z3APA3A
2983575952
banlimits for old connection may stop functioning on configuration reload
2017-06-25 18:37:19 +03:00
z3APA3A
4251322aad
Support hostnames for chained socks5+/socks4+/connect+ requests
2017-03-07 01:19:04 +03:00
z3APA3A
d40e5d458c
FIX: tcppm may not work with parent proxy
2017-02-02 00:36:59 +03:00
z3APA3A
c1beee44ef
Add support for -os, -oc, -ol
...
-ocOPTIONS, -osOPTIONS, -olOPTIONS - options for client (oc), server
(os) or listening (ol) socket
e.g.
proxy -ocTCP_NODELAY,SO_KEEPALIVE,SO_DONTROUTE
2016-12-25 02:46:30 +03:00
z3APA3A
2ed83b0d6e
set TCP_NODELAY for DNS resolution over TCP
2016-12-25 01:28:16 +03:00
z3APA3A
e2884b182a
Add timeout for connect in all modules
2016-12-23 00:56:16 +03:00
z3APA3A
e7433d633c
'radius' and 'auth radius' support added (not tested yet)
...
Example:
radius secret 192.168.0.1 192.168.0.2
authcache ip,user
auth cache radius
2016-12-20 19:50:50 +03:00
z3APA3A
f709255d62
Copyrights cleaned, authradius.c added
2016-12-20 15:47:02 +03:00
z3APA3A
a9fb0ea969
Correct previous resolver patch
2016-12-12 12:38:33 +03:00
z3APA3A
afbc27eac4
Correct resolver to handle non-compressed answers
2016-12-11 03:25:18 +03:00
Vladimir Dubrovin
88af9d6050
handle IPv6/name bind reply from parent
2016-11-20 22:24:04 +03:00
z3APA3A
a8f8a4d624
'if' is not required
2016-09-07 18:35:01 +03:00
z3APA3A
4e4f71712d
Fix: 'extip' may fail with 9 error code
2016-08-16 15:21:02 +03:00
z3APA3A
fbcdcf3d7b
Correct IP matching in cache auth
2016-05-17 23:27:10 +03:00
z3APA3A
cfa4d11027
Do not fail connection with 333 error on configuration reload
2016-04-26 18:50:57 +03:00
z3APA3A
eeb2d78fb1
re-authenticate user on
2016-03-28 17:49:27 +03:00
z3APA3A
dcec2cadaa
support external username / password up to 128 octets
2016-03-10 17:05:56 +03:00
z3APA3A
3b8e7741b3
Compilation warnings cleanup
2016-02-16 15:29:51 +03:00
z3APA3A
3680f2d3b1
Do not negotiate handshake for extip redirection
2016-02-08 14:39:29 +03:00
z3APA3A
13a7d6be11
Replace memcpy with assignment where appropriate
2016-02-05 18:31:17 +03:00
z3APA3A
3cc9796583
Support for 'extip' and 'smtp' parent types added
2016-02-05 01:52:45 +03:00
z3APA3A
fec0da52af
fixed: use SASIZE() instead of sizeof() in connect() for FreeBSD compatibility
2016-01-25 14:49:17 +03:00
z3APA3A
4af5f2fde7
Use SASIZE() instead of sizeof() in bind() for FreeBSD compatibility
2016-01-22 15:59:40 +03:00
z3APA3A
359026cb5f
!!Fix: destination IP may be not checked against ACL
2016-01-21 15:45:39 +03:00
z3APA3A
fcbccf39ef
Use configured timeouts for DNS operations instead static ones
2016-01-17 02:13:17 +03:00
z3APA3A
7f90b6eae2
fixed parent IPv6 connect proxy
2016-01-06 21:09:17 +03:00
z3APA3A
9dda666d8d
minor changes in clientnegotiate()
...
1. Use [] for hostname in form of IPv6 address
2. Remove large buffer from stack
2016-01-04 01:30:49 +03:00
z3APA3A
0e9cc9e330
http connect parent proxy fixed
2016-01-03 19:44:48 +03:00
z3APA3A
7df2461a26
Unify logging (make it always blocking in exchange for memory)
2015-12-27 19:27:17 +03:00
z3APA3A
f1ab0771a9
remove unused defines
2015-12-08 01:45:17 +03:00
z3APA3A
bd37ffa2f7
Race conditions fixed on config reload
...
Race conditions on logging and name resolution
2015-12-04 00:59:52 +03:00
z3APA3A
bc725189e3
bit more thread safety
...
One more potential race condition in hashtables
2015-05-04 18:06:07 +03:00
z3APA3A
aa4125a6f0
Avoid some potential hashtables race conditions
2015-05-04 17:39:24 +03:00
z3APA3A
bf8522321f
nscache bug fixed
...
nscache caused crash
2014-12-17 00:20:21 +03:00
z3APA3A
5844e165b5
nscache6 command support + nsrecord with IPv6
...
nscache6 - new command for IPv6 addresses cache
nsrecord supports IPv6 addresses
dnsauth should work with IPv6 servers and clients
+ caching is now more accurate
2014-12-14 05:33:08 +03:00
z3APA3A
7fc43e3fbd
add some entropy to DNS hashtable
2014-12-14 00:46:03 +03:00
z3APA3A
e37a7f48d7
Older CVS comments removed
2014-12-13 23:20:00 +03:00
z3APA3A
50db0015d3
IPv6 support for authnserver
2014-12-13 22:56:31 +03:00
z3APA3A
8a6632f0d1
Support IPv6 for parent proxy
...
Parent proxy can be on IPv6 network (except SOCKS4).
2014-12-13 22:38:03 +03:00
z3APA3A
d2437975b7
Fail IPv6 client in dnsauth
...
before IPv6 for dnsauth is implemented
2014-12-13 20:30:20 +03:00
z3APA3A
e39f4638cf
Corrected ACLs handling + network ranges in ACLS
...
ACL handling corrected (affected all ACL-based operations like
allow/deny/banlimin/etc).
Network ranges like
10.0.0.0-10.0.0.1.64
are winally supported in ACLS.
2014-12-13 19:48:41 +03:00
z3APA3A
042fc2afde
nserver address may be given as IPv6
2014-12-13 03:56:01 +03:00
z3APA3A
efdbaee29f
return more random serial generation
2014-12-11 03:49:26 +03:00
z3APA3A
8c95f4efcf
unused variables removed
2014-12-11 03:13:16 +03:00
z3APA3A
15f9f24f04
Name resolution via TCP support
...
Supports _real_ name resolution via parent proxy over TCP in nserver /
dnspr.
Can be used to create UDP->TCP name proxy, e.g.
nserver 127.0.0.1/tcp
nscache 65535
auth none
dnspr
auth iponly
tcppm 53 77.88.8.8 53
now, all names are resolved via TCP connection to 77.88.8.8
(dns.yandex.ru).
2014-12-11 03:06:34 +03:00
z3APA3A
f82d1e296b
Redirection fixes
2014-11-26 01:50:14 +03:00
z3APA3A
f70e4adf47
IPv6 bugfixes
2014-11-03 21:25:06 +03:00
z3APA3A
db5c4b1255
more changes for IPv6 client support
2014-10-21 06:00:56 +04:00
z3APA3A
c7310a2060
initial partial patches for IPv6 client support
2014-10-19 21:54:24 +04:00
z3APA3A
4fef3a1df0
More changes for IPv6 suppot +nbname auth removed
2014-05-12 01:11:04 +04:00
