Commit graph

25 commits

Author SHA1 Message Date
bodea
133cd2a337 decrease ip_conntrack_tcp_timeout_established to 5hrs 2006-02-23 01:07:23 +00:00
bodea
f6b56a0f4d add Cisco-AVPairs to RADIUS accounting records via plugin_radius_account 2005-10-11 09:04:53 +00:00
bodea
10b6ddcfc1 merge in changes from 2.0 branch; fix byte counters in accounting records, add gigawords 2005-06-02 11:32:30 +00:00
bodea
59b55de4d7 more CHAP changes 2005-05-07 08:17:25 +00:00
bodea
29c173cadc allow username to be set when ungardening 2005-03-10 03:31:25 +00:00
bodea
6b1075b65c use standard uintN_t types for portability 2004-12-16 08:49:52 +00:00
bodea
ab7669fc2d don't send a RADIUS start record when ungardening on shutdown 2004-12-01 02:52:46 +00:00
bodea
78d08ec936 dropping packets; increase ip_conntrack_max 2004-11-30 21:54:23 +00:00
bodea
bc5b25832a make "established" a different tcp flag match
add fragment handling
drop IP address from LOG macro (function)
2004-11-29 02:17:17 +00:00
bodea
7cb3cf60e7 pass cluster master state to plugin_control functions 2004-11-18 06:41:03 +00:00
bodea
63be8dcf02 fix late night typos 2004-11-18 05:44:36 +00:00
bodea
f5071c422d - Add startup-config(5) manpage.
- Add snoopctl, throttlectl plugins.
- Update documentation.
2004-11-17 15:08:19 +00:00
bodea
bf0a00f106 - Add startup-config(5) manpage [FIXME].
- Revise nsctl to allow arbitrary strings/args to be passed to plugins.
2004-11-17 08:23:34 +00:00
bodea
72346a7226 add a callback to allow plugins to fetch values from the running config 2004-11-09 08:05:01 +00:00
bodea
d2c470fb4e use LOG for logging macro
clean up initlcp handling
2004-11-05 04:55:25 +00:00
bodea
014cd8c15d clean up plugins 2004-11-05 02:39:35 +00:00
bodea
90f31e7f71 make log a conditional macro for _log 2004-11-03 13:23:58 +00:00
bodea
91ea0d697d merge 2004-10-30 07:35:31 +00:00
fred_nerk
eb3a6cd62d * Update cli callbacks to work with libcli 1.6.
This supports privileged and unprivileged commands, as well as a configuration
  mode
* Add help for all cli commands
* Add "show version" command
* Fix uptime counter display
* Fix nasty bug where cluster basetime can be set to 0 when sending initial
  heartbeat
* Don't rmmod ip_conntrack, as this can take a lot of time
* Re-order logging in routeset such that the action is given before any error
* Use the correct gateway address when deleting routes
* Remove any routes when address changes
* Require authentication if telnet from remote ip
* Require enable password always
* Return error if show pool done on slave
* We MUST immediately exit if we're the wrong master!
2004-06-28 02:43:13 +00:00
fred_nerk
ed90ea49e0 * Wed Jun 23 2004 David Parrish <david@dparrish.com> 2.0.0
- Major release
- Completely replace active/standby clustering with a new peer-to-peer
  clustering method which allows much greater throughput and is a lot more fault
  tolerant
- Add internal tbf implementation for throttling without relying on tc and
  kernel HTB
- Add support for iBGP and eBGP to advertise routes
- Add cli commands "show cluster", "show bgp", "show ipcache", "show throttle",
  "show tbf", "suspend bgp", "restart bgp", "show user"
- Interception destination must be set per-user
- If SMP machine, allow use of SCHED_FIFO, which should improve performance
- Added config option to send GARP at startup
- Added plugin_become_master and plugin_new_session_master plugin hooks
- Remove useless sessionsendarp(). This isn't needed now that we are using TUN
  instead of TAP.
- ICMP rate limiting so not every unreachable packet is replied with an ICMP
  unreachable message
- mangle table is not required on anything but the cluster master, so slaves
  will drop the mangle table and attempt to unload the ip_conntrack module
- Statically assigned IP addresses (by Radius) work now
- Add -d command-line flag to detach and become a daemon
- Configuration file is now "/etc/l2tpns/startup-config"
- Reduced MIN_IP_SIZE to 0x19 to stop a pile of Short IP warnings
- Resend initial IPCP request until it's acknowleged by the client
- Better radius session cleanup logic
- Many miscellaenous bugfixes and performance enhancements
- Thanks to Michael O'Reilly and Brendan O'Dea for most of these new features
2004-06-23 03:52:24 +00:00
fred_nerk
fa7f80895b Fix SEGFAULT 2004-05-24 04:18:23 +00:00
fred_nerk
00bb6daab4 Use multiple radius sockets to allow more concurrent authentication requests 2004-05-24 04:13:06 +00:00
fred_nerk
8e8ea0e534 Don't use configure it's a waste of time 2004-03-05 00:22:06 +00:00
fred_nerk
b43583c01d * Fri Mar 5 2004 David Parrish <david@dparrish.com> 1.1.0
- Change all strcpy() calls to strncpy() to avoid buffer overflow potential
- Add ICMP host unreachable support
- Logging to syslog if log_file = "syslog:facility"
- Now requires libcli 1.5
- All configuration moves to a config structure
- Ability to modify and write config on the fly through command-line interface
- Config file support is removed, and now handled by the cli
- Show hostname in cli prompt
- Keep current state type for tunnels
- Add uptime command do CLI, which also shows real-time bandwidth utilisation
- Add goodbye command to cluster master, which forces droppping a slave
- Cache IP address allocation, so that reconnecting users get the same address
- Fix tunnel resend timeouts, so that dead tunnels will be cleaned up
- Allocate tunnels and radius without using a linked list which had issues
- Fix some off-by-one errors in tunnel and session and radius arrays
- Save and reload ip address pool when dieing
- Check version and size of reloaded data when restarting
- Remove plugin_config support
- Remove old support for TBF which didn't work anyway. HTB is required to do throttling now.
- Add COPYING and Changes files
2004-03-05 00:09:03 +00:00
fred_nerk
3aa4eda8b1 Initial revision 2003-12-16 07:07:39 +00:00