Commit graph

178 commits

Author SHA1 Message Date
Brendan O'Dea
b618238509 Apply patch from Michael O to avoid sending multiple CDNs. 2010-01-11 12:16:20 +00:00
Brendan O'Dea
845bb1f376 Apply MLPPP patch from Muhammad Tayseer Alquoatli, very belatedly, with
thanks.  Changes:
- Handle session shutdown gracefully regarding leaving the bundle (bug that is
  caused when a all session leaves a bundle then another join)
- IP assignment is done only for the first session in the bundle (save IP
  waste for multiple MLPPP sessions)
- Route is being added only for the first session in the bundle (less routes
  on l2tpns system)
- Fix route deletion problem for MLPPP sessions (bug that caused when a
  session leaves a bundle)
- Uniformity of sequence number space satisfied (according to RFC1990)
- Fix reassembling fragmented packets and handling lost fragments (according
  to RFC 1990)
- FragmentatConnection to l2tpns.cvs.sourceforge.net closed by remote host.n
  across N session rather than two)
- Sequence numbers extraction mask has been corrected (bug in extracting
  sequence numbers)
- some clustering support fixes
- Upload/Download statistics has been corrected
- add "kill_timedout_sessions" config option
2009-12-08 14:49:28 +00:00
Brendan O'Dea
50da1f206f add "shutdown" and "reload" CLI commands (Daryl Tester) 2006-12-18 12:08:28 +00:00
Brendan O'Dea
3bea7b1e3e don't send interim records before session start (Daryl Tester) 2006-12-18 12:05:36 +00:00
Brendan O'Dea
c2152aa378 add CVE 2006-12-07 05:46:16 +00:00
Brendan O'Dea
dbaf3410c4 Security: Rhys Kidd identified a vulnerability in the handling of
heartbeat packets.  Drop oversize heartbeat packets.
2006-12-04 20:50:02 +00:00
Brendan O'Dea
534a9900a8 allow DNS servers to be specified using either old or new vendor-specific Ascend formats 2006-08-02 14:17:30 +00:00
Brendan O'Dea
9448b44db3 fix sign problem with reporting of unknown RADIUS VSAs 2006-08-02 12:54:45 +00:00
Brendan O'Dea
e49d6736b5 add radius_bind_{min,max} options 2006-07-01 12:40:10 +00:00
Brendan O'Dea
d2f496f603 set acct-disconnect-cause from result code AVP if no disconnect cause AVP is present 2006-06-22 15:30:29 +00:00
Brendan O'Dea
65270c4bd2 add session/idle timeouts 2006-06-11 12:46:18 +00:00
Brendan O'Dea
67af795b70 kludge around problem with Netgear DM602 authentication 2006-06-03 08:16:46 +00:00
Brendan O'Dea
6c181127a8 convert manual.html to docbook 2006-05-23 14:28:25 +00:00
Brendan O'Dea
9fd9a6fba1 remove non-working setuid option 2006-04-27 14:37:27 +00:00
Brendan O'Dea
5faf075c8d add Multilink support from Khaled Al Hamwi 2006-04-27 09:53:49 +00:00
Brendan O'Dea
6fa7b2b8fa initial converion of liran's "Practical VPNs" to docbook 2006-04-24 15:19:41 +00:00
Brendan O'Dea
71f2642774 only poll clifd if successfully bound 2006-04-23 23:18:30 +00:00
Brendan O'Dea
d3280234d1 interpret "local" direction correctly (as LAC) in disconnect AVPs 2006-04-18 06:00:46 +00:00
Brendan O'Dea
7462628249 don't shutdown on TerminateReq, wait for CDN 2006-04-18 06:00:07 +00:00
Brendan O'Dea
1b6a7a95e6 add Acct-Terminate-Cause to RADIUS stop records 2006-04-13 11:14:35 +00:00
Brendan O'Dea
0251304ce2 set source address for DAE responses 2006-04-05 02:13:48 +00:00
Brendan O'Dea
a840035219 send nsctl responses back using the correct source address 2006-04-05 01:45:57 +00:00
Brendan O'Dea
be9795fce9 fix IPCP length test to allow Terminate-Request (4 bytes) 2006-03-27 03:01:08 +00:00
Brendan O'Dea
b4ca67c68b decrease ip_conntrack_tcp_timeout_established to 5hrs 2006-02-23 01:07:23 +00:00
Brendan O'Dea
93e40637fa additional length checks in processlcp
allow peer to request a new magic-number, or to disable magic-numbers
2006-02-17 15:05:13 +00:00
Brendan O'Dea
00078de8a3 avoid endless loop in processipcp, processipv6cp 2006-02-17 14:35:53 +00:00
Brendan O'Dea
aca7a80c41 validate source of RADIUS packets 2006-02-17 13:27:07 +00:00
Brendan O'Dea
1aa51f00e1 ensure session changes from LCP ConfigReq/ConfigNak are sent to cluster 2006-01-19 21:31:25 +00:00
Brendan O'Dea
cbbd45a52f handle LCP NAK of magic-number 2006-01-19 21:00:24 +00:00
Brendan O'Dea
129f43431f correct addition of single IP to pool 2006-01-19 20:55:03 +00:00
Brendan O'Dea
b5ab056462 send configured magic-no in LCP EchoReq when LCP is opened 2005-12-20 04:57:16 +00:00
Brendan O'Dea
889746f11c add service-type/framed-protocol to RADIUS records 2005-12-19 06:18:13 +00:00
Brendan O'Dea
03d3752c9f fix session MRU, tunnel MTU 2005-12-19 06:08:42 +00:00
Brendan O'Dea
c4847be6b5 break LCP configure loop with shutdown 2005-12-15 14:23:03 +00:00
Brendan O'Dea
12d5aa7c65 reduce logging of LCP EchoReply packets 2005-12-15 14:18:16 +00:00
Brendan O'Dea
5151ca4054 drop backtrace 2005-12-14 02:19:15 +00:00
Brendan O'Dea
d14808035d run PLUGIN_RADIUS_ACCOUNT for Start records 2005-12-09 00:43:17 +00:00
Brendan O'Dea
42f10c1ea0 - Reject unknown/unconfigured protocols on the master.
- Sanity check MRU before using in ppp_code_rej, protoreject.
2005-12-07 05:21:37 +00:00
Brendan O'Dea
f2cf5e1487 remove unused MAC config type 2005-12-06 00:00:31 +00:00
Brendan O'Dea
b3eeda4574 unused: sessiont.{ns,nr} 2005-12-05 14:10:42 +00:00
Brendan O'Dea
dad3309278 fix IPCP negotiation of secondary DNS server 2005-12-04 13:06:49 +00:00
Brendan O'Dea
0dbde0850a use License header, fix BuildRoot 2005-11-25 04:55:38 +00:00
Brendan O'Dea
9ca5c6e72e add test/ping-sweep 2005-11-25 02:18:40 +00:00
Brendan O'Dea
ca510be702 *** empty log message *** 2005-11-17 23:50:35 +00:00
Brendan O'Dea
b3c856c934 set MTU on tunnel interface so the kernel will re-fragment large packets to within MRU 2005-11-17 07:35:35 +00:00
Brendan O'Dea
c0d0650256 exclude counter when comparing filter rules 2005-11-14 09:49:01 +00:00
Brendan O'Dea
2d66b44732 fix fragment handling in ip_filter 2005-11-14 08:38:02 +00:00
Brendan O'Dea
10c35633a5 - Reset restart counters correctly.
- Reset timers on sending ConfigReq.
- Only send one RADIUS Start record, even if IPCP is restarted.
2005-11-04 14:41:50 +00:00
Brendan O'Dea
0ef5685447 add Framed-Route entries to RADIUS records 2005-10-19 03:09:29 +00:00
Brendan O'Dea
4b3b34b994 fix LCP Echo frequency 2005-10-18 07:19:28 +00:00