13 +03:00
z3APA3A
6092fd640f Better handle socket closing 2020-10-15 16:25:37 +03:00
z3APA3A
c63392f1ea Do not sigmask main thread for standalone services 2020-10-15 16:01:41 +03:00
z3APA3A
ef6d1d14e6 Allow to specify binding address for RADIUS 2020-10-15 12:28:53 +03:00
z3APA3A
42d4af4b98 Document RADIUS support 2020-10-15 12:28:32 +03:00
z3APA3A
7be5ba4981 Continue devel as 10 branch 2020-10-15 02:47:40 +03:00
z3APA3A
47f1bbc8d7 Merge branch 'master' into devel 2020-10-15 01:49:04 +03:00
z3APA3A
c9097154c6 ignore version 2020-10-15 01:38:13 +03:00
z3APA3A
9f6a8460ac limit failed mapping attempts to 13 2020-10-15 01:17:10 +03:00
z3APA3A
637cb2e76d adding guard for polling loop to prevent CPU exhastion in the case of system misbihavior 2020-10-14 18:58:52 +03:00
z3APA3A
7f0797178b Correct returning 98 code from socksmap 2020-10-14 16:16:27 +03:00
z3APA3A
47affa0add Correct returning 98 code from socksmap 2020-10-14 16:15:11 +03:00
z3APA3A
a4f95462b3 intermediate commit 2020-10-14 16:10:35 +03:00
z3APA3A
eb829b062b Major code refactoring
- sockmapping rewritten from stratch to minimilse polling. poll() is now
only called if blocking is actually expected, splice pipes are now
polled if splice fails, buffers flushing is much more accurate.
- logging code moved to separate files
- signal masks added to client threads to prevent unneeded interruptions
- bandwidth limitation will not delay the thread after client or server
shutdown
2020-10-09 15:42:34 +03:00
z3APA3A
3dd1969657 Move logging to log.c 2020-10-07 19:03:59 +03:00
z3APA3A
b6629850e5 Revert "index file re-generated"
This reverts commit e3840d2258.
2020-10-07 11:50:51 +03:00
z3APA3A
e3840d2258 index file re-generated 2020-10-07 11:42:01 +03:00
z3APA3A
8c92470124 countall, nocountall -N options are documented 2020-10-07 11:35:51 +03:00
z3APA3A
024c0fb749 countall, nocountall, -N options are documented 2020-10-07 11:35:20 +03:00
z3APA3A
ebd7b34159 -N(NAT_address) option added for socks 2020-10-07 11:21:01 +03:00
z3APA3A
d0725163d1 countall / nocountall ssupport added 2020-10-06 14:29:08 +03:00
z3APA3A
cc6ec2445c Do not overwrite connection for HTTP "upgade" 2020-08-18 18:43:22 +03:00
z3APA3A
1075370594 Don't terminate connection on datagram sending issue in SOCKSv5 UDP ASSOCIATE 2020-08-08 13:56:34 +03:00
z3APA3A
1fd759d327 Correct typo (name resolution could fail on some platforms) 2020-08-07 12:14:03 +03:00
z3APA3A
dd75eaa35e Link with -fPIE for Linux 2020-08-07 11:20:29 +03:00
z3APA3A
c30b4637a5 Do not resolve hostname to IP on ACL destination 2020-08-06 17:57:50 +03:00
z3APA3A
8c511a19e9 Do not resolve hostname to IP on ACL destination 2020-08-06 17:56:28 +03:00
z3APA3A
35153001ed Use -fPIC instead of -fpic 2020-08-06 16:19:55 +03:00
z3APA3A
3b5fa46e27 Change Proxy-authorization to Proxy-Authorization for compatiblity with RFC ignorant upstreams 2020-07-02 18:34:37 +03:00
z3APA3A
19eef46d7e Compile error in last commit corrected 2020-06-23 11:17:32 +03:00
z3APA3A
c532958b9f Do not cache external port 2020-06-17 16:14:34 +03:00
z3APA3A
936724f4f7 documentation updated for authcachtype 2020-06-17 16:14:23 +03:00
z3APA3A
1e7e94d7ac corrected 'acl' and 'ext' cach types added with previous commit
acl - allows to bind cache entry to ACL to prevent caching
authentication for different services
ext - allows to cache external address
both options are useful with RADIUS
2020-06-17 16:09:28 +03:00
z3APA3A
859713d10f Fail if can not bind to device 2020-06-17 16:05:23 +03:00
z3APA3A
9eac5c13a8 Correct wildcard hostname compare and make it case-insensitve where possible 2020-04-11 11:34:08 +03:00
z3APA3A
041134007d Correct ip/network/hostname parsing in ACLs 2020-04-11 09:58:47 +03:00
z3APA3A
37c380f4f7 Documentation example corrected 2019-12-04 17:56:06 +03:00
z3APA3A
9996856698 Send Basic vs basic for Basic HTTP auth to deal with reportedly broken implementation 2019-10-16 11:29:07 +03:00