Commit graph

181 commits

Author SHA1 Message Date
Brendan O'Dea
d2848cebc4 Apply patch from Geoffrey D. Bennett to fix handle RADIUS Class attribute.
Bump heartbeat version to handle Class entry in session (v6).
Re-arrange session struct to remove padding.
Update cluster code to handle v6 packets.  Drop compatability for pre-v5.
2011-09-11 21:54:45 +10:00
Brendan O'Dea
e934c096dd Apply patch from Geoffrey D. Bennett to fix retry of control packets. 2011-01-20 12:48:40 +00:00
Brendan O'Dea
97119ee512 Apply patch from Cyril Elkaim to fix an issue with MacOS. 2010-03-25 05:24:23 +00:00
Brendan O'Dea
b618238509 Apply patch from Michael O to avoid sending multiple CDNs. 2010-01-11 12:16:20 +00:00
Brendan O'Dea
845bb1f376 Apply MLPPP patch from Muhammad Tayseer Alquoatli, very belatedly, with
thanks.  Changes:
- Handle session shutdown gracefully regarding leaving the bundle (bug that is
  caused when a all session leaves a bundle then another join)
- IP assignment is done only for the first session in the bundle (save IP
  waste for multiple MLPPP sessions)
- Route is being added only for the first session in the bundle (less routes
  on l2tpns system)
- Fix route deletion problem for MLPPP sessions (bug that caused when a
  session leaves a bundle)
- Uniformity of sequence number space satisfied (according to RFC1990)
- Fix reassembling fragmented packets and handling lost fragments (according
  to RFC 1990)
- FragmentatConnection to l2tpns.cvs.sourceforge.net closed by remote host.n
  across N session rather than two)
- Sequence numbers extraction mask has been corrected (bug in extracting
  sequence numbers)
- some clustering support fixes
- Upload/Download statistics has been corrected
- add "kill_timedout_sessions" config option
2009-12-08 14:49:28 +00:00
Brendan O'Dea
50da1f206f add "shutdown" and "reload" CLI commands (Daryl Tester) 2006-12-18 12:08:28 +00:00
Brendan O'Dea
3bea7b1e3e don't send interim records before session start (Daryl Tester) 2006-12-18 12:05:36 +00:00
Brendan O'Dea
c2152aa378 add CVE 2006-12-07 05:46:16 +00:00
Brendan O'Dea
dbaf3410c4 Security: Rhys Kidd identified a vulnerability in the handling of
heartbeat packets.  Drop oversize heartbeat packets.
2006-12-04 20:50:02 +00:00
Brendan O'Dea
534a9900a8 allow DNS servers to be specified using either old or new vendor-specific Ascend formats 2006-08-02 14:17:30 +00:00
Brendan O'Dea
9448b44db3 fix sign problem with reporting of unknown RADIUS VSAs 2006-08-02 12:54:45 +00:00
Brendan O'Dea
e49d6736b5 add radius_bind_{min,max} options 2006-07-01 12:40:10 +00:00
Brendan O'Dea
d2f496f603 set acct-disconnect-cause from result code AVP if no disconnect cause AVP is present 2006-06-22 15:30:29 +00:00
Brendan O'Dea
65270c4bd2 add session/idle timeouts 2006-06-11 12:46:18 +00:00
Brendan O'Dea
67af795b70 kludge around problem with Netgear DM602 authentication 2006-06-03 08:16:46 +00:00
Brendan O'Dea
6c181127a8 convert manual.html to docbook 2006-05-23 14:28:25 +00:00
Brendan O'Dea
9fd9a6fba1 remove non-working setuid option 2006-04-27 14:37:27 +00:00
Brendan O'Dea
5faf075c8d add Multilink support from Khaled Al Hamwi 2006-04-27 09:53:49 +00:00
Brendan O'Dea
6fa7b2b8fa initial converion of liran's "Practical VPNs" to docbook 2006-04-24 15:19:41 +00:00
Brendan O'Dea
71f2642774 only poll clifd if successfully bound 2006-04-23 23:18:30 +00:00
Brendan O'Dea
d3280234d1 interpret "local" direction correctly (as LAC) in disconnect AVPs 2006-04-18 06:00:46 +00:00
Brendan O'Dea
7462628249 don't shutdown on TerminateReq, wait for CDN 2006-04-18 06:00:07 +00:00
Brendan O'Dea
1b6a7a95e6 add Acct-Terminate-Cause to RADIUS stop records 2006-04-13 11:14:35 +00:00
Brendan O'Dea
0251304ce2 set source address for DAE responses 2006-04-05 02:13:48 +00:00
Brendan O'Dea
a840035219 send nsctl responses back using the correct source address 2006-04-05 01:45:57 +00:00
Brendan O'Dea
be9795fce9 fix IPCP length test to allow Terminate-Request (4 bytes) 2006-03-27 03:01:08 +00:00
Brendan O'Dea
b4ca67c68b decrease ip_conntrack_tcp_timeout_established to 5hrs 2006-02-23 01:07:23 +00:00
Brendan O'Dea
93e40637fa additional length checks in processlcp
allow peer to request a new magic-number, or to disable magic-numbers
2006-02-17 15:05:13 +00:00
Brendan O'Dea
00078de8a3 avoid endless loop in processipcp, processipv6cp 2006-02-17 14:35:53 +00:00
Brendan O'Dea
aca7a80c41 validate source of RADIUS packets 2006-02-17 13:27:07 +00:00
Brendan O'Dea
1aa51f00e1 ensure session changes from LCP ConfigReq/ConfigNak are sent to cluster 2006-01-19 21:31:25 +00:00
Brendan O'Dea
cbbd45a52f handle LCP NAK of magic-number 2006-01-19 21:00:24 +00:00
Brendan O'Dea
129f43431f correct addition of single IP to pool 2006-01-19 20:55:03 +00:00
Brendan O'Dea
b5ab056462 send configured magic-no in LCP EchoReq when LCP is opened 2005-12-20 04:57:16 +00:00
Brendan O'Dea
889746f11c add service-type/framed-protocol to RADIUS records 2005-12-19 06:18:13 +00:00
Brendan O'Dea
03d3752c9f fix session MRU, tunnel MTU 2005-12-19 06:08:42 +00:00
Brendan O'Dea
c4847be6b5 break LCP configure loop with shutdown 2005-12-15 14:23:03 +00:00
Brendan O'Dea
12d5aa7c65 reduce logging of LCP EchoReply packets 2005-12-15 14:18:16 +00:00
Brendan O'Dea
5151ca4054 drop backtrace 2005-12-14 02:19:15 +00:00
Brendan O'Dea
d14808035d run PLUGIN_RADIUS_ACCOUNT for Start records 2005-12-09 00:43:17 +00:00
Brendan O'Dea
42f10c1ea0 - Reject unknown/unconfigured protocols on the master.
- Sanity check MRU before using in ppp_code_rej, protoreject.
2005-12-07 05:21:37 +00:00
Brendan O'Dea
f2cf5e1487 remove unused MAC config type 2005-12-06 00:00:31 +00:00
Brendan O'Dea
b3eeda4574 unused: sessiont.{ns,nr} 2005-12-05 14:10:42 +00:00
Brendan O'Dea
dad3309278 fix IPCP negotiation of secondary DNS server 2005-12-04 13:06:49 +00:00
Brendan O'Dea
0dbde0850a use License header, fix BuildRoot 2005-11-25 04:55:38 +00:00
Brendan O'Dea
9ca5c6e72e add test/ping-sweep 2005-11-25 02:18:40 +00:00
Brendan O'Dea
ca510be702 *** empty log message *** 2005-11-17 23:50:35 +00:00
Brendan O'Dea
b3c856c934 set MTU on tunnel interface so the kernel will re-fragment large packets to within MRU 2005-11-17 07:35:35 +00:00
Brendan O'Dea
c0d0650256 exclude counter when comparing filter rules 2005-11-14 09:49:01 +00:00
Brendan O'Dea
2d66b44732 fix fragment handling in ip_filter 2005-11-14 08:38:02 +00:00