Commit Graph
78 Commits
Author SHA1 Message Date
Ruslan Ermilov 68b300bfe6 MFC: MAN[1-9] -> MAN. 2001-04-25 10:04:44 +00:00
Ruslan Ermilov 0d8324cd36 MFC: recent mdoc(7) fixes. 2001-03-06 16:46:24 +00:00
Kris Kennaway d7877734c4 MFC: r1.4: sprinkle some consts around 2001-03-05 03:48:00 +00:00
Kris Kennaway 55e7c5a645 MFC: r1.6: Ignore leading witespace in the string given to PacketAliasProxyRule(). 2001-03-05 03:47:29 +00:00
Ruslan Ermilov 87c6ae2554 MFC: the latest PPTP and misc fixes. 2000-10-31 08:48:22 +00:00
Ruslan Ermilov 9be884b0f0 MFC: (rev 1.3) fixed the calculations with UDP length. 2000-09-21 06:56:34 +00:00
Jordan K. Hubbard ace4f30866 MFC: use strtok, eliminate warnings. 2000-09-20 04:40:57 +00:00
Ruslan Ermilov f8ac4c0f42 MFC: latest fixes from -current. 2000-09-14 17:32:39 +00:00
John Baldwin 261260f6aa MFC:
- Add address translation support for RTSP/RTP used by RealPlayer and
  Quicktime streaming media applications.
- Add a BUGS section to the man page.
2000-08-18 20:00:01 +00:00
Ruslan Ermilov 7375459a48 MFC: (rev 1.37) fixed PunchFW code segmentation violation bug. 2000-08-14 15:27:37 +00:00
cvs2svn cde10e618a This commit was manufactured by cvs2svn to create branch 'RELENG_4'. 2000-07-27 01:22:25 +00:00
Ruslan Ermilov b1a961edb8 MFC: fixed PunchFWHole(). 2000-06-27 16:44:13 +00:00
Ruslan Ermilov 9a3a008e72 MFC:
- Added support for FTP EPRT (RFC 2428) command.
- Added support for passive mode FTP servers behind NAT.
- Added security checks for FTP aliasing.
- Load Sharing using IP Network Address Translation (RFC 2391).
- Real PPTP support.
2000-06-27 16:29:31 +00:00
cvs2svn d0c4b1ba87 This commit was manufactured by cvs2svn to create branch 'RELENG_4'. 2000-06-26 08:06:25 +00:00
Brian Somers 9564f73354 MFC: Revert the default behaviour for incoming connections so
that they (once again) go to the target machine rather than
     the alias address.
2000-05-11 07:54:45 +00:00
Ruslan Ermilov 9dd10e5048 MFC: (rev 1.26) Apply TCP_EXPIRE_CONNECTED (86400 seconds) timeout only
to established connections, after SYN packets were seen from both ends.

PR:		bin/17963
2000-04-17 09:05:59 +00:00
Brian Somers ad71a1730f MFC: Redirect incoming connections to aliasAddress by default
Use INADDR_ANY instead of 0 where appropriate
     Staticise _FindLinkIn and wrap GetDestPort with #ifndef NO_FW_PUNCH
2000-04-13 00:11:44 +00:00
Brian Somers 5cd63cb32b MFC: Charles' email address 2000-04-02 20:18:37 +00:00
Sheldon Hearn c6ff3a1bf7 Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.
2000-03-02 09:14:21 +00:00
Alfred Perlstein 47a11f04b3 -it do, among other things, clear out any
+it does, amongst other things, clear out any

The old sentance didn't seem to make sense.
2000-02-28 00:31:18 +00:00
Archie Cobbs b12cbc348c The flags PKT_ALIAS_PUNCH_FW and PKT_ALIAS_PROXY_ONLY were both
being defined as 0x40.  Change the former to be 0x100.

Submitted by:	Erik Salander <[email protected]>
Approved by:	jkh
2000-02-02 23:49:32 +00:00
Brian Somers 21b9df573d Mention what PKT_ALIAS_PROXY_ONLY does.
Prompted by: archie
2000-02-02 23:42:06 +00:00
Rodney W. Grimes d05257b0f2 Replace beforeinstall target with new variables used by .mk system.
Reviewed by:	marcel, and make world
2000-01-14 07:57:47 +00:00
Archie Cobbs a9405f0edb Fix a '&&' that should have been a '&'.
Submitted by:	Erik Salander <[email protected]>
1999-12-10 20:04:53 +00:00
Archie Cobbs 61989d76a5 Fix several typos.
Submitted by:	Erik Salander <[email protected]>
1999-12-09 21:36:34 +00:00
Alexey Zelkin 1855100f8f Restore sub-chapters order.
PR:		docs/14766
Submitted by:	Kazutoshi Kubota <[email protected]>
1999-11-09 00:24:09 +00:00
Ruslan Ermilov 838d9af2c8 Properly handle the case when either the aliasing or source address of
the link are equal to the default aliasing address.  Do not zero them!

This will fix the problem with non-working links added with the source
and/or aliasing address equal to the default aliasing address, but the
default aliasing address is set later, after the link has been set up,
like both natd(8) and ppp(8) do (for objective reasons).

Reviewed by:	Brian Somers <[email protected]>,
		Eivind Eklund <[email protected]>,
		Charles Mott <[email protected]>
1999-09-27 08:40:36 +00:00
Ruslan Ermilov bd3ed4542d ReLink() partial links in FindLinkOut() in the same manner as we do it
in FindLinkIn().  This will make TcpMonitorIn()/TcpMonitorOut() happy.

Reviewed by:	eivind
1999-09-22 13:22:26 +00:00
Ruslan Ermilov f3baa77e5e Restore previous version of FindLinkIn().
Instead, natd(8) should be fixed to call PacketAliasSetAddress()
as part of initialization, as required by libalias(3).
1999-09-21 14:44:32 +00:00
Ruslan Ermilov 02136bf8b0 - Make partially specified permanent links (without `dst_addr' and/or
`dst_port') work for outgoing packets.

- Make permanent links whose `alias_addr' matches the primary aliasing
  address `aliasAddress' work for incoming packets.

- Typo fixes.

Reviewed by:	brian, eivind
1999-09-21 08:40:20 +00:00
Brian Somers 32277d8b6d sys/errno.h -> errno.h 1999-09-21 01:26:49 +00:00
Ruslan Ermilov 92da29a00d - Optimization to the previous (rev 1.15) commit.
Requested by:	eivind
Discussed with:	eivind
Reviewed by:	brian, eivind
1999-09-10 15:27:34 +00:00
Ruslan Ermilov 29d958bb8a Handle TCP reset sequence properly.
In the words of originator:
:If an incoming connection is initiated through natd and deny_incoming is
:not set, then a new alias_link structure is created to handle the link.
:If there is nothing listening for the incoming connection, then the kernel
:responds with a RST for the connection. However, this is not processed
:correctly in libalias/alias.c:TcpMonitor{In,Out} and
:libalias/alias_db.c:SetState{In,Out} as it thinks a connection
:has been established and therefore applies a timeout of 86400 seconds
:to the link.
:
:If many of these half-connections are initiated (during, for example, a
:port scan of the host), then many thousands of unnecessary links are
:created and the resident size of natd balloons to 20MB or more.

PR:		13639
Reviewed by:	brian
1999-09-09 13:42:51 +00:00
Ruslan Ermilov 2f89696765 Fix typo. 1999-09-08 16:37:14 +00:00
Bill Fumerola a5a388c7ab Add $FreeBSD$ and spell Eklund properly.
Approved by:	brian (well, he approved adding $Id$)
1999-08-29 23:17:04 +00:00
Peter Wemm 7f3dea244c $Id$ -> $FreeBSD$ 1999-08-28 00:22:10 +00:00
Brian Somers 7765ab6476 Aallow ppp to work with Nortel Networks Extranet Switch
product and Windows NT tunneling.

Submitted by: Chain Lee <[email protected]>
1999-08-22 23:32:01 +00:00
Tim Vanderhoek a395af9036 Typo: 102 => 192 (PR: docs/13310 - Maxim Sobolev <[email protected]>) 1999-08-22 19:23:33 +00:00
Mike Pritchard 74804d58a0 Various man page cleanup:
- Sort xrefs
- FreeBSD.ORG -> FreeBSD.org
- Be consistent with section names as outlines in mdoc(7)
- Other misc mdoc cleanup.

PR:		doc/13144
Submitted by:	Alexy M. Zelkin <[email protected]>
1999-08-15 09:51:25 +00:00
Brian Somers 0622eafc89 Don't get caught in an infinite recursion when PKT_ALIAS_REVERSE
is set.
Document PKT_ALIAS_REVERSE.

Pointed out by:	Jonathan Hanna <[email protected]>
PR:		12304
1999-06-22 11:20:03 +00:00
Brian Somers 6961f3da13 brucify
Mentioned by: [email protected]
1999-05-23 13:52:05 +00:00
Eivind Eklund 5164f52665 Make incoming packets work as keepalives, too. This should fix problems
for some games.

Notified of problem by:	[email protected]
1999-05-20 20:20:24 +00:00
Brian Somers f1dfc9571e Add missing ``.''. 1999-05-04 10:56:13 +00:00
Luoqi Chen 46d28b4462 Work around an egcs optimizer bug (i386). This should fix the active ftp
hang problem. A bug report has been sent to cygnus.
1999-04-21 21:28:01 +00:00
Brian Somers 42889ed1d5 PacketAliasProxyRule takes a const char *
Reminded by: bde
1999-03-25 06:48:05 +00:00
Brian Somers 942759e756 Add a ``const'' and remove some inconsistent prototype args. 1999-03-24 20:28:58 +00:00
Bill Fumerola 26bb956563 Remove duplicate line.
Reviewed by:	eivind
1999-03-23 23:01:15 +00:00
Brian Somers 4c32f5d217 Remove all diagnostics to stdout/stderr with #ifdef DEBUG
Statify functions in alias_nbt.c
1999-03-09 23:44:00 +00:00
Brian Somers 164928d385 Document PacketAliasPptp() and allow it to be disabled
by passing INADDR_NONE.
1999-03-07 18:13:23 +00:00
Brian Somers b862eda467 Remove unused function stubs. 1999-03-07 15:36:58 +00:00