Commit graph

73 commits

Author SHA1 Message Date
foonly
f333003786 Fix RADIUS authentication on DAE responses. 2005-10-11 02:27:40 +00:00
bodea
c463b012b7 fix Calling-Station-Id in RADIUS accounting records 2005-09-30 13:13:26 +00:00
bodea
05ea15956a move code from signal handlers into mainloop, avoiding a race
condition when forking CLI
2005-09-19 00:29:12 +00:00
bodea
2d7d819bfa fix protocol-reject 2005-09-16 12:13:22 +00:00
bodea
42af131396 - Add l2tp_mtu configuration option, used to define MRU, MSS.
- Adjust TCP MSS options in SYN and SYN,ACK packets to avoid
  fragmentation of tcp packets.
2005-09-16 05:04:28 +00:00
bodea
667a8bc420 make MRU configurable, NAK config requests for larger values 2005-09-15 09:34:46 +00:00
bodea
59706a5394 fix code-reject/protocol-reject 2005-09-13 14:23:07 +00:00
bodea
1e198ac0e2 any traffic on a tunnel resets lastrec, not just control messages 2005-09-12 05:16:42 +00:00
bodea
a4bf68528c restart BGP on receipt of CEASE 2005-09-02 23:39:34 +00:00
bodea
75ba8921cf bug fix 2005-09-01 06:59:06 +00:00
bodea
3646374c82 avoid Code-Reject loop 2005-08-31 12:38:38 +00:00
bodea
e8a19e982b fix parsing of protocol rej 2005-08-29 03:21:14 +00:00
bodea
3efd4f877a drop level of "Unexpected CHAP message" log 2005-08-24 23:44:08 +00:00
bodea
447f820899 fail IPCP negotiation only on ConfigRej of IP-Address 2005-08-17 03:56:27 +00:00
bodea
aacba76c8d re-instate local md5.[ch] due to issues with linking openssl to GPL code 2005-08-10 07:25:23 +00:00
bodea
e91dac99cf fix generateload 2005-08-02 11:48:44 +00:00
bodea
afc8f4c6c0 - Replace flags used for LCP/IPCP with state machine.
- Use openssl MD5, fix DAE vector (Alex Kiernan).
2005-07-31 10:04:09 +00:00
bodea
4f253feef0 add DAE support (PoD/CoA) from Vladislav Bjelic 2005-06-28 14:48:17 +00:00
bodea
a997e47395 clear cluster_master on election so that slaves will accept a new master 2005-06-27 04:52:54 +00:00
bodea
05628d832a Don't resend IPCP while still in progress 2005-06-24 07:05:03 +00:00
bodea
89fc6e54f0 Always initialise PRNG.
Sanity check length of random_vector.
2005-06-14 03:36:16 +00:00
bodea
3cdac878d7 - Don't send CDN for each session when shutting down tunnels (this is
implicit).
- Move tunnel shutdown from SIGQUIT signal handler to be run once from
  still_busy().  Reject new tunnels/sessions while in the process of
  shutting down.
2005-06-12 06:10:29 +00:00
bodea
ec4de7f8c5 Include endpoint address in accounting dump files.
Convert mainloop to use epoll rather than select.
2005-06-04 15:42:35 +00:00
bodea
70b7627d5c add "allow_duplicate_users" config option 2005-06-02 04:38:42 +00:00
bodea
ca4801db55 merge cluster fixes from release_2_0 branch 2005-05-26 12:17:30 +00:00
bodea
af44e3e3bc fix RADIUS indexing (should have 16K entries with 64 sockets) 2005-05-16 04:51:16 +00:00
bodea
e3f281ce02 add sessionctl 2005-05-10 06:44:11 +00:00
bodea
1eca21ec9c "show running-config" output contains clear-text shared secrets; require enable 2005-05-09 08:53:50 +00:00
bodea
071f1d77eb more chap 2005-05-08 06:28:12 +00:00
bodea
851e04dbdf Don't process C_LASTSEEN unless we're a master (otherwise a crashed
master kills all slaves once restarted).
2005-05-07 10:14:33 +00:00
bodea
81bc9de9de - Don't use LOG() macro in initdata() until the config struct has been
allocated (uses config->debug).
- Initialise log_stream to stderr to catch errors before the config file
  is read.
2005-05-05 02:39:54 +00:00
bodea
1ba0a50edc Add a Cisco-Avpair with intercept details to RADIUS Start/Stop records 2005-05-03 05:11:34 +00:00
bodea
2a8ea53c2f use cli_error() for error messages and help 2005-05-02 09:55:04 +00:00
bodea
715e74f4c7 Update .last_packet in cluster_handle_bytes only when there have
been bytes received from the modem (dead sessions were having the
idle timeout reset by stray packets).
2005-05-02 09:06:05 +00:00
bodea
3141b86973 only send RADIUS stop in sessionshutdown if there's an ip address 2005-04-01 06:39:00 +00:00
bodea
466ffcdaac simplify AVP unhiding code 2005-03-10 03:08:07 +00:00
bodea
7825a26691 merge back 2.0 branch changes 2005-02-14 06:58:38 +00:00
bodea
46ec025f15 remove unmaintained "save_state" option 2005-02-09 00:16:17 +00:00
bodea
97ad99cc23 finish incorporating ipv6 patches 2005-01-25 04:19:04 +00:00
bodea
5d174e0df9 log CLI connections at 4 from localhost; show last counter reset 2005-01-13 07:05:56 +00:00
bodea
bb63cb9994 more DoS prevention: add packet_limit option to apply a hard limit to downstream packets per session 2005-01-10 07:17:37 +00:00
bodea
ee333473db CHAP support from Jordan Hrycaj (work in progress) 2005-01-07 07:19:19 +00:00
bodea
68921aa65a sanity check that cluster_send_session is not called from a child process
throttle outgoing LASTSEEN packets to at most one per second for a given seq#
2004-12-20 07:23:41 +00:00
bodea
9cb7003d33 start merging Jonathan's IPv6 patches (01-defines, 02-ipv6-cli) 2004-12-18 01:20:05 +00:00
bodea
4d7d7850b5 add counters for select_called, select_ready and select_processed
fix cli_print format strings
2004-12-16 23:40:30 +00:00
bodea
6b1075b65c use standard uintN_t types for portability 2004-12-16 08:49:52 +00:00
bodea
4d4030929e retain counters of shutdown sessions to dump once per minute 2004-12-13 02:27:30 +00:00
bodea
1f2d33d275 - Use gzip --best for man pages, include pid_file in sample
startup-config (from Jonathan's Debian package patches).
- Read multiple packets off cluster_sockfd as well as udpfd, tunfd in an
  attempt to avoid losing the cluster in high load (DoS) conditions.
2004-12-09 00:53:45 +00:00
bodea
53ea63b326 drop "Session N is closing" message level to 4; don't process PPPIP packets in this state 2004-12-05 23:45:04 +00:00
bodea
12f5781dc3 better cluster master collision resolution 2004-12-03 06:40:02 +00:00