Commit graph

245 commits

Author SHA1 Message Date
Brendan O'Dea
32f6edf266 Fix intercepts: don't double-snoop throttled customers, ensure
byte/packet counts are only updated once
2004-11-09 05:42:53 +00:00
bodea
1e77cbf108 Nak asyncmap (unless == 0)
bundle ConfigRej options
2004-11-05 23:18:54 +00:00
Brendan O'Dea
57d13b8222 Nak asyncmap (unless == 0)
bundle ConfigRej options
2004-11-05 23:18:54 +00:00
bodea
d2c470fb4e use LOG for logging macro
clean up initlcp handling
2004-11-05 04:55:25 +00:00
Brendan O'Dea
4e0597cd50 use LOG for logging macro
clean up initlcp handling
2004-11-05 04:55:25 +00:00
bodea
af4e0b7d1f use constants 2004-11-05 02:21:55 +00:00
Brendan O'Dea
0ac369f083 use constants 2004-11-05 02:21:55 +00:00
bodea
2ca0cabce4 send snooped packets before adding the tun header 2004-11-04 23:33:13 +00:00
Brendan O'Dea
c79493acd8 send snooped packets before adding the tun header 2004-11-04 23:33:13 +00:00
bodea
6b74bac40e cleanup packet length handling 2004-11-03 13:22:39 +00:00
Brendan O'Dea
99be8b127a cleanup packet length handling 2004-11-03 13:22:39 +00:00
bodea
6c12196d4e typo 2004-10-29 04:01:53 +00:00
Brendan O'Dea
db0ded520a typo 2004-10-29 04:01:53 +00:00
fred_nerk
dedb360c1a - Renegotiate MRU - Yuri
- Take LCP ConfigReq length from the packet length field - Yuri
2004-09-23 04:01:36 +00:00
David Parrish
c81a5e3363 - Renegotiate MRU - Yuri
- Take LCP ConfigReq length from the packet length field - Yuri
2004-09-23 04:01:36 +00:00
fred_nerk
7f13b85569 Add support for Hidden AVPs and chap-response 2004-09-19 23:19:23 +00:00
David Parrish
ab0c6fbd45 Add support for Hidden AVPs and chap-response 2004-09-19 23:19:23 +00:00
fred_nerk
272e831e80 Cleanups and sync 2004-09-02 04:18:07 +00:00
David Parrish
d52f68e6d3 Cleanups and sync 2004-09-02 04:18:07 +00:00
fred_nerk
32febcb0c7 Set a maximum time to wait for radius to be ready on shutdown 2004-08-26 04:43:52 +00:00
David Parrish
abbc5c5fce Set a maximum time to wait for radius to be ready on shutdown 2004-08-26 04:43:52 +00:00
fred_nerk
43d0275f6d Add renegotiation patch from Yuri (ppp-aug10-patch)
Indentation and style cleanups
Make md5.c use standard memcpy and memset
2004-08-13 00:02:50 +00:00
David Parrish
d490579025 Add renegotiation patch from Yuri (ppp-aug10-patch)
Indentation and style cleanups
Make md5.c use standard memcpy and memset
2004-08-13 00:02:50 +00:00
fred_nerk
4b16fcbdfd Allow cli session changes to happen if the session is timing out 2004-08-02 06:06:28 +00:00
David Parrish
5779efc7ae Allow cli session changes to happen if the session is timing out 2004-08-02 06:06:28 +00:00
fred_nerk
6e3d21bbdc - Add support for LCP Ident and CallBack (rejection only) from Yuri
- Initiate LCP if not attempted by the client
2004-08-02 05:40:21 +00:00
David Parrish
f7a59cd6cc - Add support for LCP Ident and CallBack (rejection only) from Yuri
- Initiate LCP if not attempted by the client
2004-08-02 05:40:21 +00:00
fred_nerk
8c861521ae - Write pid file if filename is set
- Add startup script and monitor script from Yuri
- Some logging correctness fixes from Iain Wade
- Combined LCP patches from Iain and Yuri. This should allow Windows 2k/XP
  clients to connect, as well Linksys DSL modems.
2004-08-02 03:38:01 +00:00
David Parrish
9c8100d580 - Write pid file if filename is set
- Add startup script and monitor script from Yuri
- Some logging correctness fixes from Iain Wade
- Combined LCP patches from Iain and Yuri. This should allow Windows 2k/XP
  clients to connect, as well Linksys DSL modems.
2004-08-02 03:38:01 +00:00
bodea
3ef237977d - TerminateAck fix from Yuri
- Adject cli_loop args for libcli 1.8.0
- Allow for backward compatabity in C_PING packets
- Don't send RADIUS stop messages from sessionshutdown when called from
  sessionkill.
2004-07-11 07:57:33 +00:00
Brendan O'Dea
eae3c0527f - TerminateAck fix from Yuri
- Adject cli_loop args for libcli 1.8.0
- Allow for backward compatabity in C_PING packets
- Don't send RADIUS stop messages from sessionshutdown when called from
  sessionkill.
2004-07-11 07:57:33 +00:00
bodea
570d0d5385 - s/tap/tun/
- fix for LASTSEEN breakage:  don't do anything in the CLI other than
  flag changes to be made by the parent
- split out master parts from cluster_check_master() into cluster_check_slaves()
2004-07-08 16:54:35 +00:00
Brendan O'Dea
6adc660b49 - s/tap/tun/
- fix for LASTSEEN breakage:  don't do anything in the CLI other than
  flag changes to be made by the parent
- split out master parts from cluster_check_master() into cluster_check_slaves()
2004-07-08 16:54:35 +00:00
fred_nerk
eb3a6cd62d * Update cli callbacks to work with libcli 1.6.
This supports privileged and unprivileged commands, as well as a configuration
  mode
* Add help for all cli commands
* Add "show version" command
* Fix uptime counter display
* Fix nasty bug where cluster basetime can be set to 0 when sending initial
  heartbeat
* Don't rmmod ip_conntrack, as this can take a lot of time
* Re-order logging in routeset such that the action is given before any error
* Use the correct gateway address when deleting routes
* Remove any routes when address changes
* Require authentication if telnet from remote ip
* Require enable password always
* Return error if show pool done on slave
* We MUST immediately exit if we're the wrong master!
2004-06-28 02:43:13 +00:00
David Parrish
7aa420ce9f * Update cli callbacks to work with libcli 1.6.
This supports privileged and unprivileged commands, as well as a configuration
  mode
* Add help for all cli commands
* Add "show version" command
* Fix uptime counter display
* Fix nasty bug where cluster basetime can be set to 0 when sending initial
  heartbeat
* Don't rmmod ip_conntrack, as this can take a lot of time
* Re-order logging in routeset such that the action is given before any error
* Use the correct gateway address when deleting routes
* Remove any routes when address changes
* Require authentication if telnet from remote ip
* Require enable password always
* Return error if show pool done on slave
* We MUST immediately exit if we're the wrong master!
2004-06-28 02:43:13 +00:00
fred_nerk
ed90ea49e0 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
David Parrish
c239d4b228 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
fred_nerk
1af4c16721 Use multiple radius sockets to allow more concurrent authentication requests
Remove per-packet plugin hooks (they are slow)
2004-05-24 04:26:01 +00:00
David Parrish
546f970452 Use multiple radius sockets to allow more concurrent authentication requests
Remove per-packet plugin hooks (they are slow)
2004-05-24 04:26:01 +00:00
fred_nerk
8e8ea0e534 Don't use configure it's a waste of time 2004-03-05 00:22:06 +00:00
David Parrish
0c736f6fe8 Don't use configure it's a waste of time 2004-03-05 00:22:06 +00:00
fred_nerk
b43583c01d * Fri Mar 5 2004 David Parrish <david@dparrish.com> 1.1.0
- Change all strcpy() calls to strncpy() to avoid buffer overflow potential
- Add ICMP host unreachable support
- Logging to syslog if log_file = "syslog:facility"
- Now requires libcli 1.5
- All configuration moves to a config structure
- Ability to modify and write config on the fly through command-line interface
- Config file support is removed, and now handled by the cli
- Show hostname in cli prompt
- Keep current state type for tunnels
- Add uptime command do CLI, which also shows real-time bandwidth utilisation
- Add goodbye command to cluster master, which forces droppping a slave
- Cache IP address allocation, so that reconnecting users get the same address
- Fix tunnel resend timeouts, so that dead tunnels will be cleaned up
- Allocate tunnels and radius without using a linked list which had issues
- Fix some off-by-one errors in tunnel and session and radius arrays
- Save and reload ip address pool when dieing
- Check version and size of reloaded data when restarting
- Remove plugin_config support
- Remove old support for TBF which didn't work anyway. HTB is required to do throttling now.
- Add COPYING and Changes files
2004-03-05 00:09:03 +00:00
David Parrish
fc0a363208 * Fri Mar 5 2004 David Parrish <david@dparrish.com> 1.1.0
- Change all strcpy() calls to strncpy() to avoid buffer overflow potential
- Add ICMP host unreachable support
- Logging to syslog if log_file = "syslog:facility"
- Now requires libcli 1.5
- All configuration moves to a config structure
- Ability to modify and write config on the fly through command-line interface
- Config file support is removed, and now handled by the cli
- Show hostname in cli prompt
- Keep current state type for tunnels
- Add uptime command do CLI, which also shows real-time bandwidth utilisation
- Add goodbye command to cluster master, which forces droppping a slave
- Cache IP address allocation, so that reconnecting users get the same address
- Fix tunnel resend timeouts, so that dead tunnels will be cleaned up
- Allocate tunnels and radius without using a linked list which had issues
- Fix some off-by-one errors in tunnel and session and radius arrays
- Save and reload ip address pool when dieing
- Check version and size of reloaded data when restarting
- Remove plugin_config support
- Remove old support for TBF which didn't work anyway. HTB is required to do throttling now.
- Add COPYING and Changes files
2004-03-05 00:09:03 +00:00
fred_nerk
3aa4eda8b1 Initial revision 2003-12-16 07:07:39 +00:00
David Parrish
c5e4c2cfc0 Initial revision 2003-12-16 07:07:39 +00:00