Commit graph

34 commits

Author SHA1 Message Date
Brendan O'Dea
216303288a copy identifier from request for ConfigNak, ConfigRej; update LCP
header length
2004-11-30 00:50:03 +00:00
Brendan O'Dea
2f5b811429 make "established" a different tcp flag match
add fragment handling
drop IP address from LOG macro (function)
2004-11-29 02:17:17 +00:00
Brendan O'Dea
80308e8838 add filtering 2004-11-28 20:09:52 +00:00
Brendan O'Dea
3057f5e655 - Revise CCP, send ConfigReq once only.
- Check control serial before clearing window, prevents looping tunnel
  setup in some instances.
- Add configuration syntax for adding named access lists (work in progress).
2004-11-27 05:19:53 +00:00
Brendan O'Dea
c5134c0536 oop 2004-11-25 12:46:48 +00:00
Brendan O'Dea
82248353c8 reinstate sendccp as initccp; send only once 2004-11-25 12:41:35 +00:00
Brendan O'Dea
0753f6fc9f - Drop sendccp. If client sends a CCP request for compression just NAK it.
- Don't copy the old buffer into Config{Nak,Rej} LCP responses (oops);
  add length checks when appending.
- Have makeppp print a backtrace on overflow.
2004-11-25 02:45:27 +00:00
Brendan O'Dea
3338e64bfc Allow LCP re-negotiation after connection completes 2004-11-18 13:15:28 +00:00
Brendan O'Dea
4f5ea4fbe0 - Ignore gateway address in Framed-Route (from Jonathan McDowell).
- Call sessionshutdown() when a tunnel is dropped rather than
  sessionkill() to ensure that RADIUS stop records are sent.
- Cleanup: make a bunch of global functions/variables static.
2004-11-16 07:54:32 +00:00
Brendan O'Dea
48247c0f8d *** empty log message *** 2004-11-09 05:49:08 +00:00
Brendan O'Dea
df66283f15 *** empty log message *** 2004-11-09 05:48:28 +00:00
Brendan O'Dea
32f6edf266 Fix intercepts: don't double-snoop throttled customers, ensure
byte/packet counts are only updated once
2004-11-09 05:42:53 +00:00
Brendan O'Dea
57d13b8222 Nak asyncmap (unless == 0)
bundle ConfigRej options
2004-11-05 23:18:54 +00:00
Brendan O'Dea
4e0597cd50 use LOG for logging macro
clean up initlcp handling
2004-11-05 04:55:25 +00:00
Brendan O'Dea
0ac369f083 use constants 2004-11-05 02:21:55 +00:00
Brendan O'Dea
c79493acd8 send snooped packets before adding the tun header 2004-11-04 23:33:13 +00:00
Brendan O'Dea
99be8b127a cleanup packet length handling 2004-11-03 13:22:39 +00:00
Brendan O'Dea
db0ded520a typo 2004-10-29 04:01:53 +00:00
David Parrish
c81a5e3363 - Renegotiate MRU - Yuri
- Take LCP ConfigReq length from the packet length field - Yuri
2004-09-23 04:01:36 +00:00
David Parrish
ab0c6fbd45 Add support for Hidden AVPs and chap-response 2004-09-19 23:19:23 +00:00
David Parrish
d52f68e6d3 Cleanups and sync 2004-09-02 04:18:07 +00:00
David Parrish
abbc5c5fce Set a maximum time to wait for radius to be ready on shutdown 2004-08-26 04:43:52 +00:00
David Parrish
d490579025 Add renegotiation patch from Yuri (ppp-aug10-patch)
Indentation and style cleanups
Make md5.c use standard memcpy and memset
2004-08-13 00:02:50 +00:00
David Parrish
5779efc7ae Allow cli session changes to happen if the session is timing out 2004-08-02 06:06:28 +00:00
David Parrish
f7a59cd6cc - Add support for LCP Ident and CallBack (rejection only) from Yuri
- Initiate LCP if not attempted by the client
2004-08-02 05:40:21 +00:00
David Parrish
9c8100d580 - Write pid file if filename is set
- Add startup script and monitor script from Yuri
- Some logging correctness fixes from Iain Wade
- Combined LCP patches from Iain and Yuri. This should allow Windows 2k/XP
  clients to connect, as well Linksys DSL modems.
2004-08-02 03:38:01 +00:00
Brendan O'Dea
eae3c0527f - TerminateAck fix from Yuri
- Adject cli_loop args for libcli 1.8.0
- Allow for backward compatabity in C_PING packets
- Don't send RADIUS stop messages from sessionshutdown when called from
  sessionkill.
2004-07-11 07:57:33 +00:00
Brendan O'Dea
6adc660b49 - s/tap/tun/
- fix for LASTSEEN breakage:  don't do anything in the CLI other than
  flag changes to be made by the parent
- split out master parts from cluster_check_master() into cluster_check_slaves()
2004-07-08 16:54:35 +00:00
David Parrish
7aa420ce9f * Update cli callbacks to work with libcli 1.6.
This supports privileged and unprivileged commands, as well as a configuration
  mode
* Add help for all cli commands
* Add "show version" command
* Fix uptime counter display
* Fix nasty bug where cluster basetime can be set to 0 when sending initial
  heartbeat
* Don't rmmod ip_conntrack, as this can take a lot of time
* Re-order logging in routeset such that the action is given before any error
* Use the correct gateway address when deleting routes
* Remove any routes when address changes
* Require authentication if telnet from remote ip
* Require enable password always
* Return error if show pool done on slave
* We MUST immediately exit if we're the wrong master!
2004-06-28 02:43:13 +00:00
David Parrish
c239d4b228 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
David Parrish
546f970452 Use multiple radius sockets to allow more concurrent authentication requests
Remove per-packet plugin hooks (they are slow)
2004-05-24 04:26:01 +00:00
David Parrish
0c736f6fe8 Don't use configure it's a waste of time 2004-03-05 00:22:06 +00:00
David Parrish
fc0a363208 * Fri Mar 5 2004 David Parrish <david@dparrish.com> 1.1.0
- Change all strcpy() calls to strncpy() to avoid buffer overflow potential
- Add ICMP host unreachable support
- Logging to syslog if log_file = "syslog:facility"
- Now requires libcli 1.5
- All configuration moves to a config structure
- Ability to modify and write config on the fly through command-line interface
- Config file support is removed, and now handled by the cli
- Show hostname in cli prompt
- Keep current state type for tunnels
- Add uptime command do CLI, which also shows real-time bandwidth utilisation
- Add goodbye command to cluster master, which forces droppping a slave
- Cache IP address allocation, so that reconnecting users get the same address
- Fix tunnel resend timeouts, so that dead tunnels will be cleaned up
- Allocate tunnels and radius without using a linked list which had issues
- Fix some off-by-one errors in tunnel and session and radius arrays
- Save and reload ip address pool when dieing
- Check version and size of reloaded data when restarting
- Remove plugin_config support
- Remove old support for TBF which didn't work anyway. HTB is required to do throttling now.
- Add COPYING and Changes files
2004-03-05 00:09:03 +00:00
David Parrish
c5e4c2cfc0 Initial revision 2003-12-16 07:07:39 +00:00