j3d1/tinc
1
0
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity
2089 commits 2 branches 0 tags 10 MiB
Commit graph

163 commits

Author SHA1 Message Date
Guus Sliepen
0233b1d710 Decrement TTL of incoming packets. 
Tinc will now, by default, decrement the TTL field of incoming IPv4 and IPv6
packets, before forwarding them to the virtual network device or to another
node. Packets with a TTL value of zero will be dropped, and an ICMP Time
Exceeded message will be sent back.

This behaviour can be disabled using the DecrementTTL option.
 2012-02-20 16:34:02 +01:00
Guus Sliepen
d1dcdf8eb6 Merge branch 'master' of black:tinc 2012-02-18 14:31:08 +01:00
Guus Sliepen
3b1fad04de Allow setting DeviceType to tun or tap on Linux. 2012-02-18 14:37:52 +01:00
Guus Sliepen
9f6a96af39 Allow multiple BindToAddress statements. 2012-02-17 16:25:00 +01:00
Guus Sliepen
178e52f76e Allow linking with multiple device drivers. 
Apart from the platform specific tun/tap driver, link with the dummy and
raw_socket devices, and optionally with support for UML and VDE devices.
At runtime, the DeviceType option can be used to select which driver to
use.
 2011-12-04 01:20:59 +01:00
Guus Sliepen
8efc8dc961 Update info manual. 2011-07-16 21:44:17 +02:00
Guus Sliepen
e73052b054 Update documentation to mention pidfiles instead of controlcookies. 2011-06-26 12:59:11 +02:00
Guus Sliepen
8c953b1bfe Don't react to escape character in tincctl top. 
Not only the ESC key generates an escape character, but many other keys
do as well, such as arrow keys.
 2011-06-26 12:58:50 +02:00
Guus Sliepen
3b237afbda Re-add support for SIGALRM. 2011-06-25 20:20:07 +02:00
Guus Sliepen
2c5ded6520 Ensure that the texinfo manual can be converted to HTML. 
Somehow commit 2c30af6c90 was not properly
merged.
 2011-06-25 15:28:13 +02:00
Guus Sliepen
e8deda0b23 Update manpages and info manual. 2011-06-25 14:52:47 +02:00
Guus Sliepen
33f241d978 Merge branch 'master' of git://tinc-vpn.org/tinc into 1.1 
Conflicts:
	NEWS
	configure.in
	doc/tincd.8.in
	lib/pidfile.c
	lib/pidfile.h
	lib/xalloc.h
	lib/xmalloc.c
	src/conf.c
	src/conf.h
	src/connection.c
	src/connection.h
	src/event.c
	src/graph.c
	src/graph.h
	src/net.c
	src/net.h
	src/node.h
	src/openssl/crypto.c
	src/process.c
	src/protocol.c
	src/protocol_key.c
	src/route.c
 2011-06-06 20:42:15 +02:00
Guus Sliepen
4b3fd94b1c Improved --logfile option. 
Instead of UNIX time, the log messages now start with the time in RFC3339
format, which human-readable and still easy for the computer to parse and sort.
The HUP signal will also cause the log file to be closed and reopened, which is
useful when log rotation is used. If there is an error while opening the log
file, this is logged to stderr.
 2011-06-06 16:26:11 +02:00
Guus Sliepen
ce8775000a Merge branch 'master' of git://tinc-vpn.org/tinc into 1.1 
Conflicts:
	NEWS
	README
	configure.in
	doc/tincd.8.in
	lib/pidfile.c
	src/bsd/device.c
	src/dropin.h
	src/net.c
	src/net_packet.c
	src/node.c
	src/process.c
	src/tincd.c
 2011-05-09 21:35:14 +02:00
Guus Sliepen
67766d65f0 Update THANKS and copyright information. 2011-05-08 21:22:20 +02:00
Guus Sliepen
8d18cc6c4e Fix typo spotted by Andrew Scheller. 2011-01-29 10:49:44 +01:00
Guus Sliepen
c228da54d4 Update the manual. 2011-01-02 17:25:03 +01:00
Guus Sliepen
a22041922f Merge branch 'master' into 1.1 
Conflicts:
	doc/tincd.8.in
	lib/pidfile.c
	src/graph.c
	src/net.c
	src/net.h
	src/net_packet.c
	src/net_setup.c
	src/net_socket.c
	src/netutl.c
	src/node.c
	src/node.h
	src/protocol_auth.c
	src/protocol_key.c
	src/tincd.c
 2010-11-12 16:15:29 +01:00
Guus Sliepen
ff71f28902 Merge local host configuration with server configuration. 
With some exceptions, tinc only accepted host configuration options for the
local node from the corresponding host configuration file. Although this is
documented, many people expect that they can also put those options in
tinc.conf. Tinc now internally merges the contents of both tinc.conf and the
local host configuration file.
 2010-10-22 12:47:12 +02:00
Guus Sliepen
79e46d08a4 Merge branch 'master' into 1.1 
Conflicts:
	NEWS
	README
	configure.in
	src/net.c
	src/net.h
 2010-04-17 12:21:53 +02:00
Guus Sliepen
74653beb5b Mark Forwarding and DirectOnly options as being experimental. 2010-04-11 19:47:44 +02:00
Sven-Haegar Koch
103543aa2c Merge branch 'master' into 1.1 
Conflicts:
	NEWS
	README
	configure.in
	have.h
	src/conf.c
	src/conf.h
	src/net.c
	src/net_packet.c
	src/protocol_key.c
	src/protocol_subnet.c
	src/route.c
	src/tincd.c
 2010-03-26 16:51:03 +01:00
Guus Sliepen
146760bd35 Fix typo. 2010-03-10 16:07:01 +01:00
Guus Sliepen
ee64b8ef33 ConnectTo does not mean tinc does not listen for incoming connections anymore. 2010-03-08 17:54:57 +01:00
Guus Sliepen
3e4829e78a Add the DirectOnly option. 
When this option is enabled, packets that cannot be sent directly to the destination node,
but which would have to be forwarded by an intermediate node, are dropped instead.
When combined with the IndirectData option,
packets for nodes for which we do not have a meta connection with are also dropped.
 2010-03-02 22:55:24 +01:00
Guus Sliepen
95a6974de1 Add the Forwarding option. 
This determines if and how incoming packets that are not meant for the local
node are forwarded.  It can either be off, internal (tinc forwards them itself,
as in previous versions), or kernel (packets are always sent to the TUN/TAP
device, letting the kernel sort them out).
 2010-03-02 22:34:26 +01:00
Guus Sliepen
5038964032 Add the StrictSubnets option. 
When this option is enabled, tinc will not accept dynamic updates of Subnets
from other nodes, but will only use Subnets read from local host config files
to build its routing table.
 2010-03-02 00:18:44 +01:00
Guus Sliepen
40d91ff619 Update copyright notices. 2010-02-02 22:49:21 +01:00
Guus Sliepen
b455111184 Make MSS clamping configurable, but enabled by default. 
It can either be set globally in tinc.conf, or per-node in host config files.
 2010-01-16 20:16:33 +01:00
Guus Sliepen
a9a803d566 Allow port to be specified in Address statements. 
This allows one to connect to use more than one port number to connect to
another node. The syntax is now:

Address = <hostname> [<port>]
 2009-12-23 19:49:38 +01:00
Guus Sliepen
3849de9a33 Fix description of the WEIGHT environment variable. 2009-10-18 16:44:32 +02:00
Guus Sliepen
927064e5fd Small updates to the documentation. 
Mention that TCPOnly is not necessary anymore since tinc will autodetect
whether it can send via UDP or not. Also mention the WEIGHT environment
variable and the new default value (2048 bits) of RSA keys.
 2009-10-11 15:46:52 +02:00
Guus Sliepen
2c30af6c90 Ensure that the texinfo manual can be converted to HTML. 
The top node was made conditional with the @iftex command, since it should not
appear in PostScript and PDF output. However, it is still necessary for
texi2html, so we have to use @ifnottex instead.

Texi2html also complains about the use of @cindex in the copyright statement,
so we remove that.
 2009-10-11 14:20:14 +02:00
Guus Sliepen
7ea85043ac Merge branch 'master' into 1.1 
Conflicts:
	NEWS
	configure.in
	lib/Makefile.am
	lib/pidfile.c
	lib/pidfile.h
	lib/utils.c
	po/POTFILES.in
	po/nl.po
	src/Makefile.am
	src/bsd/device.c
	src/conf.c
	src/connection.c
	src/cygwin/device.c
	src/edge.c
	src/event.c
	src/graph.c
	src/linux/device.c
	src/meta.c
	src/mingw/device.c
	src/net.c
	src/net_packet.c
	src/net_setup.c
	src/net_socket.c
	src/netutl.c
	src/node.c
	src/process.c
	src/protocol.c
	src/protocol_auth.c
	src/protocol_edge.c
	src/protocol_key.c
	src/protocol_misc.c
	src/protocol_subnet.c
	src/raw_socket/device.c
	src/route.c
	src/solaris/device.c
	src/subnet.c
	src/tincd.c
	src/uml_socket/device.c
 2009-09-29 14:55:29 +02:00
Guus Sliepen
0e6856b137 Remove Ivo's old email addresses. 2009-09-24 23:42:30 +02:00
Guus Sliepen
c217d214f4 Remove all occurences of $Id$. 2009-09-24 23:39:16 +02:00
Guus Sliepen
5a132550de Merge branch 'master' into 1.1 
Conflicts:
	doc/tincd.8.in
	lib/pidfile.c
	src/graph.c
	src/net.c
	src/net.h
	src/net_packet.c
	src/net_setup.c
	src/net_socket.c
	src/netutl.c
	src/node.c
	src/node.h
	src/protocol_auth.c
	src/protocol_key.c
	src/tincd.c
 2009-06-05 23:14:13 +02:00
Guus Sliepen
41c10c5a96 Add ProcessPriority option. 
This option can be set to low, normal or high. On UNIX flavours, this changes
the nice value of the process by +10, 0 and -10 respectively. On Windows, it
sets the priority to BELOW_NORMAL_PRIORITY_CLASS, NORMAL_PRIORITY_CLASS and
HIGH_PRIORITY_CLASS respectively.

A high priority might help to reduce latency and packet loss on the VPN.
 2009-05-28 22:51:30 +02:00
Guus Sliepen
576899ef0d Fix link to Mattias Nissler's tun/tap driver for MacOS/X. 
Thanks to Martin Christof Kindsmüller for spotting.
 2009-05-24 17:13:00 +02:00
Michael Tokarev
ec316aa32e Implement privilege dropping 
Add two options, -R/--chroot and -U/--user=user, to chroot to the
config directory (where tinc.conf is located) and to perform
setuid to the user specified, after all the initialization is done.

What's left is handling of pid file since we can't remove it anymore.
 2009-05-18 14:34:24 +02:00
Guus Sliepen
08aabbf931 Merge branch 'master' into 1.1 
Conflicts:
	NEWS
	README
	doc/tinc.conf.5.in
	doc/tinc.texi
	po/nl.po
	src/conf.c
	src/connection.c
	src/event.c
	src/graph.c
	src/net.c
	src/net_packet.c
	src/net_socket.c
	src/node.c
	src/node.h
	src/openssl/rsagen.h
	src/protocol_auth.c
	src/protocol_key.c
	src/protocol_misc.c
	src/subnet.c
	src/subnet.h
	src/tincd.c
 2009-03-09 19:02:24 +01:00
Guus Sliepen
78fc59e994 Update THANKS and copyright information. 2009-03-05 14:12:36 +01:00
Guus Sliepen
5674bba5c5 Allow weight to be assigned to Subnets. 
Tinc allows multiple nodes to own the same Subnet, but did not have a sensible
way to decide which one to send packets to. Tinc also did not check the
reachability of nodes when deciding where to route packets to, so it would not
automatically fail over to a reachable node.

Tinc now assigns a weight to each Subnet. The default weight is 10, with lower
weights having higher priority.  The Subnets are now internally sorted in the
same way as the kernel's routing table, and the Subnets are search linearly,
skipping those of unreachable nodes. A small cache of recently used addresses
is used to speed up the lookup functions.
 2009-03-05 13:34:13 +01:00
Guus Sliepen
e8f08ced76 Update documentation. 
- TCPOnly is not experimental.
- Do not mention old Linux kernels and Ethertap anymore.
- Document the DeviceType, PMTU and PMTUDiscovery options.
 2008-12-22 21:29:21 +00:00
Scott Lamb
f0a57eab4c Retry connections through control socket 2007-11-07 02:50:58 +00:00
Scott Lamb
a62a6825a8 Alter debugging levels through control socket 2007-11-07 02:50:27 +00:00
Scott Lamb
1065879c8c Purge through the control socket 2007-11-07 02:49:57 +00:00
Scott Lamb
6eaefb4dbc Dump through control socket 
Note this removes SIGUSR1, SIGUSR2, and the graph dumping config option.
It seems cleaner to do everything through the control socket.
 2007-11-07 02:49:25 +00:00
Guus Sliepen
6c453769fd Apply patch from Scott Lamb: Update documentation to match tincctl changes 2007-09-04 15:06:35 +00:00
Guus Sliepen
6ded8a3f08 Update documentation. 2007-05-18 11:54:16 +00:00
Guus Sliepen
315ef3e42b Document GraphDumpFile option. 2006-11-11 20:37:58 +00:00
Guus Sliepen
2077451e07 Add generic host-up and host-down scripts. 
Thanks to Menno Smits for a patch.
 2006-06-12 21:45:39 +00:00
Guus Sliepen
de78d79db8 Update copyright notices, remove Ivo's email address. 2006-04-26 13:52:58 +00:00
Guus Sliepen
228e7a5c8f Apply patch from Scott Lamb adding an output buffer for the TCP sockets. 
This helps coalescing multiple send_meta() commands into one TCP packet.
Also limit the size of the output buffer before dropping PACKETs.
 2006-01-19 17:13:18 +00:00
Guus Sliepen
df3220a154 Update copyright notices. 2005-05-04 18:09:30 +00:00
Guus Sliepen
54a30e30ad Describe subnet-up/down scripts in documentation. 2005-05-04 16:53:11 +00:00
Guus Sliepen
a20eb05714 Remove duplication. 2004-11-10 23:21:41 +00:00
Guus Sliepen
2369b0ab09 Update documentation. 2004-11-10 21:57:04 +00:00
Guus Sliepen
7926a156e5 Update copyrights, links, email addresses and let Subversion update $Id$ keywords. 2004-03-21 14:21:22 +00:00
Guus Sliepen
e88ea7277a Small fixes in documentation. 2003-10-11 14:42:30 +00:00
Guus Sliepen
e33307fc9f Update documentation. 2003-10-09 21:33:15 +00:00
Guus Sliepen
9b579eb9ff Update documentation. 2003-08-09 00:53:22 +00:00
Guus Sliepen
0c2256670f Remove unused stuff from doc/. 
Let configure update pathnames in documentation.
 2003-08-08 14:07:12 +00:00
Guus Sliepen
e20ac7b52d Typo and another thing to think about. 2003-08-02 22:01:50 +00:00
Guus Sliepen
92938c07b1 Explain how tinc detaches and how it is "killed" under Windows. 2003-08-02 21:55:12 +00:00
Guus Sliepen
63568bb6bc Update documentation and remove stuff that's too outdated. 2003-07-30 09:22:29 +00:00
Guus Sliepen
c96900f378 Add section about configuring Cygwin and CIPE on Windows. 2003-07-21 19:58:58 +00:00
Guus Sliepen
5db596c684 Simplify logging, update copyrights and some minor cleanups. 2003-07-12 17:41:48 +00:00
Guus Sliepen
8bfa554af9 There are two lzo compression levels. 2003-06-12 11:08:40 +00:00
Guus Sliepen
9279b3c699 Update documentation. 2003-06-11 20:18:48 +00:00
Guus Sliepen
f238c209f4 Fix links. 2003-05-17 22:12:52 +00:00
Guus Sliepen
4c88ff86bc PrivateKeyFile instead of PrivateKey. 2002-12-27 19:32:33 +00:00
Guus Sliepen
07db46a44f Add documentation for BindToAddress. 2002-10-07 07:32:31 +00:00
Guus Sliepen
1dcbdf48eb Update documentation. 2002-09-15 22:19:38 +00:00
Guus Sliepen
9f370893fa Don't bother to chown, and correctly document ConnectTo. 2002-07-16 13:18:27 +00:00
Guus Sliepen
627f7c22b4 s/sliepen.warande.net/sliepen.eu.org/g 
s/itimmermans@bigfoot.com/ivo@o2w.nl/g
 2002-06-21 10:11:37 +00:00
Guus Sliepen
3a3adf5b69 Add configuration details for NetBSD and Darwin (MacOS/X). 2002-06-12 13:45:23 +00:00
Guus Sliepen
b1322d244f masklength is better known as prefixlength 2002-04-09 11:43:29 +00:00
Guus Sliepen
efd29fde85 Small updates. 2002-03-27 15:26:29 +00:00
Guus Sliepen
e2238047d3 Small correction. 2002-03-26 13:19:56 +00:00
Guus Sliepen
a0c1696515 Tell a little bit more about security. 2002-03-25 15:12:09 +00:00
Guus Sliepen
89a2f761a6 Updated documentation. 2002-03-25 15:01:32 +00:00
Guus Sliepen
ab90fa9bd1 Document and clean up MAC address expiry. 2002-03-01 14:25:10 +00:00
Guus Sliepen
0c879b8eee Updated documentation. 2002-03-01 13:38:02 +00:00
Guus Sliepen
c2b9c06062 - Non-blocking connect()s. 
- Socket handling revamped to use sockaddr_t.
- tinc can now tunnel over IPv6.
- Handle all addresses and subnets in network byte order.
  Only convert them when they need to be printed.
- IPv6 subnets bigger than /128 now work.
- Use %s and strerror(errno) instead of %m.
 2002-02-18 16:25:19 +00:00
Guus Sliepen
d9a62c6354 Added support for packet compression, thanks to Mark Glines. 
Add "Compression = <level>" to the host config files, where level can be
0 (off), or any integer between 1 (fast) and 9 (best).
 2002-02-11 15:59:18 +00:00
Guus Sliepen
f0aa9641e8 Merging of the entire pre5 branch. 2002-02-10 21:57:54 +00:00
Guus Sliepen
f0c64a3dac Merged PROTOCOL, NETWORK and SECURITY2 with the texinfo manual. 2001-05-25 12:45:37 +00:00
Guus Sliepen
6e09c2a99c Small corrections to the manuals. 2001-05-25 10:06:13 +00:00
Guus Sliepen
3360c6270b More revisions to the documentation: 
- Removed cruft
- Reordered some sections to make it more logical for the beginner
- Added small examples and hints about configuration files
 2001-05-24 20:24:12 +00:00
Guus Sliepen
6f7f8659a2 - Make sure correct information is supplied for both old kernels (with 
ethertap) and for new kernels (with TUN/TAP driver).
- Revised example configuration and made it conform to latest (CVS) version of
  tinc.
 2001-05-19 15:50:51 +00:00
Ivo Timmermans
a73ec9caa4 Fixed some errors 2001-01-18 13:00:57 +00:00
Ivo Timmermans
1d898e00a9 Merged documentation with various updates I had lying around 2001-01-17 01:40:46 +00:00
Guus Sliepen
d3f889c807 - It's 2001, all copyright notices are updated. 2001-01-07 17:09:07 +00:00
Guus Sliepen
3d7289cf74 - Updated texinfo manual. 2001-01-06 20:02:21 +00:00
Ivo Timmermans
6ddc9109d7 Massive long awaited documentation update. It's not finished yet, 
most notably the example configuration is still old.
 2000-12-05 08:54:22 +00:00
Ivo Timmermans
8fe83e98da All full stops have two spaces after them. (Silly commit, I know.) 2000-11-30 23:39:55 +00:00
Ivo Timmermans
edb9b4cad0 Explain how to tell configure where OpenSSL lives. 2000-11-24 14:13:51 +00:00
Ivo Timmermans
6e27618708 Updates, updates 2000-11-09 21:29:58 +00:00
Ivo Timmermans
1b11bcb012 Added a perl example to turn an IP address into a MAC address. 2000-11-02 21:34:45 +00:00