fwknop

DeforaNetworks/fwknop

Fork 0

Commit Graph

Select branches

Hide Pull Requests

khorben/connect-error-format

khorben/coverity/1355235-toctou

khorben/execvp

khorben/http-1.1

khorben/ipv6

khorben/ipv6-client

khorben/ipv6-server

khorben/netbsd

khorben/snprintf

khorben/srandom

khorben/strlcat

khorben/typo

khorben/usage

khorben/warnings

master

b4213bb3fb Merge branch 'master' of ssh://github.com/mrash/fwknop master Michael Rash 2019-03-11 21:57:10 -07:00
fb69921fdd add ALLOW_ANY_USER_AGENT to ignore incoming User-Agent strings in SPA packets over HTTP, closes #296 Michael Rash 2019-03-11 21:56:21 -07:00
b484741632

Merge pull request #294 from fmarier/patch-2 Michael Rash 2019-02-28 06:44:10 -05:00
bf2aa28f57

Merge pull request #292 from fmarier/patch-1 Michael Rash 2019-02-28 06:43:17 -05:00
973043a411

Include systemd unit files in tarballs Francois Marier 2019-02-25 13:18:11 -08:00
1f417ea829

Fix AppArmor profile for Debian unstable Francois Marier 2019-02-24 23:35:32 -08:00
2857a9cb1b [test suite] fix whitespace trailing chars test Michael Rash 2018-10-27 21:21:52 -04:00
bacd054b13 strip trailing whitespace from config values, closes #288 Michael Rash 2018-10-24 23:40:13 -04:00
7ac347fbdd

Merge pull request #286 from DeforaNetworks/khorben/coverity/1355235-toctou Michael Rash 2018-08-28 20:36:58 -04:00
40664566e6 Look for support for fileno() in the system khorben/coverity/1355235-toctou Pierre Pronchery 2018-08-27 20:01:13 +02:00
2def3bb0e8 Avoid TOCTOU by using fstat() after open() Pierre Pronchery 2018-08-27 20:00:02 +02:00
cb8632f4db Avoid TOCTOU by using fstat() after open() Pierre Pronchery 2018-08-27 19:39:21 +02:00
7eadce33d0 Avoid TOCTOU when calling stat() just before fopen() Pierre Pronchery 2018-08-27 18:53:37 +02:00
3c717b8e69 [test suite] use 'badhost.' so local resolution will not be an issue (Michael Dukelsky) Michael Rash 2018-08-24 20:07:34 -07:00
91f3842475 Complete the check and search for ip6tables khorben/ipv6 Pierre Pronchery 2018-08-25 01:01:50 +02:00
a2edaecad3 Also output the value obtained for ip6tables Pierre Pronchery 2018-08-22 16:41:27 +02:00
369cd89e5e [server] remove logically dead code per Coverity scan Michael Rash 2018-08-20 18:47:54 -07:00
3f3b304cf4 Port src_dst_check() to IPv6 Pierre Pronchery 2018-08-17 01:55:03 +02:00
46d4d77a66 Use "::/0" for IPT_ANY_IPV6 Pierre Pronchery 2018-08-17 00:42:04 +02:00
f3895bb721 Fix DNAT with IPv6 Pierre Pronchery 2018-08-15 18:52:20 +02:00
460774cafd No longer accept colon (":") as port separator Pierre Pronchery 2018-08-15 17:39:33 +02:00
73d7b7904b Use "::" for matching any address for IPv6 rules Pierre Pronchery 2018-08-15 17:14:51 +02:00
c1d3656f0b Code cleanup Pierre Pronchery 2018-08-12 16:38:00 +02:00
70df56f73c Only support IPv4 on Windows Pierre Pronchery 2018-08-12 16:31:56 +02:00
159c62c8ef Re-indent Pierre Pronchery 2018-08-12 16:28:52 +02:00
561ba964f3 Resolve hostnames to IPv6 addresses in IPv6 mode Pierre Pronchery 2018-08-12 16:27:21 +02:00
fd6def040f Remove useless code Pierre Pronchery 2018-08-12 16:11:20 +02:00
2bdaeff67d Default to IPv6 rules when listening on IPv6 Pierre Pronchery 2018-08-12 16:08:42 +02:00
0bbbd13d45 Code cleanup Pierre Pronchery 2018-08-12 15:59:07 +02:00
f97214bcfc Revert "Remove support for IPv6 for rules shared with IPv4" Pierre Pronchery 2018-08-08 19:16:03 +02:00
d28d1cb12d Add support for rule expiration with IPv6 Pierre Pronchery 2018-08-08 18:16:39 +02:00
68cacee9f1 Remove support for IPv6 for rules shared with IPv4 Pierre Pronchery 2018-08-08 17:58:36 +02:00
282aa2dc09 Provide enough space to resolve IPv6 addresses Pierre Pronchery 2018-08-08 17:10:49 +02:00
ba4d095daa Fix a couple more uses of ctype(3) Pierre Pronchery 2018-08-08 17:10:02 +02:00
dd0597f7f8 Code cleanup Pierre Pronchery 2018-08-08 17:09:49 +02:00
fa664db600 Add preliminary support for IPv6 with iptables Pierre Pronchery 2018-08-08 17:07:03 +02:00
81e2255912 Update a comment Pierre Pronchery 2018-08-08 17:03:05 +02:00
576eb11191 Add IPv6 support to --fw-list{,all} Pierre Pronchery 2018-08-08 14:28:29 +02:00
7f9d09e8d3 Initialize the configuration for ip6tables as well Pierre Pronchery 2018-08-08 14:21:40 +02:00
a7a9ecb991 Add the fw_command6 member to the right struct fw_config Pierre Pronchery 2018-08-08 14:00:01 +02:00
edeea235bc Add a configuration variable for IPv6 firewall binaries Pierre Pronchery 2018-08-08 13:54:11 +02:00
956e1df228 Allow the longest possible IPv6 address in sources Pierre Pronchery 2018-08-07 13:54:16 +02:00
e29d62ef10 Fix build with NFQ enabled Pierre Pronchery 2018-08-07 08:21:37 +02:00
e3aeb468b6 Check for errors from inet_addr() with INADDR_NONE Pierre Pronchery 2018-08-06 19:08:27 +02:00
c5994a34b7 Do not use INADDR_ANY for default ports Pierre Pronchery 2018-08-06 19:05:19 +02:00
9923fc0a88 Verify if the protocol family matches incoming packets Pierre Pronchery 2018-08-06 17:29:28 +02:00
13dee2cdd8 Support further address families in the future Pierre Pronchery 2018-08-06 17:29:04 +02:00
3a8e01adea Update the manual page for the -6 option (--ipv6) Pierre Pronchery 2018-07-30 16:17:46 +02:00
bbb341c040 Fix the build with firewalld Pierre Pronchery 2018-07-27 14:52:35 +02:00
15dfc94e9c Fix the build on Linux (iptables) Pierre Pronchery 2018-07-27 14:15:23 +02:00
08e805da53 Optimize moot variable initialization away Pierre Pronchery 2018-07-27 04:12:38 +02:00
6405398858 Add a command-line option to enable IPv6 (TCP/UDP) Pierre Pronchery 2018-07-27 03:56:41 +02:00
1fd5fe197d Begin to allow IPv6 addresses in source stanzas Pierre Pronchery 2018-07-24 15:44:14 +02:00
987875616a Fix some issues with TCP over IPv6 Pierre Pronchery 2018-07-19 00:03:54 +02:00
3e329a537d Correct the packet length calculation with IPv6 Pierre Pronchery 2018-07-18 22:37:54 +02:00
c8670aa2d3 Simplify the calculation of pkt_data_len Pierre Pronchery 2018-07-18 22:31:36 +02:00
d260f502d9 Use the correct offset for inet_ntop() Pierre Pronchery 2018-07-18 21:57:37 +02:00
c753215038 Prepare access stanzas for more address families Pierre Pronchery 2018-07-18 04:38:12 +02:00
a2902cbc62 Terminate IPs resolved externally as expected Pierre Pronchery 2018-07-17 17:48:26 +02:00
74370395a7 Constify Pierre Pronchery 2018-07-17 17:24:52 +02:00
f35c1d7cb7 Add IPv6 support to the plain UDP and TCP servers Pierre Pronchery 2018-07-10 16:25:20 +02:00
32cdd1183e Specify the family at run-time for TCP/UDP servers Pierre Pronchery 2018-07-10 15:43:10 +02:00
d6ce22b989 Set the address family for incoming SPA over UDP Pierre Pronchery 2018-07-10 15:29:20 +02:00
11e9b29f24 Fix processing command-line arguments with whitespace Pierre Pronchery 2018-07-10 13:01:53 +02:00
587a4fbcb1 Rework IPv6 support when comparing addresses Pierre Pronchery 2018-07-10 12:58:36 +02:00
76d609bac6 Use /usr/bin/env to locate perl Pierre Pronchery 2018-07-10 12:12:05 +02:00
da1ab0563d Use a constant for AF_INET Pierre Pronchery 2018-07-09 18:34:57 +02:00
b070e80623 Use sizeof() instead of re-using hard-coded values Pierre Pronchery 2018-07-09 18:22:03 +02:00
f61a3085f0 Use sizeof() instead of re-using hard-coded values Pierre Pronchery 2018-07-09 17:58:26 +02:00
baed23c50c Use AF_INET instead of PF_INET Pierre Pronchery 2018-07-09 17:24:59 +02:00
d1c1373980 Allow access control "ANY" with any protocol family Pierre Pronchery 2018-07-09 15:57:28 +02:00
17549b93be Use a more appropriate type for sd_len Pierre Pronchery 2018-07-09 15:28:14 +02:00
82a5eec571 Constify Pierre Pronchery 2018-07-09 13:52:45 +02:00
a2462c6c3e Typo Pierre Pronchery 2018-06-26 03:23:53 +02:00
bd1c488cbd Typo Pierre Pronchery 2018-06-26 03:23:12 +02:00
89c7d6f8b9 Let access list stanzas be defined in IPv6 Pierre Pronchery 2018-06-26 03:20:44 +02:00
8ecd10b4c0 Interpret incoming addresses according to their family Pierre Pronchery 2018-06-26 02:20:12 +02:00
6bcaf4f3e3 Add support for receiving SPA messages over IPv6 Pierre Pronchery 2018-06-15 18:24:50 -04:00
37a8000aa2 Protect some more headers for inclusion Pierre Pronchery 2018-06-15 18:23:13 -04:00
a525734afc Also include <netinet/ip6.h> where relevant Pierre Pronchery 2018-06-15 18:18:43 -04:00
1a813bb2b8 Code cleanup Pierre Pronchery 2018-06-15 18:16:15 -04:00
3dc61166a4 Rework the network listening routine some more Pierre Pronchery 2018-06-15 17:36:20 -04:00
ce9b5fb364 Rework the network listening routine Pierre Pronchery 2018-06-15 16:38:11 -04:00
2367bc23e8 Also check for <netinet/ip6.h> and <netinet/icmp6.h> Pierre Pronchery 2018-06-14 19:18:06 -04:00
72a50b9c8e Use uppercase to log "IP" Pierre Pronchery 2018-06-14 18:23:01 -04:00
2f6ea521ff Allow connecting to remote IPv6 hosts for TCP or UDP Pierre Pronchery 2018-06-14 18:21:24 -04:00
f7b18d64f3 Give have_allow_ip() a chance to allow IPv6 Pierre Pronchery 2018-06-12 17:45:19 -04:00
aea56f54c4 Implement is_valid_ip_addr() with getaddrinfo() Pierre Pronchery 2018-06-12 17:44:27 -04:00
b3494dcfc1 Migrate is_valid_ipv4_addr() to a more generic function Pierre Pronchery 2018-06-12 17:07:49 -04:00
a0dda67dfe Also catch the IPv6 version of INADDR_ANY Pierre Pronchery 2018-06-12 16:53:14 -04:00
460bd8c672 Be more consistent when creating ~/.fwknoprc Pierre Pronchery 2018-06-12 16:44:19 -04:00
b8252dbdb8 Let IPs resolve to IPv6 addresses over SSL Pierre Pronchery 2018-06-12 16:34:36 -04:00
07693a9245 Let IPs resolve to IPv6 addresses Pierre Pronchery 2018-06-12 16:22:25 -04:00
e82cb8621f [test suite] another bogus user test for fko-wrapper Michael Rash 2018-08-19 16:24:08 -07:00
d7aacb68f2 [test suite] add bogus username test to fko-wrapper Michael Rash 2018-08-19 16:21:47 -07:00
4769d136d9 [libfko] add NULL check to fko_get_raw_spa_digest_type() - bug discovered by fko-wrapper Michael Rash 2018-08-19 16:19:56 -07:00
d328278cb8 [test suite] minor Makefile enhancement (variable usage) for fko-wrapper Michael Rash 2018-08-19 14:02:42 -07:00
57ef059811 [test suite] add calls to fko_set_raw_spa_digest_type() and fko_get_raw_spa_digest_type() Michael Rash 2018-08-19 12:40:14 -07:00
d50276d6fe [test suite] better job of cleaning up coverage files Michael Rash 2018-08-18 19:46:47 -07:00
62336616d7 [test suite] minor decoding and fko_set_timestamp() exercise enhancements for fko_wrapper Michael Rash 2018-08-18 09:41:23 -07:00