z3APA3A
4965bb5d9f
Merge remote-tracking branch 'refs/remotes/origin/devel' into devel-logthread
2020-10-28 18:44:02 +03:00
z3APA3A
7124b4a141
Corrected: acl was ignored if preacl is empty
2020-10-28 17:08:12 +03:00
z3APA3A
fa4322afee
Merge remote-tracking branch 'refs/remotes/origin/devel' into devel-logthread
...
# Conflicts:
# src/plugins.c
# src/proxymain.c
# src/sockmap.c
2020-10-24 11:35:47 +03:00
z3APA3A
da215a152e
Preauthorization added
...
ACL which can be checked prior to request parsing and authentication
(first entries with only IP and time, if any) are automatically marked
as preauthentication and checked immediately after connection is
accepted, prior to any resources are allocated. Connection is silently
dropped if preauthentication fails.
2020-10-16 01:38:21 +03:00
z3APA3A
a4f95462b3
intermediate commit
2020-10-14 16:10:35 +03:00
z3APA3A
d0725163d1
countall / nocountall ssupport added
2020-10-06 14:29:08 +03:00
z3APA3A
3b5fa46e27
Change Proxy-authorization to Proxy-Authorization for compatiblity with RFC ignorant upstreams
2020-07-02 18:34:37 +03:00
z3APA3A
19eef46d7e
Compile error in last commit corrected
2020-06-23 11:17:32 +03:00
z3APA3A
c532958b9f
Do not cache external port
2020-06-17 16:14:34 +03:00
z3APA3A
1e7e94d7ac
corrected 'acl' and 'ext' cach types added with previous commit
...
acl - allows to bind cache entry to ACL to prevent caching
authentication for different services
ext - allows to cache external address
both options are useful with RADIUS
2020-06-17 16:09:28 +03:00
z3APA3A
859713d10f
Fail if can not bind to device
2020-06-17 16:05:23 +03:00
z3APA3A
9eac5c13a8
Correct wildcard hostname compare and make it case-insensitve where possible
2020-04-11 11:34:08 +03:00
z3APA3A
9996856698
Send Basic vs basic for Basic HTTP auth to deal with reportedly broken implementation
2019-10-16 11:29:07 +03:00
z3APA3A
e7e7d2fddf
"limit" support in authcache to bind sessions to ip
2019-08-21 15:20:43 +03:00
z3APA3A
eb09ae7c58
Support socket options for connback sockets and connection timeouts
2018-05-05 17:16:51 +03:00
z3APA3A
951304e18e
Send Connection instead of Proxy-Connection to parent proxy
2018-04-27 22:17:37 +03:00
z3APA3A
24127196ce
Remove ICQPR because OSCAR is outdated
2018-04-22 21:46:00 +03:00
z3APA3A
b76b3b49fa
rename static buffer
2018-04-21 01:45:09 +03:00
z3APA3A
be5aa53106
Allow transparent client proxy with 'parent 1000 extip 0.0.0.0'
2018-04-15 00:28:59 +03:00
z3APA3A
ff91a6fe72
connlim / noconnlim commands added to support connection / connectio rate limits
2018-01-12 19:09:42 +03:00
z3APA3A
ff9c94f616
Fix: invalid reverse check for dnsresolve
2017-09-08 15:53:42 +03:00
z3APA3A
2983575952
banlimits for old connection may stop functioning on configuration reload
2017-06-25 18:37:19 +03:00
z3APA3A
4251322aad
Support hostnames for chained socks5+/socks4+/connect+ requests
2017-03-07 01:19:04 +03:00
z3APA3A
d40e5d458c
FIX: tcppm may not work with parent proxy
2017-02-02 00:36:59 +03:00
z3APA3A
c1beee44ef
Add support for -os, -oc, -ol
...
-ocOPTIONS, -osOPTIONS, -olOPTIONS - options for client (oc), server
(os) or listening (ol) socket
e.g.
proxy -ocTCP_NODELAY,SO_KEEPALIVE,SO_DONTROUTE
2016-12-25 02:46:30 +03:00
z3APA3A
2ed83b0d6e
set TCP_NODELAY for DNS resolution over TCP
2016-12-25 01:28:16 +03:00
z3APA3A
e2884b182a
Add timeout for connect in all modules
2016-12-23 00:56:16 +03:00
z3APA3A
e7433d633c
'radius' and 'auth radius' support added (not tested yet)
...
Example:
radius secret 192.168.0.1 192.168.0.2
authcache ip,user
auth cache radius
2016-12-20 19:50:50 +03:00
z3APA3A
f709255d62
Copyrights cleaned, authradius.c added
2016-12-20 15:47:02 +03:00
z3APA3A
a9fb0ea969
Correct previous resolver patch
2016-12-12 12:38:33 +03:00
z3APA3A
afbc27eac4
Correct resolver to handle non-compressed answers
2016-12-11 03:25:18 +03:00
Vladimir Dubrovin
88af9d6050
handle IPv6/name bind reply from parent
2016-11-20 22:24:04 +03:00
z3APA3A
a8f8a4d624
'if' is not required
2016-09-07 18:35:01 +03:00
z3APA3A
4e4f71712d
Fix: 'extip' may fail with 9 error code
2016-08-16 15:21:02 +03:00
z3APA3A
fbcdcf3d7b
Correct IP matching in cache auth
2016-05-17 23:27:10 +03:00
z3APA3A
cfa4d11027
Do not fail connection with 333 error on configuration reload
2016-04-26 18:50:57 +03:00
z3APA3A
eeb2d78fb1
re-authenticate user on
2016-03-28 17:49:27 +03:00
z3APA3A
dcec2cadaa
support external username / password up to 128 octets
2016-03-10 17:05:56 +03:00
z3APA3A
3b8e7741b3
Compilation warnings cleanup
2016-02-16 15:29:51 +03:00
z3APA3A
3680f2d3b1
Do not negotiate handshake for extip redirection
2016-02-08 14:39:29 +03:00
z3APA3A
13a7d6be11
Replace memcpy with assignment where appropriate
2016-02-05 18:31:17 +03:00
z3APA3A
3cc9796583
Support for 'extip' and 'smtp' parent types added
2016-02-05 01:52:45 +03:00
z3APA3A
fec0da52af
fixed: use SASIZE() instead of sizeof() in connect() for FreeBSD compatibility
2016-01-25 14:49:17 +03:00
z3APA3A
4af5f2fde7
Use SASIZE() instead of sizeof() in bind() for FreeBSD compatibility
2016-01-22 15:59:40 +03:00
z3APA3A
359026cb5f
!!Fix: destination IP may be not checked against ACL
2016-01-21 15:45:39 +03:00
z3APA3A
fcbccf39ef
Use configured timeouts for DNS operations instead static ones
2016-01-17 02:13:17 +03:00
z3APA3A
7f90b6eae2
fixed parent IPv6 connect proxy
2016-01-06 21:09:17 +03:00
z3APA3A
9dda666d8d
minor changes in clientnegotiate()
...
1. Use [] for hostname in form of IPv6 address
2. Remove large buffer from stack
2016-01-04 01:30:49 +03:00
z3APA3A
0e9cc9e330
http connect parent proxy fixed
2016-01-03 19:44:48 +03:00
z3APA3A
7df2461a26
Unify logging (make it always blocking in exchange for memory)
2015-12-27 19:27:17 +03:00
