Commit graph

  • a473ece8a0 - More verbose connection list - Added "myself" as hostname when logging indirect ADD_HOSTs Guus Sliepen 2000-06-25 16:39:17 +00:00
  • f1f901112e Hostlookup() is actually being called now. Guus Sliepen 2000-06-25 16:20:27 +00:00
  • 54079bdf03 Hostnames are back! Guus Sliepen 2000-06-25 16:01:12 +00:00
  • e4b586ed07 - Log possible spoofing attacks. - Don't broadcast DEL_HOSTs for hosts that haven't been activated yet. - If a host sends a TERMREQ, deactivate them. Guus Sliepen 2000-06-25 15:45:09 +00:00
  • 9a1103a7be Changed version number to 1.0pre3. Ivo Timmermans 2000-06-25 15:42:40 +00:00
  • d8d2b83350 Changed version number to 1.0pre3. Ivo Timmermans 2000-06-25 15:42:40 +00:00
  • 7648bc6065 Added CVS Id tags to header files. Guus Sliepen 2000-06-25 15:22:16 +00:00
  • 7f7e158aae Large cleanup: - Removed hostname lookup (it blocks, and you can always do it yourself) - Reorganized debug levels (after hints from Axel M�ller): 0 Startup message and errors 1 Connection logging 2 Meta protocol information 3 Verbose meta protocol (includes copy of transmitted requests) 4 Packet information (logs transmission/errors of UDP packets) 5 Verbose packet information (every single byte, not implemented yet to protect ourselves from filling up /var/log directories) - Made log messages more consistent Guus Sliepen 2000-06-25 15:16:12 +00:00
  • 3c54a513b0 If we have "indirectdata" flag set, we only send data to our uplink. Guus Sliepen 2000-06-24 12:35:42 +00:00
  • d8e2f7104c First step for implementation of the "indirectdata" directive. This should allow _leaf_ tincds to be behind firewalls. The protocol has changed and is INCOMPATIBLE with previous versions. The PROT_CURRENT value has been incremented. Guus Sliepen 2000-06-23 19:27:03 +00:00
  • 33c3a25a66 Configuration directive `IndirectData'. Ivo Timmermans 2000-06-17 20:55:54 +00:00
  • 1c8adb5e1f Merge changes from 1.6-1.8. Ivo Timmermans 2000-06-17 20:30:44 +00:00
  • 0d167e1f5d Added another semicolon for bash2 compliance (thanks to Jamie Briggs) Guus Sliepen 2000-06-17 08:30:45 +00:00
  • 00f316810a Applied patch from Jamie Briggs for bash2 conformance. Guus Sliepen 2000-06-16 05:44:26 +00:00
  • ef294a6967 Include ../intl in the include path, and add @INTLLIBS@ to the list of libraries. Ivo Timmermans 2000-06-06 10:24:33 +00:00
  • 66e9806805 These files are created by gettextize (run by autogen.sh) (should have known that). Ivo Timmermans 2000-06-04 12:14:31 +00:00
  • d1d4a524de Check for __gmpz_powm for libgmp3. Ivo Timmermans 2000-06-04 11:50:46 +00:00
  • 377c4df245 Don't touch VPNMASK if it's defined, otherwise use $MSK. Ivo Timmermans 2000-06-03 23:32:03 +00:00
  • 9193aee815 Removed items in TODO list that are already implemented. Only two items left. Guus Sliepen 2000-06-03 08:27:16 +00:00
  • 5796d2f5b7 Alphabetized the list, added Lubom�r Bulej, removed Sander Smeenk and Tijs van Bakel, put merits after all names. Ivo Timmermans 2000-06-02 17:30:33 +00:00
  • 18b3084d25 Debian init.d script automatically sets tap device's MTU to 1448 now. Guus Sliepen 2000-06-01 20:21:27 +00:00
  • 77be52422d Miscellaneous copyright updates. Ivo Timmermans 2000-05-31 18:23:06 +00:00
  • 8cb4bb619d Handle locale settings. Ivo Timmermans 2000-05-31 18:21:27 +00:00
  • f20df109a6 Version 1.0pre2-1. Ivo Timmermans 2000-05-31 18:19:33 +00:00
  • 4ae74c50b7 Updated Dutch translation. Ivo Timmermans 2000-05-31 18:18:21 +00:00
  • 7037286586 Tell about /etc/tinc/nets.boot. Ivo Timmermans 2000-05-31 18:17:45 +00:00
  • 65a9eedb05 Include news for 1.0pre2. Ivo Timmermans 2000-05-31 18:17:27 +00:00
  • 17fa07510a Only accept an ADD_HOST request for a host that already exists in our conn_list if the nexthop field matches the sender. This is a workaround for older clients. Ivo Timmermans 2000-05-30 21:36:16 +00:00
  • e7f22d2f5f In terminate_connection, only send a notification to hosts that are directly connected to us. (DEL_HOST gets forwarded automatically.) Ivo Timmermans 2000-05-30 12:38:15 +00:00
  • 2fdda8e4fa When a connection is terminated, all hosts that are still connected get notified of the lost connections. Ivo Timmermans 2000-05-30 12:31:41 +00:00
  • f826301889 Added new configuration directive `Hostnames', which controls the resolving of IP addresses to hostnames. Ivo Timmermans 2000-05-30 11:18:12 +00:00
  • a7ad161d2b Only activate a connection upon receiving it's public key if it's an incoming connection. When it's outgoing, we need to receive an ack first. Guus Sliepen 2000-05-29 23:40:05 +00:00
  • 5654e156a3 Updated changes list for version 1.0pre2. Ivo Timmermans 2000-05-29 22:27:15 +00:00
  • a822c7466a Bounds check for request id (between 0 and 255). Ivo Timmermans 2000-05-29 22:20:04 +00:00
  • 0f2cf48d30 Dutch translation of tinc. Ivo Timmermans 2000-05-29 22:15:38 +00:00
  • 386a62ff57 Define LOCALEDIR in CFLAGS. Ivo Timmermans 2000-05-29 21:40:51 +00:00
  • 4cd009f774 Include GNU gettext checks. Ivo Timmermans 2000-05-29 21:40:20 +00:00
  • 5814939c9d Update acconfig.h to include values for gettext inclusion. Ivo Timmermans 2000-05-29 21:38:02 +00:00
  • b200b0d812 Include system.h and ABOUT-NLS. Ivo Timmermans 2000-05-29 21:36:28 +00:00
  • b9ea0633c7 Include intl/ directory in the list of subdirs. Ivo Timmermans 2000-05-29 21:04:55 +00:00
  • 9fd02ffcb0 Internationalization of tinc. Ivo Timmermans 2000-05-29 21:01:26 +00:00
  • 61e71ab74a Terminate a connection on any error. Furthermore, disallow del_host, add_host and other important requests until remote host has properly authenticated itself. Guus Sliepen 2000-05-27 20:23:01 +00:00
  • cc01b18bc6 Made tinc persistent. If no outgoing connection can be established right after the start of the daemon, it won't quit anymore but will retry in 5 minutes. Also, 5 minutes is now the maximum time to wait for a retry. Guus Sliepen 2000-05-27 19:44:04 +00:00
  • 028659bfbf Fixed typos. When terminating a connection, it's status is not only set to remove=1 but also active=0. Guus Sliepen 2000-05-27 19:23:20 +00:00
  • e4ff969a98 Fix for a DoS attack: A remote user could telnet to the tinc daemon and type only this line: 61 6 00000000/00000000:28f This would deny any packets to be sent to other tinc networks (except for to the hosts that run tincd's themselves). Solution is to skip hosts in lookup_conn() that have not been activated yet. Fixed potential conn_list table corruption: If a new connection is accepted but a connection with the same subnet would already exist in the connection list, the OLD connection is terminated. Guus Sliepen 2000-05-27 19:04:12 +00:00
  • 4d71de15e8 Documentation updates. Removed all references to configuration variable "AllowConnect", since it is NOT used in tinc. Added information about "VpnMask". Elaborated a bit about "private" and "virtual" networks. Guus Sliepen 2000-05-27 13:21:20 +00:00
  • 85e3c1f271 Updated by Lubomir Bulej and Mads Kiilerich: it uses /etc/tinc/nets.boot and the VpnMask directive in the config files. Ivo Timmermans 2000-05-26 11:25:59 +00:00
  • 3a6ffe6895 Create an empty /etc/tinc/nets.boot. Ivo Timmermans 2000-05-21 23:01:28 +00:00
  • b9a86ec70e Use /etc/tinc/example as a base directory for an example. /etc/tinc/example/README points to /usr/share/doc/tinc/README.Debian. Ivo Timmermans 2000-05-21 22:40:41 +00:00
  • 63847abdfd Add an example of using VpnMask. Ivo Timmermans 2000-05-21 22:38:01 +00:00
  • 2469acc090 When VpnMask is not present in the config file, silently use $MSK as vpnmask. Ivo Timmermans 2000-05-21 22:27:31 +00:00
  • 73b3e7ce03 Fixed last typo. Init.d now uses ifconfig command to set both the tap's IP address as well as the correct route. Furthermore, if no VpnMask is given, a default of 255.255.0.0 is chosen and a warning issued. Guus Sliepen 2000-05-21 22:21:38 +00:00
  • 2ad4f1cc5b Typo. Guus Sliepen 2000-05-21 22:08:21 +00:00
  • e25fc3a3dc VpnMask truely works now. Guus Sliepen 2000-05-21 22:04:56 +00:00
  • 9ec4decec1 Mask the vpn net with the vpn netmask, route would give an error if the netmask didn't match the net. Ivo Timmermans 2000-05-19 01:17:32 +00:00
  • 20e404ab57 Fixed typo. Ivo Timmermans 2000-05-19 00:58:01 +00:00
  • 44af1094be Updated copyright notice. Ivo Timmermans 2000-05-19 00:33:44 +00:00
  • 01352f4c52 Errors will not terminate the script or result in a nonzero exit code. Ivo Timmermans 2000-05-19 00:15:37 +00:00
  • 4ef2a8cfdb Include postinst in the distribution. Ivo Timmermans 2000-05-19 00:14:34 +00:00
  • 59ca017df4 Find networks in instead of . Ivo Timmermans 2000-05-19 00:09:20 +00:00
  • 0354962c98 Don't distribute the file files. Ivo Timmermans 2000-05-18 23:33:44 +00:00
  • b56705e18c Version 1.0pre2-0.3 Ivo Timmermans 2000-05-18 23:28:51 +00:00
  • cbf6efb617 Create a default /etc/tinc/nets.boot after installation, containing all directories under /etc/tinc by default. Ivo Timmermans 2000-05-18 23:18:54 +00:00
  • e7d583adfa Read /etc/tinc/nets.boot to find the networks that have to be started. Ivo Timmermans 2000-05-18 23:09:31 +00:00
  • 8d4ab991b8 This file is generated with dpkg-buildpackage. Ivo Timmermans 2000-05-17 23:13:51 +00:00
  • ffc79bcd20 TODO file reinstated: - Append your name to items if you're working on them. - Remove them if you fixed the problem/implemented that feature. - Add any (suspected) bugs. Guus Sliepen 2000-05-16 16:07:15 +00:00
  • cdab82d6fb Use the new VpnMask directive to add a route to the rest of the VPN. Ivo Timmermans 2000-05-16 14:34:44 +00:00
  • 85963f4c85 Stub for VpnMask config directive. Guus Sliepen 2000-05-16 13:09:15 +00:00
  • 30aff5ea2a Look if the tap devices exist before bluntly remaking them. Ivo Timmermans 2000-05-16 13:03:32 +00:00
  • 0761eed64c *** empty log message *** Ivo Timmermans 2000-05-16 07:56:05 +00:00
  • 0a2e2b0c8d Depend on perl5. Ivo Timmermans 2000-05-15 19:48:46 +00:00
  • 7e817fcf0f Unlimited length in the config file, thanks to Cris van Pelt. Ivo Timmermans 2000-05-15 18:28:45 +00:00
  • b18af982af Exit with zero status if is empty. Ivo Timmermans 2000-05-15 17:15:52 +00:00
  • 4711a87922 Updated to newer version. Ivo Timmermans 2000-05-15 15:54:37 +00:00
  • a0c4e7fe6d Test for existence of configured tinc networks. This will also make first install of tinc possible without errors. Guus Sliepen 2000-05-15 09:41:34 +00:00
  • 265bda08cd .deb version number 1.0pre2-0.4. Ivo Timmermans 2000-05-14 23:03:37 +00:00
  • 7a450d704b tincd->tinc Delete libblowfish.y not be in the .deb. Ivo Timmermans 2000-05-14 23:00:44 +00:00
  • 7fbfa990fc Mention both upstream authors. Ivo Timmermans 2000-05-14 22:59:47 +00:00
  • f7b04ea142 Add description, better dependancies. Ivo Timmermans 2000-05-14 22:59:19 +00:00
  • 9f07fe55dc Add initscript, tincd->tinc. Ivo Timmermans 2000-05-14 22:58:47 +00:00
  • df10baa50c Inserted useful content. Ivo Timmermans 2000-05-14 21:18:10 +00:00
  • 6c722da77c Add shlibs control file for the blowfish library. Ivo Timmermans 2000-05-14 21:14:23 +00:00
  • 803f908078 Give IP address instead of hex number when connecting tcp socket failed. Ivo Timmermans 2000-05-14 21:07:16 +00:00
  • 4b1a1c2123 Changed version to 1.0pre2. Ivo Timmermans 2000-05-14 21:04:53 +00:00
  • ca900d388b Version 1.0pre1-0.1. Ivo Timmermans 2000-05-14 20:58:34 +00:00
  • 7d433ebd76 Add check for mpz_powm in libgmp3. Ivo Timmermans 2000-05-14 20:56:41 +00:00
  • de09916ead Only print an error with send_termreq if debug_lvl is 2 or more. Ivo Timmermans 2000-05-14 13:50:10 +00:00
  • 9d023b1f2e Fixed typos. Guus Sliepen 2000-05-14 13:06:52 +00:00
  • e20e143f1e Changed ping behaviour (backwards compatible). If we don't have any data to send, we don't need to check if the connection is still alive. Furthermore, if we receive any kind of data from the other end, we know it's alive, so we don't need to check it either. So, PING requests are only sent if we send packets but there is no response. Guus Sliepen 2000-05-14 13:02:20 +00:00
  • ee96ccabbb Cleanups. Guus Sliepen 2000-05-14 12:22:42 +00:00
  • 8caa1b9d75 Proxymode removed. Guus Sliepen 2000-05-14 11:39:18 +00:00
  • 269067bb22 Perl version of the system startup script. Ivo Timmermans 2000-05-13 00:54:27 +00:00
  • 12adf1af54 Deleted the protocol description. Ivo Timmermans 2000-05-12 13:31:00 +00:00
  • d0ba34ccae Added new config variable "ProxyMode". If enabled, all outgoing packets are sent to the uplink (ConnectTo), which will have to forward them for us (kernel should do that). This is for people behind firewalls. Guus Sliepen 2000-05-08 18:44:15 +00:00
  • 92387475ac Added semicolons required by bash2 (Mads Kiilerich). Ivo Timmermans 2000-05-05 10:48:54 +00:00
  • bce2179fe3 Copied most of the code from the redhat script. Ivo Timmermans 2000-05-04 23:26:24 +00:00
  • 74b0cbecce Include sys/types.h. Ivo Timmermans 2000-05-04 23:17:02 +00:00
  • 2f7e532d70 Don't link in libdl. Ivo Timmermans 2000-05-04 23:16:43 +00:00
  • d4ef7ea0e7 Check for the existance of libdl. Ivo Timmermans 2000-05-04 00:01:05 +00:00
  • 87ccd613ca More for getopt support. Ivo Timmermans 2000-05-04 00:00:50 +00:00