Commit Graph

20 Commits

Author SHA1 Message Date
Nikos Mavrogiannopoulos
6bc625df81 The route configuration directive accepts the keyword 'default'
In that case it will return a default route irrespective of any other
route directives. That allows overriding existing routes with a default
route for specific users and groups.
2014-05-19 09:58:37 +02:00
Nikos Mavrogiannopoulos
bb2b3ae508 check for posix_memalign presence. 2014-05-01 12:02:45 +02:00
Nikos Mavrogiannopoulos
2c213d4e52 Active session timeout was reduced to 30 secs. 2014-04-21 14:08:50 +02:00
Nikos Mavrogiannopoulos
d090075502 corrected sigstack permissions. 2014-04-19 13:18:24 +02:00
Nikos Mavrogiannopoulos
03f6e7cc16 Setup an alternative stack for signals on heap. 2014-04-19 12:03:40 +02:00
Nikos Mavrogiannopoulos
489368c58e When receiving unexpected UDP packets, check if they match a known IP and forward them.
This will not work for many clients that come from a single IP but will
work-around issues, when clients are behind a NAT that keeps their UDP port
state for shorter time than DPD.
2014-04-19 10:29:57 +02:00
Nikos Mavrogiannopoulos
0258824647 corrected program name in license 2014-04-18 16:16:31 +02:00
Nikos Mavrogiannopoulos
317fe62a56 Added sys/uio.h 2014-03-31 16:57:24 +02:00
Nikos Mavrogiannopoulos
3b9971b7e8 Added support for the "new" type of IP6 support in AnyConnect.
If the client sends "X-CSTP-Full-IPv6-Capability: true", then we
use the headers:
     X-CSTP-Address-IP6: 2001:db8:1000:1000::1/64
     X-CSTP-Split-Include-IP6: 2001:db8:1000:1001::/64
     X-CSTP-Split-Include-IP6: 2001:db8:1000:1002::/64

(see corresponding openconnect change)
2014-02-15 13:51:03 +01:00
Nikos Mavrogiannopoulos
0ec67882c0 Added support for multiple DNS and NBNS servers.
This patch also combines ipv4-dns and ipv6-dns options
that are now handled as aliases to dns.

A side-effect of this patch is that the local keyword is no
longer supported.
2014-02-01 14:50:52 +01:00
Nikos Mavrogiannopoulos
28e5d62f3f The worker process receives the client's IPs from the main process.
That eliminates the need to read the IP address from the tun device
(which can be quite tricky to implement in a clean portable way).
2014-01-31 20:53:45 +01:00
Nikos Mavrogiannopoulos
3893ee6213 on unknown messages print the number of the message when cmd_request_to_str() is used. 2014-01-19 09:30:36 +01:00
Nikos Mavrogiannopoulos
058b986967 Converted IPC messaging to protocolbuffers-c
That adds a dependency on protocolbuffers-c, but simplifies
the worker-main communication protocol handling.
2013-12-21 12:38:01 +01:00
Nikos Mavrogiannopoulos
85f4db201c updated license information and authors 2013-11-05 19:38:30 +01:00
Nikos Mavrogiannopoulos
1d4d4e731a added error message 2013-11-02 16:07:08 +01:00
Nikos Mavrogiannopoulos
ac1621df0b Corrected behavior on error during receiving a UDP fd. 2013-10-31 11:44:36 +01:00
Nikos Mavrogiannopoulos
a98e48b9b7 when receive a new UDP session, forward the fd and replace the old. 2013-02-19 19:12:05 +01:00
Nikos Mavrogiannopoulos
356da3fbe4 connect occurs before sending the fd to worker. 2013-02-12 18:57:05 +01:00
Nikos Mavrogiannopoulos
a5257b6167 small reorganization 2013-02-09 19:54:25 +01:00
Nikos Mavrogiannopoulos
d1946bbb3c MTU is now set via the main server 2013-02-08 22:17:46 +01:00