l2tpns.git
12 years agoAdd a debian/changelog entry for version 2.2.1-1fdn1. debian/2.2.1-1fdn1
Benjamin Cama [Fri, 29 Jul 2011 13:07:08 +0000 (15:07 +0200)]
Add a debian/changelog entry for version 2.2.1-1fdn1.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoMerge branch 'fdn-mods'
Benjamin Cama [Fri, 29 Jul 2011 12:54:00 +0000 (14:54 +0200)]
Merge branch 'fdn-mods'

12 years agoMerge branch 'rfc4760' into fdn-mods
Benjamin Cama [Fri, 29 Jul 2011 11:04:31 +0000 (13:04 +0200)]
Merge branch 'rfc4760' into fdn-mods

12 years agoAdd a config option to set the advertised BGP next hop.
Benjamin Cama [Thu, 7 Jul 2011 11:12:30 +0000 (13:12 +0200)]
Add a config option to set the advertised BGP next hop.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoKill sessions receiving a ConfReq while closing.
Benjamin Cama [Thu, 7 Jul 2011 11:11:27 +0000 (13:11 +0200)]
Kill sessions receiving a ConfReq while closing.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd an "hostname" config option.
Benjamin Cama [Mon, 25 Jul 2011 18:07:14 +0000 (20:07 +0200)]
Add an "hostname" config option.

It is overridden by the -h command line option.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoBetter example address for cli_bind_address.
Benjamin Cama [Sun, 24 Jul 2011 11:53:51 +0000 (13:53 +0200)]
Better example address for cli_bind_address.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd a cli_bind_address configuration option.
Benjamin Cama [Sun, 24 Jul 2011 11:49:11 +0000 (13:49 +0200)]
Add a cli_bind_address configuration option.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoStop BGP session even when we are master
Benjamin Cama [Sun, 24 Jul 2011 00:26:32 +0000 (02:26 +0200)]
Stop BGP session even when we are master

Probably a bug; introduced by a patch that made only slaves stop their BGP
session.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoWait before retrying on CEASE.
Benjamin Cama [Sat, 23 Jul 2011 16:57:27 +0000 (18:57 +0200)]
Wait before retrying on CEASE.

Using bgp_restart() floods the peer with connection requests. Use bgp_retry()
instead.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd an option to set source address for a BGP session.
Benjamin Cama [Fri, 22 Jul 2011 00:11:33 +0000 (02:11 +0200)]
Add an option to set source address for a BGP session.

When adding a BGP neighbour, one can set "update-source" (quagga syntax) to the
source IP address that will be used for that session.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoRemove no more used plugin function names; fixes a crash.
Benjamin Cama [Thu, 21 Jul 2011 15:00:18 +0000 (17:00 +0200)]
Remove no more used plugin function names; fixes a crash.

These functions have been for long removed from plugins.h.
Debian sources used an older plugins.h.
l2tpns.c doesn't seem to have been ever fixed in upstream CVS.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoDisplay session's remainging time in CLI.
Benjamin Cama [Thu, 21 Jul 2011 14:57:27 +0000 (16:57 +0200)]
Display session's remainging time in CLI.

Patch extracted from original Debian sources, not found in upstream CVS.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd a debian/changelog entry for version 2.2.1-1. debian/2.2.1-1
Benjamin Cama [Thu, 28 Jul 2011 16:18:08 +0000 (18:18 +0200)]
Add a debian/changelog entry for version 2.2.1-1.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoMerge branch 'upstream'
Benjamin Cama [Thu, 28 Jul 2011 15:59:33 +0000 (17:59 +0200)]
Merge branch 'upstream'

12 years agoRetry on unsupported capability, not restart immediatly.
Benjamin Cama [Mon, 25 Jul 2011 16:16:46 +0000 (18:16 +0200)]
Retry on unsupported capability, not restart immediatly.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoReally fix parameters length calculation this time.
Benjamin Cama [Mon, 25 Jul 2011 10:40:50 +0000 (12:40 +0200)]
Really fix parameters length calculation this time.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoFix a bug in parameters length setting.
Benjamin Cama [Mon, 25 Jul 2011 10:12:53 +0000 (12:12 +0200)]
Fix a bug in parameters length setting.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoA bit of renaming for clarity.
Benjamin Cama [Mon, 25 Jul 2011 09:40:29 +0000 (11:40 +0200)]
A bit of renaming for clarity.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoFix bugs in IPv6 update routine.
Benjamin Cama [Sun, 24 Jul 2011 23:00:03 +0000 (01:00 +0200)]
Fix bugs in IPv6 update routine.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoCall bgp_add/del_route6() in l2tpns.c.
Benjamin Cama [Sat, 23 Jul 2011 20:29:59 +0000 (22:29 +0200)]
Call bgp_add/del_route6() in l2tpns.c.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoDon't send notification when receiving an unsupported capability.
Benjamin Cama [Sat, 23 Jul 2011 18:46:39 +0000 (20:46 +0200)]
Don't send notification when receiving an unsupported capability.

Tested peer (quagga) doesn't interpret it nicely (i.e. it shuts the connection
down). Better not tell anything.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoBetter check for IPv6 compatibility with the BGP peer.
Benjamin Cama [Sat, 23 Jul 2011 16:53:12 +0000 (18:53 +0200)]
Better check for IPv6 compatibility with the BGP peer.

We would advertise IPv6 routes to non-multiprotocol aware peers. Fix that.
Also, fix the way we parse options, to handle multiple optional parameters with
one capability in it (or many; it's just the way quagga send them).

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoFix the AFI for IPv6.
Benjamin Cama [Thu, 21 Jul 2011 00:49:38 +0000 (02:49 +0200)]
Fix the AFI for IPv6.

The Address Family Identifier was not the one I thought it was.
Define it and fix its use for IPv6.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoBetter handle IPv6 routes advertisement (non-)support.
Benjamin Cama [Wed, 20 Jul 2011 15:46:21 +0000 (17:46 +0200)]
Better handle IPv6 routes advertisement (non-)support.

Don't try to enable multiprotocol BGP when the peer says it can't.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd config examples for nexthop/nexthop6.
Benjamin Cama [Wed, 20 Jul 2011 12:53:19 +0000 (14:53 +0200)]
Add config examples for nexthop/nexthop6.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoHandle multiprotocol UPDATE.
Benjamin Cama [Wed, 20 Jul 2011 12:45:09 +0000 (14:45 +0200)]
Handle multiprotocol UPDATE.

Add IPv6 routes advertisement handling, with MP path attributes heading
prepared on initialization.
BTW, fix a bug in attribute size calculation (for extended attr).

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd a nexthop6 config option.
Benjamin Cama [Wed, 20 Jul 2011 12:43:44 +0000 (14:43 +0200)]
Add a nexthop6 config option.

Will be used to set the NEXT_HOP for IPv6 routes, otherwise our address in
ipv6_prefix is used as the next hop.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd v6 routes handling.
Benjamin Cama [Wed, 20 Jul 2011 09:00:43 +0000 (11:00 +0200)]
Add v6 routes handling.

Basically duplicate the v4 functions.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoMove NEXT_HOP attribute so that we can exclude it.
Benjamin Cama [Tue, 19 Jul 2011 22:49:28 +0000 (00:49 +0200)]
Move NEXT_HOP attribute so that we can exclude it.

We will need to do that when we will send IPv6 routes (RFC4760 says we SHOULD
NOT carry this attribute when we will send UPDATE without NLRI). So, we save
the length of all the attributes except NEXT_HOP for later memcpy().

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoFix a typo from last commit.
Benjamin Cama [Tue, 19 Jul 2011 22:30:16 +0000 (00:30 +0200)]
Fix a typo from last commit.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoDisable IPv6 routes adv when peer doesn't support it.
Benjamin Cama [Tue, 19 Jul 2011 22:29:02 +0000 (00:29 +0200)]
Disable IPv6 routes adv when peer doesn't support it.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdvertise IPv6 capability to peers.
Benjamin Cama [Tue, 19 Jul 2011 22:22:18 +0000 (00:22 +0200)]
Advertise IPv6 capability to peers.

Also rename a param define, and fix a forgotten ntohs().

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAvoid implicit cast warning.
Benjamin Cama [Tue, 19 Jul 2011 22:01:23 +0000 (00:01 +0200)]
Avoid implicit cast warning.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd a per-peer flag if it supports IPv6 routes adv.
Benjamin Cama [Tue, 19 Jul 2011 21:59:27 +0000 (23:59 +0200)]
Add a per-peer flag if it supports IPv6 routes adv.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd Multiprotocol definitions and more param handling.
Benjamin Cama [Tue, 19 Jul 2011 21:47:16 +0000 (23:47 +0200)]
Add Multiprotocol definitions and more param handling.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoAdd Optional Parameter and Capability handling.
Benjamin Cama [Tue, 19 Jul 2011 13:15:40 +0000 (15:15 +0200)]
Add Optional Parameter and Capability handling.

Optional Parameters is defined in RFC4271 and Capability advertisement in
RFC3392. For now, we only hande them upon receiving an OPEN message.

Signed-off-by: Benjamin Cama <benoar@dolka.fr>
12 years agoMerge remote-tracking branch 'upstream-repo/master' into upstream upstream/2.2.1
Benjamin Cama [Thu, 7 Jul 2011 10:47:12 +0000 (12:47 +0200)]
Merge remote-tracking branch 'upstream-repo/master' into upstream

12 years agoImported Debian patch 2.1.21-1.1 debian/2.1.21-1.1
Peter Eisentraut [Tue, 1 Apr 2008 23:58:55 +0000 (01:58 +0200)]
Imported Debian patch 2.1.21-1.1

12 years agoImported Upstream version 2.1.21 upstream/2.1.21
Benjamin Cama [Thu, 7 Jul 2011 10:45:05 +0000 (12:45 +0200)]
Imported Upstream version 2.1.21

13 years agoApply patch from Geoffrey D. Bennett to fix retry of control packets.
bodea [Thu, 20 Jan 2011 12:48:40 +0000 (12:48 +0000)]
Apply patch from Geoffrey D. Bennett to fix retry of control packets.

14 years agoApply patch from Cyril Elkaim to fix an issue with MacOS.
bodea [Fri, 26 Mar 2010 00:39:24 +0000 (00:39 +0000)]
Apply patch from Cyril Elkaim to fix an issue with MacOS.

14 years agoApply patch from Cyril Elkaim to fix an issue with MacOS.
bodea [Thu, 25 Mar 2010 05:24:23 +0000 (05:24 +0000)]
Apply patch from Cyril Elkaim to fix an issue with MacOS.

14 years agoApply patch from Michael O to avoid sending multiple CDNs.
bodea [Mon, 11 Jan 2010 12:16:20 +0000 (12:16 +0000)]
Apply patch from Michael O to avoid sending multiple CDNs.

14 years agoApply patch from Michael O to avoid sending multiple CDNs.
bodea [Sat, 9 Jan 2010 13:33:41 +0000 (13:33 +0000)]
Apply patch from Michael O to avoid sending multiple CDNs.

14 years agoApply MLPPP patch from Muhammad Tayseer Alquoatli, very belatedly, with
bodea [Tue, 8 Dec 2009 14:49:28 +0000 (14:49 +0000)]
Apply MLPPP patch from Muhammad Tayseer Alquoatli, very belatedly, with
thanks.  Changes:
- Handle session shutdown gracefully regarding leaving the bundle (bug that is
  caused when a all session leaves a bundle then another join)
- IP assignment is done only for the first session in the bundle (save IP
  waste for multiple MLPPP sessions)
- Route is being added only for the first session in the bundle (less routes
  on l2tpns system)
- Fix route deletion problem for MLPPP sessions (bug that caused when a
  session leaves a bundle)
- Uniformity of sequence number space satisfied (according to RFC1990)
- Fix reassembling fragmented packets and handling lost fragments (according
  to RFC 1990)
- FragmentatConnection to l2tpns.cvs.sourceforge.net closed by remote host.n
  across N session rather than two)
- Sequence numbers extraction mask has been corrected (bug in extracting
  sequence numbers)
- some clustering support fixes
- Upload/Download statistics has been corrected
- add "kill_timedout_sessions" config option

16 years agopropagate select error
bodea [Thu, 28 Jun 2007 07:22:50 +0000 (07:22 +0000)]
propagate select error

17 years agosimplify throttle logic
bodea [Thu, 25 Jan 2007 12:36:48 +0000 (12:36 +0000)]
simplify throttle logic

17 years agoremove float
bodea [Sun, 14 Jan 2007 04:07:52 +0000 (04:07 +0000)]
remove float

17 years agoadd "shutdown" and "reload" CLI commands (Daryl Tester)
bodea [Mon, 18 Dec 2006 12:08:28 +0000 (12:08 +0000)]
add "shutdown" and "reload" CLI commands (Daryl Tester)

17 years agodon't send interim records before session start (Daryl Tester)
bodea [Mon, 18 Dec 2006 12:05:36 +0000 (12:05 +0000)]
don't send interim records before session start (Daryl Tester)

17 years agoadd Makefile, cleanup for -std=c99
bodea [Mon, 18 Dec 2006 11:58:35 +0000 (11:58 +0000)]
add Makefile, cleanup for -std=c99

17 years agoadd CVE
bodea [Thu, 7 Dec 2006 05:46:16 +0000 (05:46 +0000)]
add CVE

17 years agominor cleanup
bodea [Tue, 5 Dec 2006 05:22:59 +0000 (05:22 +0000)]
minor cleanup

17 years agofix heartt pad
bodea [Mon, 4 Dec 2006 20:54:51 +0000 (20:54 +0000)]
fix heartt pad

17 years agoSecurity: Rhys Kidd identified a vulnerability in the handling of
bodea [Mon, 4 Dec 2006 20:50:02 +0000 (20:50 +0000)]
Security: Rhys Kidd identified a vulnerability in the handling of
heartbeat packets.  Drop oversize heartbeat packets.

17 years agofix comment
bodea [Mon, 23 Oct 2006 02:51:53 +0000 (02:51 +0000)]
fix comment

17 years agoallow DNS servers to be specified using either old or new vendor-specific Ascend...
bodea [Wed, 2 Aug 2006 14:17:30 +0000 (14:17 +0000)]
allow DNS servers to be specified using either old or new vendor-specific Ascend formats

17 years agocleanup clash between timeout and session_timout
bodea [Wed, 2 Aug 2006 13:35:39 +0000 (13:35 +0000)]
cleanup clash between timeout and session_timout

17 years agofix sign problem with reporting of unknown RADIUS VSAs
bodea [Wed, 2 Aug 2006 12:54:45 +0000 (12:54 +0000)]
fix sign problem with reporting of unknown RADIUS VSAs

17 years agofix log message
bodea [Mon, 17 Jul 2006 07:53:08 +0000 (07:53 +0000)]
fix log message

17 years agoresolve gcc 4.1 warning by changing ip_hash to a union
bodea [Sat, 1 Jul 2006 14:07:35 +0000 (14:07 +0000)]
resolve gcc 4.1 warning by changing ip_hash to a union

17 years agoadd radius_bind_{min,max} options
bodea [Sat, 1 Jul 2006 12:40:10 +0000 (12:40 +0000)]
add radius_bind_{min,max} options

17 years agoset acct-disconnect-cause from result code AVP if no disconnect cause AVP is present
bodea [Thu, 22 Jun 2006 15:30:29 +0000 (15:30 +0000)]
set acct-disconnect-cause from result code AVP if no disconnect cause AVP is present

17 years agoadd session/idle timeouts
bodea [Sun, 11 Jun 2006 12:46:18 +0000 (12:46 +0000)]
add session/idle timeouts

17 years agokludge around problem with Netgear DM602 authentication
bodea [Sat, 3 Jun 2006 08:16:46 +0000 (08:16 +0000)]
kludge around problem with Netgear DM602 authentication

17 years agoconvert manual.html to docbook
bodea [Tue, 23 May 2006 14:28:25 +0000 (14:28 +0000)]
convert manual.html to docbook

17 years agoremove unused param_packet_[tr]x structures
bodea [Mon, 22 May 2006 07:41:33 +0000 (07:41 +0000)]
remove unused param_packet_[tr]x structures

17 years agoremove defunct PLUGIN_PACKET_{RX,TX} constants
bodea [Thu, 18 May 2006 16:49:30 +0000 (16:49 +0000)]
remove defunct PLUGIN_PACKET_{RX,TX} constants

17 years agocorrect comment: throttle_speed rather than throttle_rate
bodea [Thu, 18 May 2006 14:40:31 +0000 (14:40 +0000)]
correct comment: throttle_speed rather than throttle_rate

17 years agouse %u when logging unsigned values
bodea [Tue, 16 May 2006 06:46:37 +0000 (06:46 +0000)]
use %u when logging unsigned values

17 years agono magic
bodea [Fri, 5 May 2006 08:10:18 +0000 (08:10 +0000)]
no magic

17 years agoupdate copyright years
bodea [Thu, 4 May 2006 01:01:56 +0000 (01:01 +0000)]
update copyright years

18 years ago*** empty log message ***
bodea [Fri, 28 Apr 2006 08:51:16 +0000 (08:51 +0000)]
*** empty log message ***

18 years agocosmetic changes
bodea [Fri, 28 Apr 2006 07:17:49 +0000 (07:17 +0000)]
cosmetic changes

18 years agoremove non-working setuid option
bodea [Thu, 27 Apr 2006 14:37:27 +0000 (14:37 +0000)]
remove non-working setuid option

18 years agoadd Multilink support from Khaled Al Hamwi
bodea [Thu, 27 Apr 2006 09:53:49 +0000 (09:53 +0000)]
add Multilink support from Khaled Al Hamwi

18 years agoapply patch from liran
bodea [Wed, 26 Apr 2006 01:15:43 +0000 (01:15 +0000)]
apply patch from liran

18 years agoinitial converion of liran's "Practical VPNs" to docbook
bodea [Mon, 24 Apr 2006 15:19:41 +0000 (15:19 +0000)]
initial converion of liran's "Practical VPNs" to docbook

18 years agoonly poll clifd if successfully bound
bodea [Sun, 23 Apr 2006 23:18:30 +0000 (23:18 +0000)]
only poll clifd if successfully bound

18 years agointerpret "local" direction correctly (as LAC) in disconnect AVPs release_2_1_18
bodea [Tue, 18 Apr 2006 06:00:46 +0000 (06:00 +0000)]
interpret "local" direction correctly (as LAC) in disconnect AVPs

18 years agodon't shutdown on TerminateReq, wait for CDN
bodea [Tue, 18 Apr 2006 06:00:07 +0000 (06:00 +0000)]
don't shutdown on TerminateReq, wait for CDN

18 years agoadd Acct-Terminate-Cause to RADIUS stop records release_2_1_17
bodea [Thu, 13 Apr 2006 11:14:35 +0000 (11:14 +0000)]
add Acct-Terminate-Cause to RADIUS stop records

18 years agoset source address for DAE responses
bodea [Wed, 5 Apr 2006 02:13:48 +0000 (02:13 +0000)]
set source address for DAE responses

18 years agoset IP_PKTINFO on controlfd for recvfromto
bodea [Wed, 5 Apr 2006 01:50:33 +0000 (01:50 +0000)]
set IP_PKTINFO on controlfd for recvfromto

18 years agosend nsctl responses back using the correct source address
bodea [Wed, 5 Apr 2006 01:45:57 +0000 (01:45 +0000)]
send nsctl responses back using the correct source address

18 years agofix IPCP length test to allow Terminate-Request (4 bytes)
bodea [Mon, 27 Mar 2006 03:01:08 +0000 (03:01 +0000)]
fix IPCP length test to allow Terminate-Request (4 bytes)

18 years agodecrease ip_conntrack_tcp_timeout_established to 5hrs release_2_1_16
bodea [Thu, 23 Feb 2006 01:07:23 +0000 (01:07 +0000)]
decrease ip_conntrack_tcp_timeout_established to 5hrs

18 years agoadditional length checks in processlcp
bodea [Fri, 17 Feb 2006 15:05:13 +0000 (15:05 +0000)]
additional length checks in processlcp
allow peer to request a new magic-number, or to disable magic-numbers

18 years agoavoid endless loop in processipcp, processipv6cp
bodea [Fri, 17 Feb 2006 14:35:53 +0000 (14:35 +0000)]
avoid endless loop in processipcp, processipv6cp

18 years agovalidate source of RADIUS packets
bodea [Fri, 17 Feb 2006 13:27:07 +0000 (13:27 +0000)]
validate source of RADIUS packets

18 years agoensure session changes from LCP ConfigReq/ConfigNak are sent to cluster
bodea [Thu, 19 Jan 2006 21:31:25 +0000 (21:31 +0000)]
ensure session changes from LCP ConfigReq/ConfigNak are sent to cluster

18 years agoreturn on failed lcp
bodea [Thu, 19 Jan 2006 21:06:39 +0000 (21:06 +0000)]
return on failed lcp

18 years agohandle LCP NAK of magic-number
bodea [Thu, 19 Jan 2006 21:00:24 +0000 (21:00 +0000)]
handle LCP NAK of magic-number

18 years agocorrect addition of single IP to pool
bodea [Thu, 19 Jan 2006 20:55:03 +0000 (20:55 +0000)]
correct addition of single IP to pool

18 years agosend configured magic-no in LCP EchoReq when LCP is opened
bodea [Tue, 20 Dec 2005 04:57:16 +0000 (04:57 +0000)]
send configured magic-no in LCP EchoReq when LCP is opened

18 years agoadd service-type/framed-protocol to RADIUS records release_2_1_15
bodea [Mon, 19 Dec 2005 06:18:13 +0000 (06:18 +0000)]
add service-type/framed-protocol to RADIUS records

18 years agofix session MRU, tunnel MTU
bodea [Mon, 19 Dec 2005 06:08:42 +0000 (06:08 +0000)]
fix session MRU, tunnel MTU

18 years agobreak LCP configure loop with shutdown
bodea [Thu, 15 Dec 2005 14:23:03 +0000 (14:23 +0000)]
break LCP configure loop with shutdown

18 years agoreduce logging of LCP EchoReply packets
bodea [Thu, 15 Dec 2005 14:18:16 +0000 (14:18 +0000)]
reduce logging of LCP EchoReply packets