Michael Chapman
c450bdccc0
Fix RADIUS authentication on DAE responses.
2005-10-11 02:27:40 +00:00
Brendan O'Dea
d266f5fc93
fix Calling-Station-Id in RADIUS accounting records
2005-09-30 13:13:26 +00:00
Brendan O'Dea
1d2a952feb
move code from signal handlers into mainloop, avoiding a race
...
condition when forking CLI
2005-09-19 00:29:12 +00:00
Brendan O'Dea
de9bbde824
fix protocol-reject
2005-09-16 12:13:22 +00:00
Brendan O'Dea
bde7904f92
- Add l2tp_mtu configuration option, used to define MRU, MSS.
...
- Adjust TCP MSS options in SYN and SYN,ACK packets to avoid
fragmentation of tcp packets.
2005-09-16 05:04:28 +00:00
Brendan O'Dea
0c678c5a03
make MRU configurable, NAK config requests for larger values
2005-09-15 09:34:46 +00:00
Brendan O'Dea
733f582897
fix code-reject/protocol-reject
2005-09-13 14:23:07 +00:00
Brendan O'Dea
30a697b2b1
any traffic on a tunnel resets lastrec, not just control messages
2005-09-12 05:16:42 +00:00
Brendan O'Dea
a8823a7dfa
restart BGP on receipt of CEASE
2005-09-02 23:39:34 +00:00
Brendan O'Dea
4b02e4442e
bug fix
2005-09-01 06:59:06 +00:00
Brendan O'Dea
3fdc1ce373
avoid Code-Reject loop
2005-08-31 12:38:38 +00:00
Brendan O'Dea
bb371d8300
fix parsing of protocol rej
2005-08-29 03:21:14 +00:00
Brendan O'Dea
87a0b48170
drop level of "Unexpected CHAP message" log
2005-08-24 23:44:08 +00:00
Brendan O'Dea
567f8e3653
fail IPCP negotiation only on ConfigRej of IP-Address
2005-08-17 03:56:27 +00:00
Brendan O'Dea
0280d21184
re-instate local md5.[ch] due to issues with linking openssl to GPL code
2005-08-10 07:25:23 +00:00
Brendan O'Dea
a5cdf43cb3
fix generateload
2005-08-02 11:48:44 +00:00
Brendan O'Dea
aabf1d3fe9
- Replace flags used for LCP/IPCP with state machine.
...
- Use openssl MD5, fix DAE vector (Alex Kiernan).
2005-07-31 10:04:09 +00:00
Brendan O'Dea
a685501f64
add DAE support (PoD/CoA) from Vladislav Bjelic
2005-06-28 14:48:17 +00:00
Brendan O'Dea
e5695ec41c
clear cluster_master on election so that slaves will accept a new master
2005-06-27 04:52:54 +00:00
Brendan O'Dea
39071c8ab5
Don't resend IPCP while still in progress
2005-06-24 07:05:03 +00:00
Brendan O'Dea
1c08f2bf3b
Always initialise PRNG.
...
Sanity check length of random_vector.
2005-06-14 03:36:16 +00:00
Brendan O'Dea
401271b5bb
- Don't send CDN for each session when shutting down tunnels (this is
...
implicit).
- Move tunnel shutdown from SIGQUIT signal handler to be run once from
still_busy(). Reject new tunnels/sessions while in the process of
shutting down.
2005-06-12 06:10:29 +00:00
Brendan O'Dea
b830a899ca
Include endpoint address in accounting dump files.
...
Convert mainloop to use epoll rather than select.
2005-06-04 15:42:35 +00:00
Brendan O'Dea
ebfbe027e3
add "allow_duplicate_users" config option
2005-06-02 04:38:42 +00:00
Brendan O'Dea
83699acac6
merge cluster fixes from release_2_0 branch
2005-05-26 12:17:30 +00:00
Brendan O'Dea
847b4c6b1d
fix RADIUS indexing (should have 16K entries with 64 sockets)
2005-05-16 04:51:16 +00:00
Brendan O'Dea
f0aa42be04
add sessionctl
2005-05-10 06:44:11 +00:00
Brendan O'Dea
68606812dc
"show running-config" output contains clear-text shared secrets; require enable
2005-05-09 08:53:50 +00:00
Brendan O'Dea
d80d528b9a
more chap
2005-05-08 06:28:12 +00:00
Brendan O'Dea
ecd6721a85
Don't process C_LASTSEEN unless we're a master (otherwise a crashed
...
master kills all slaves once restarted).
2005-05-07 10:14:33 +00:00
Brendan O'Dea
07db0c42ba
- Don't use LOG() macro in initdata() until the config struct has been
...
allocated (uses config->debug).
- Initialise log_stream to stderr to catch errors before the config file
is read.
2005-05-05 02:39:54 +00:00
Brendan O'Dea
a24e3186ff
Add a Cisco-Avpair with intercept details to RADIUS Start/Stop records
2005-05-03 05:11:34 +00:00
Brendan O'Dea
a2056a2184
use cli_error() for error messages and help
2005-05-02 09:55:04 +00:00
Brendan O'Dea
7514d053bc
Update .last_packet in cluster_handle_bytes only when there have
...
been bytes received from the modem (dead sessions were having the
idle timeout reset by stray packets).
2005-05-02 09:06:05 +00:00
Brendan O'Dea
4f94b2184e
only send RADIUS stop in sessionshutdown if there's an ip address
2005-04-01 06:39:00 +00:00
Brendan O'Dea
7a42b7193b
simplify AVP unhiding code
2005-03-10 03:08:07 +00:00
Brendan O'Dea
983b38e12f
merge back 2.0 branch changes
2005-02-14 06:58:38 +00:00
Brendan O'Dea
be29ef6cb2
remove unmaintained "save_state" option
2005-02-09 00:16:17 +00:00
Brendan O'Dea
08360e49b4
finish incorporating ipv6 patches
2005-01-25 04:19:04 +00:00
Brendan O'Dea
17714a3ca7
log CLI connections at 4 from localhost; show last counter reset
2005-01-13 07:05:56 +00:00
Brendan O'Dea
4d76778200
more DoS prevention: add packet_limit option to apply a hard limit to downstream packets per session
2005-01-10 07:17:37 +00:00
Brendan O'Dea
ef828aaac5
CHAP support from Jordan Hrycaj (work in progress)
2005-01-07 07:19:19 +00:00
Brendan O'Dea
8454a49d0c
sanity check that cluster_send_session is not called from a child process
...
throttle outgoing LASTSEEN packets to at most one per second for a given seq#
2004-12-20 07:23:41 +00:00
Brendan O'Dea
54443c26c4
start merging Jonathan's IPv6 patches (01-defines, 02-ipv6-cli)
2004-12-18 01:20:05 +00:00
Brendan O'Dea
0ab682e580
add counters for select_called, select_ready and select_processed
...
fix cli_print format strings
2004-12-16 23:40:30 +00:00
Brendan O'Dea
9d199a1046
use standard uintN_t types for portability
2004-12-16 08:49:52 +00:00
Brendan O'Dea
cda8d6eddd
retain counters of shutdown sessions to dump once per minute
2004-12-13 02:27:30 +00:00
Brendan O'Dea
06ec43669e
- Use gzip --best for man pages, include pid_file in sample
...
startup-config (from Jonathan's Debian package patches).
- Read multiple packets off cluster_sockfd as well as udpfd, tunfd in an
attempt to avoid losing the cluster in high load (DoS) conditions.
2004-12-09 00:53:45 +00:00
Brendan O'Dea
38abd6684e
drop "Session N is closing" message level to 4; don't process PPPIP packets in this state
2004-12-05 23:45:04 +00:00
Brendan O'Dea
f5fb6dea86
better cluster master collision resolution
2004-12-03 06:40:02 +00:00