forked from wifidog/wifidog-gateway
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathChangeLog
928 lines (744 loc) · 42 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
# $Id$
2015-02-20
* Add possibility to use a port range in wifidog
(https://github.com/wifidog/wifidog-gateway/commit/d1c3b596dcae6eb1f4980687a3633482613ca231)
2015-02-17
* Fix segfault when receiving invalid auth reply by Pawit Pornkitprasan
(https://github.com/wifidog/wifidog-gateway/pull/51)
2015-02-02
* Fix "Avoid deadlocks when the LOG_LEVEL is set to DEBUG" commit
(https://github.com/wifidog/wifidog-gateway/commit/8eb688ac4799512658f76ae8e81437ea0af2d9ff)
2015-01-26
* Fix typo: ping_thread pong --> Pong by Wendal Chen
(https://github.com/wifidog/wifidog-gateway/pull/46)
2015-01-18
* Add parse possiblemac to see if it is valid MAC address format by florida
(https://github.com/wifidog/wifidog-gateway/pull/42)
* Use fprintf instead of printf, fixes help when building with uclibc by Sannis
(https://github.com/wifidog/wifidog-gateway/pull/43)
2015-01-14
* Rename h_addr to addr due to legacy define by anton-povarov
(https://github.com/wifidog/wifidog-gateway/commit/f1b9d226af3911ea2cc99ae4d7730f60be74fb5f)
2014-12-24
* Avoid deadlocks when the LOG_LEVEL is set to DEBUG by sayuan
(https://github.com/wifidog/wifidog-gateway/pull/41)
2014-12-19
* fix annoying access denied when re-login by Zhao-gang
(https://github.com/wifidog/wifidog-gateway/pull/40)
2014-12-08
* Add IP to login script URL parameters by Sannis
(https://github.com/wifidog/wifidog-gateway/pull/36)
2014-10-05
* iptables_fw_init: fix memory leak by Pawit Pornkitprasan
(https://github.com/wifidog/wifidog-gateway/pull/28)
2014-08-31
* Fixed parsing process for AuthServer configurations by Kontinuation
(https://github.com/wifidog/wifidog-gateway/pull/24)
2014-05-13
* libhttpd crash on invalid HTTP headers (second part of the patch) by Benoit Grégoire
2013-08-21
* add support for DROP target for firewall rules by Champtar
2013-06-14
* add support for log, ulog target for firewall rules by jean-philippe menil and florida
2013-05-31
Add transparent proxy support (via iptables REDIRECT) by Champtar (inspired by FFW team)
2012-05-30
* Add many const by champtar
* Send http 302 instead of 307 by champtar
* Suppress all compilation warnings by champtar
* Add transparent proxy support (via iptables REDIRECT)
2012-08-28
* Fix #836, buffer overflow on long urls reported by Etienne CHAMPETIER
* Fix #835, segfaults reported by Etienne CHAMPETIER
2009-11-03
* Fix #625, does not display failure notice when quiet is set to true
* Fix #587, change index and rindex to strchr and strrchr
* Fix #548, trim leading spaces of the config file's options
2009-09-28 Benoit Grégoire <[email protected]>
* Fix #471, patch by wichert
2009-09-25 Geneviève Bastien <[email protected]>
* Release 20090925
* Update contrib Makefiles
2009-09-17 Geneviève Bastien <[email protected]>
* Documented #537
* Fixed #472, patch by Jean-Philippe Menil
* Fixed #515, using the gateway interface instead of the gateway id in the iptables chain
2009-07-02 Benoit Grégoire <[email protected]>
* Re-fix #505, #525 and fix #584, sorry about that.
2009-06-26 Benoit Grégoire <[email protected]>
* Fix #518
2009-02-27 Benoit Grégoire <[email protected]>
* Fix #488 and #493 (arp_get() in firewall.c couldn't parse lowercase mac's from /proc/net/arp) with patch from [email protected]. Otherwise wifidog wouldn't work with recent openwrt and Ubuntu.
* Fix #525
2008-09-30 Wichert Akkerman <[email protected]>
* Add exitcode to iptables failure errors.
* Include the gw_id in auth server updates so the client does not have
to keep track of it in a session.
* Include the gateway id in the firewall table names. Fixes ticket #466
* URL encode the token before transmitting (it was already decoded).
Fixes ticket #473
* Clean up compiler warnings.
* Security: strncpy may not NUL-terminate strings, so enforce this
ourselves. Fixes ticket #464
* Make it possible to protect the status page. Fixes ticket #463.
2008-07-20 Alexandre Carmel-Veilleux <[email protected]>
* src/util.c: Fixed #include bug that caused segfaults on newer Linux
2008-04-21 Alexandre Carmel-Veilleux <[email protected]>
* Integrated patch #452 from Wichert Akkerman <[email protected]>: Add const to function arguments in libhttpd to enforce more type checking and prevent certain class of problems.
* Compatiblity fix: Libhttpd assumes that type u_int is defined. Added an #ifndef/#include <sys/types.h> pair to httpd.h to make sure that assertion is true.
* Integrated patch #453 from Wichert Akkerman <[email protected]>: Add configurable html to wifidog error messages. This has been a long-requested feature.
2008-04-13 Benoit Grégoire <[email protected]>
* contrib/build-openwrt-kamikazeipk/wifidog/Makefile: Add iptables userspace dependencies
* Release 1.1.5
2008-03-24 Benoit Grégoire <[email protected]>
* Integrate with OpenWRT kamikaze build system
2007-11-01 Benoit Grégoire <[email protected]>
* Apply portability patches by David Young <[email protected]>. These have been reviewed, but not tested.
2007-10-18 Benoit Grégoire <[email protected]>
* fw_iptables.c: From Philippe April: reverted change made in 1241 so we properly remove the entry from mangle.WiFiDog_Incoming when kicking out users, it was affecting statistics
* Update doxygen.cfg.in for latest version and to fix path ambiguity during make dist.
* Release 1.1.4
2007-07-06 Benoit Grégoire <[email protected]>
* Makefile.am: Slight change in make ipk tagrget. It seems that sometimes builddir isn't defined. srcdir works just as well in this case.
2007-06-27 Benoit Grégoire <[email protected]>
* util.c: Fix while loop initialisation bug
* conf.h: Forgot to change the value of NUM_EXT_INTERFACE_DETECT_RETRY to actually make it wait forever.
* Remove hardcoded authserver paths. Can now be defined in the config file (auth server section).
* Centralise browser redirect code to simplify code
* Add manual logout URL, based in part on work by David Bird
* Release 1.1.3 final
2007-06-24 Benoit Grégoire <[email protected]>
* Close #321: Make the Gateway retry forever if it cannot find it's interface. You never know when someone may finally replug the network cable or something...
* Close #332: Apply patch from Laurent Marchal. biguphpc<AT>gmail<DOT>com
* fw_iptables.c: Fix error in iptables_fw_access(). Rules were created as ACCEPT instead of DROP
* firewall.c: Fix bug in fw_sync_with_authserver(). The traffic for the validation period of a user who validated his account while connected wouldn't get counted.
* doc/wifidog_firewall_map.dia: At long last, full documentation of the firewall. We would have avoided a lot of stupid mistakes if we produced that sooner.
* Release 1.1.3_rc1
2007-05-24 Benoit Grégoire <[email protected]>
* wdctl_thread.c: Fix #324, again. Credit goes to Medea, I misunderstood his instructons.
* From David Bird <[email protected]> libhttpd/: Fix #266 - don't process query string parameters and keep them in that request.path.
2007-05-18 Benoit Grégoire <[email protected]>
* wdctl_thread.c: Fix #324
2007-04-26 Benoit Grégoire <[email protected]>
* wifidog.conf: Improve comments and add examples of blocking access to the upstream LAN.
2007-04-26 Benoit Grégoire <[email protected]>
* conf.h: The DEFAULT_CHECKINTERVAL was 5 instead of 60 (as stated in the config file) which caused huge needless load on the auth servers, and needless ping traffic towards the clients if it wasn't manually set.
2007-04-09 Benoit Grégoire <[email protected]>
* Makefile.am: Slight path fix when using building make ipk. Tell me if you have trouble with this
2007-01-06 Benoit Grégoire <[email protected]>
* contrib/ Add contrib dir to collect the scripts and other code distributed with, but not really part of wifidog.
* Include the scripts used to build a ipkg on Openwrt RC6 and 0.9
* Modify the build system to finally be able to build wifidog directly from the wifidog directory using the same files
used to make the official .ipk, without having to copy ANYTHNG to the openwrt SDK.
At last, there is now a new target: make ipk make ipk OPENWRTSDK=path_to_openwrt_sdk
* ipk/ Removed the obsolete OpenWRT RC4 scripts
* README.openwrt: Update
* scripts/openwrt/ remove obsolete dir.
* contrib/dump_fw.sh: Convenience script for firewall debugging.
2007-01-06 Benoit Grégoire <[email protected]>
* Documentation update in the code
* Released 1.1.3_beta6
2006-10-26 Benoit Grégoire <[email protected]>
* src/conf.h: Fix #238 by using $sysconfdir to compute the default config-file location.
2006-10-08 Alexandre Carmel-Veilleux <[email protected]>
* Changed my email in a few files.
* Broken down some printf's on multiple lines.
* Added comments.
2006-09-14 Benoit Grégoire <[email protected]>
* src/util.c, src/conf.h: Fix autodectection of the External interface if not specified in the config file. If the interface (typically pppoe) wasn't yet fully up when wifidog starts, wifidog would stop every connection from going trough. It will now retry every second for up to two minutes, and then exit with a fatal error if it can't successfully detect it.
2006-02-23 Philippe April <[email protected]>
* src/fw_iptables.c:
* Changed order in the filter.FORWARD chain
* Added TCPMSS rule
* Fixed deleting the rules on shutdown
* Fixed wdctl reset problem
* Released 1.1.3_beta4
2006-02-06 Benoit Grégoire <[email protected]>
* src/fw_iptables.c: Fix deleting the rules on shutdown.
2006-01-31 Benoit Grégoire <[email protected]>
* Release 1.1.3_beta2
2006-01-31 Benoit Grégoire <[email protected]>
* src/fw_iptables.c: Add the global ruleset to the nat table to fix #65.
Add the table parameter to iptables_load_ruleset() and iptables_compile
* libhttpd/protocol.c: Fix pointer type mismatch
* src/conf.c,h: Remove deprecated option AuthServMaxTries (which was already ignored anyway.
2006-01-23 Benoit Grégoire <[email protected]>
* src/conf.h: Fix the value of DEFAULT_AUTHSERVPATH and completely wrong code comment. Not the default indicated in the config file and the define are in sync.
2006-01-17 Mina Naguib <[email protected]>
* Ingisgnificant cleanup of CVS artifacts after svn migration
2005-11-24 Philippe April <[email protected]>
* Bad idea
2005-11-01 Max Horvath <[email protected]>
* Added .project to .cvsignore
2005-11-01 Philippe April <[email protected]>
* Added OPTIONS section in wifidog-init (example: enable syslog)
2005-10-09 Philippe April <[email protected]>
* Changed html pages, added info to wdctl status
2005-10-07 Philippe April <[email protected]>
* Released 1.1.3_beta1
2005-10-03 Philippe April <[email protected]>
* libhttpd: Fixed two bugs parsing the GET query string making wifidog segfault
2005-09-24 Mina Naguib <[email protected]>
* New wdctl command "restart" which will get wifidog to restart itself
while preserving the existing clientlist. Perfect for 0-downtime
upgrading!
* safe.c: New safe_fork that croaks if the fork fails, also takes care of
closing some global file descriptors for the child
* debug.c: Now also logs the PID as part of every entry
* gateway.c: Handler for SIGCHLD now waitpid()s with WNOHANG flag to prevent deadlock
when the handler is called and another wait() or waitpid() is used
* util.c: execute() now uses waitpid() instead of wait() to reap only the child
it fork/executed
* Extra debugging entries throughout code
2005-09-24 Mina Naguib <[email protected]>
* conf.c: Pre-emptive bugfix - harsh lockdown of parsing trusted MAC
addresses from config file
2005-09-24 Philippe April <[email protected]>
* (finally) Added {Saul Albert,Jo Walsh,Schuyler}'s patch (thank you!) to send
the GW interface's mac address as the node_id if no node_id is specified. It allows
the use of generic configuration files without the need to hardcode the
node_id in.
* Added TrustedMACList configuration variable which allows specifying
MAC addresses which are allowed to go through without authentication.
* Updated OpenWrt instructions.
2005-09-08 Philippe April <[email protected]>
* Added compile instructions and installation for OpenWrt Whiterussian-rc2
* Released 1.1.2
2005-05-30 Mina Naguib <[email protected]>
* New wdctl command "restart" which will get wifidog to restart itself while preserving the existing clientlist. Perfect for 0-downtime upgrading!
* safe.c: New safe_fork that croaks if the fork fails, also takes care of closing some global file descriptors for the child
* debug.c: Now also logs the PID as part of every entry
* gateway.c: Handler for SIGCHLD now waitpid()s with WNOHANG flag to prevent deadlock when the handler is called and another wait() or waitpid() is used
* util.c: execute() now uses waitpid() instead of wait() to reap only the child it fork/executed
* Extra debugging entries throughout code
2005-05-24 Mina Naguib <[email protected]>
* wdctl.c: Minor bugfix pointed out by David Vincelli: When an invalid
command is given to wdctl, the error message showed "Invalid command:
wdctl" instead of the actual command supplied
2005-05-23 Philippe April <[email protected]>
* Released 1.1.2_pre1
2005-05-23 Mina Naguib <[email protected]>
* fw_uptables.c: When appending call to chain WiFiDog_Outgoing from
nat.prerouting, add it via -A (at end) instead of -I 1 (at beginning) to
allow for existing nat forwarding.
2005-05-16 Mina Naguib <[email protected]>
* centralserver.c: read()s from central server in auth_server_request() are
now timed-out (via select). This is hopefully a bugfix to the
thread-freezing problem.
2005-05-06 Mina Naguib <[email protected]>
* Bugfix non-RFC compliant HTTP requests using \n instead of \r\n as line
terminations as per email from [email protected]
2005-04-28 Philippe April <[email protected]>
* Released 1.1.2_beta2
2005-04-28 Mina Naguib <[email protected]>
* wifidog.conf: Make the default ruleset for validating users = allow all
(except sending SMTP)
2005-04-20 Philippe April <[email protected]>
* fw_iptables.c: Insert ourselves at the end of filter.FORWARD instead of
at the beginning since important FW instructions are located there on the
WRT54Gs when used with some DSL providers and we never execute them
otherwise.
* Released 1.1.2_beta1
2005-04-03 Philippe April <[email protected]>
* Fixed issue with FAQ
* ipkg/rules: If autogen.sh doesn't exist, it's ok. 'configure' will.
2005-04-01 Philippe April <[email protected]>
* Duplicated auth server list in NAT table to fix the issue
of using an auth server on port 80, since port 80 was being systematically
redirected to 2060 otherwise.
* Released 1.1.1
2005-03-29 Mina Naguib <[email protected]>
* Added FAQ document copied from wiki
2005-03-22 Philippe April <[email protected]>
* Released 1.1.0
2005-03-20 Mina Naguib <[email protected]>
* More verbose debugging output
2005-03-12 Mina Naguib <[email protected]>
* More debugging output
* Document ugly hack involving tid_fw_thread
* SIGPIPE now ignored (as it's comment said) instead of being sent to the
handler for SIGCHLD
* Bugfix firewall destruction not happening from termination handler - had
to move explicit thread kills after, not before, firewall destruction
2005-03-11 Mina Naguib <[email protected]>
* If external interface was unspecified in the conf file, try to determine
it from the default route
* If external interface is known, specify it in the trigger rule in
nat.PREROUTING to prevent the rule from matching traffic inbound to the
router itself. This should fix the issue raised by Philippe and Pascal on
the mailing list
* Bugfix: UNDO ABOVE 2 ITEMS. Aparently you cannot use the "-o" iptables
option in nat.PREROUTING which makes knowing external_interface useless
* Added new chain in nat.PREROUTING that explicitly allows all traffic to
the router's internal IP from the internal interface, effectively
addressing the same above problem
2005-03-07 Mina Naguib <[email protected]>
* auth.c: Got rid of legacy _http_output and _http_redirect - replaced them
with libhttpd functions and http_wifidog_header/http_wifidog_footer
* auth.c: When re-directing to auth server now respects SSL setting instead
of always http+port 80
* auth.c: Better debugging output of what it's doing when it acts on auth
server response
* A little bit more care with buffers and their sizes
* Minor whitespace tweaking and a couple of internal doc typo fixes
2005-03-06 Mina Naguib <[email protected]>
* Check return values of pthread_create
* Internal documentation touch-ups
* auth.c: Bugfix invalid http header sent by _http_output
* Bugfix traffic counter read from iptables as long int instead of long
long int
* Minor insignificant code touch-ups:
* Replace pthread_mutex_lock/unlock calls with appropriate
LOCK_FOO/UNLOCK_FOO macros for consistency
* Lock first before using some variables, not after
* Indentation adjustments
2005-03-04 Mina Naguib <[email protected]>
* Bugfix huge uptime pointed out to be by Philippe - was caused when the
date is set (with ntpclient for example) after wifidog starts
* Beautified "Uh oh!" apology screens and redirection screen
2005-03-02 Alexandre Carmel-Veilleux <[email protected]>
* Ifdef'd out the bits that are Linux specific if __linux__ is not
defined.
2005-03-01 Mina Naguib <[email protected]>
* Minor visual tweaks to the web interface
2005-03-01 Philippe April <[email protected]>
* Tagged v1_1_0_beta3
2005-02-28 Mina Naguib <[email protected]>
* Do not update the last_updated field on incoming traffic - update it on
outgoing traffic only. This should be a much more reliable indication of
client no longer being there
* WifiDog status is now viewable with a web browser at
http://ip:port/wifidog/status
* Added new web hook for http://ip:port/wifidog
* Beautified web interface at http://ip:port/wifidog/*
2005-02-24 Mina Naguib <[email protected]>
* auth_server_request now returns AUTH_ERROR on error instead of AUTH_VALIDATION_FAILED
* centralserver.c: Fix typo (was =+, made it +=) that made the response
from the auth server corrupted in memory if the entire response would not
fit in 1 packet and retrieved with 1 read() call
* Better logging of details and calling of mark_* (auth+online/offline)
2005-02-22 Philippe April <[email protected]>
* Tagged v1_1_0_beta2
2005-02-20 Mina Naguib <[email protected]>
* New safe.c with safe_malloc, safe_strdup, safe_asprintf and
safe_vasprintf with propper logging and exit when error. Replaced all
instances of original with safe versions in all files
* Fix memory leak in iptables_fw_counters_update
* Partial merge from CaptiveDNS branch: Consolidated much of the networking
calls to the auth servers into a magical function called connect_auth_server()
that's responsible for dns lookup, connecting, marking servers bad, marking
online/auth_online, and refreshing the firewall rules.
* Partial merge from CaptiveDNS branch: Added new functions mark_auth_online(),
mark_auth_offline() and is_auth_online() - similar in nature to is_online()
etc. except tailored to decide on auth servers status - currently being called by
connect_auth_server()
* Partial merge from CaptiveDNS branch: Different apology in 404 handler
depending on whether internet is down or just auth server is down
* Partial merge from CaptiveDNS branch: wdctl status now shows status of
is_online and is_auth_online
* Fixed several inconsistencies regarding the parity and size of
incoming/outgoing counters. Standardized on "unsigned long long int" in
declarations and *printf/*scanf formats
2005-02-16 Philippe April <[email protected]>
* ipkg/rules - When we clean, forgot to delete ipkg-build-stamp
2005-02-15 Mina Naguib <[email protected]>
* Now also reports wifidog_uptime when it pings the server, as well as
shows it in wdctl status
2005-02-13 Mina Naguib <[email protected]>
* Completely re-did the iptables rules. Most of the rules are now in the
filter table instead of the nat table. Also DROPs are now replaced with
REJECTs to help tell the user connection refused instead of endless pauses
* Bugfix: Traffic from client to router was counted twice in the "outgoing"
bytecount since it increased both counters in mangle.* and filter.* - Got
rid of TABLE_WIFIDOG_WIFI_TO_GW completely since it's unneeded
2005-02-12 Mina Naguib <[email protected]>
* Stricter format rules for all *scan* functions hunting for IPs and MAC addresses
* fw_iptables.c: Make sure scanned IP address is a valid IP address
* firewall.c: Fix memory leak in arp_get
* libhttpd/protocol.c: Abort connection if read non-ascii from client. This
is often a telltale sign of a program such as skype using port 80 for
non-http requests - this therefore ends the thread as early as possible
instead of having it lay around for a while trying to get a valid http
request and taking up resources
* ping_thread.c: When pinging auth server now also sends sys_uptime, sys_memfree
and sys_load
* -v commandline option now shows wifidog version
2005-02-11 Philippe April <[email protected]>
* Tagged v1_1_0_beta1
2005-02-11 Philippe April <[email protected]>
* Fixed a bug in counting the traffic between client and gateway
* Alpha8
2005-02-04 Mina Naguib <[email protected]>
* Partially bugfix apology when offline
* ipkg/rules: More tweaking to make it build nicely with recent openwrt
buildroots
2005-02-03 Mina Naguib <[email protected]>
* Keep track of last times we successfully & unsuccessfully spoke to the
auth server/used DNS. Then, if we know we're not online, show a little
apology to the user instead of re-directing them to the auth server.
* ipkg/rules: Added some extra version detection to auto-detect versions
of kernel, iptables and ipkg-utils instead of having them hardcoded. This
makes creating ipkg's work with different OpenWRT releases
* fw_iptables.c: Fixed memory leak caused by not freeing return from
iptables_compile in iptables_load_ruleset
* http.c: Deleted unused call to client_list_find
* http.c: /about URL now shows wifidog version
* Cosmetic typo fixes
2005-02-03 Philippe April <[email protected]>
* Ping the users everytime we check their counters, that way we keep them
alive
* Optional ExternalInterface
* Optional GatewayAddress (we discover it. finally.)
* We check for the traffic from the clients to the firewall, to catch the
traffic the icmp ping is generating
* Fixed bug where we were doing the opposite of what desired when checking if authentication server was alive
* Bumped to alpha7
2005-01-23 Philippe April <[email protected]>
* wdctl status will return the auth servers in the linked list
* We'll now forward to the auth server to display the used-to-be-ugly
messages like "go ahead and validate your account you have 15 minutes"
* Bumped to alpha6
2005-01-06 Philippe April <[email protected]>
* fw_iptables.c: Changed REJECT to DROP for the end of the table Unknown,
REJECT doesn't seem to be available in the NAT table.
* fw_iptables.c: Indented things
* fw_iptables.c Fix: Created the authservers table at the beginning and destroy
at exit time only to avoid recreating it everytime
* Bumped to alpha5
2005-01-05 Philippe April <[email protected]>
* Typo, fixed some spaces (mostly esthetic)
* Bumped to alpha4
2004-12-19 Alexandre Carmel-Veilleux <[email protected]>
* src/fw_iptables.c: Tweak of auth_server firewall rule setting
code. (and promptly undone, fixing the cause is better then
fixing the symptom)
* src/conf.c: NULL-fill auth_server struct so that
auth_server->last_ip always equals NULL when first filled.
2004-12-16 Benoit Grégoire <[email protected]>
* src/fw_iptables.c: Display iptables command that is run in debug mode.
2004-12-07 Benoit Grégoire <[email protected]>
* src/firewall.c: Fix reversed incoming and outgoing connections in statistics code
* bump version to alpha3
2004-11-29 Alexandre Carmel-Veilleux <[email protected]>
* wifidog.conf: Fixed firewall rule bug.
* src/fw_iptables.c: Unknown user default block rule not "REJECT"
instead of "DROP"
2004-11-23 Alexandre Carmel-Veilleux <[email protected]>
* src/conf.c: Fixed a NULL pointer dereference in get_ruleset().
2004-11-22 Alexandre Carmel-Veilleux <[email protected]>
* libhttpd/api.c: Fix leak in HttpdEndRequest().
* src/ping_thread.c: Fix auth_server IP change code with latest
from previous branch.
* src/conf.h: Same as above.
* src/fw_iptables.c: Same as above.
* src/conf.[ch]: Firewall rule set parsing code.
* wifidog.conf: Default firewall rule set defined.
* src/fw_iptables.[ch]: Firewall rule set enacting code.
* configure.in: bumped version to 1.1.0-alpha2
2004-11-18 Benoit Grégoire <[email protected]>
* src/ping_thread.c: Merge phil's bug fixes from stable branch
* ipkg/rules: Merge phil's bug fixes from stable branch
* configure.in: Set version to 1.1.0alpha
2004-11-18 Alexandre Carmel-Veilleux <[email protected]>
* src/fw_iptables.[ch]: Merged in Phil's patch.
* src/*: Added ping_thread hooks to reset authserver table in the
firewall if it notices the auth_servers changing IPs.
2004-11-17 Alexandre Carmel-Veilleux <[email protected]>
* libhttpd/*: libhttpd has been taken behind the shed and shot in
the back of the head. The replacement separates the request struct
from the server struct. It's thread safe if none of OUR threads
write to server.
* src/*: All the changes to handle the new libhttpd and also to
move over to a worker thread system. http_callback_auth() no
longer spawns a thread either.
* *: this update preceded by a cvs tag PRE_NEW_LIBHTTPD.
* *: You want to check the mailing list archive also.
2004-11-10 Alexandre Carmel-Veilleux <[email protected]>
* libhttpd/protocol.c: select() based timeout.
2004-10-31 Alexandre Carmel-Veilleux <[email protected]>
* configure.in: bumped version number to "1.0.2-pre1" since we
already have ile sans fil hot spots advertising "1.0.1".
2004-10-30 Alexandre Carmel-Veilleux <[email protected]>
* src/ping_thread.c: asynch read(). fixed bug in byte counting.
2004-10-29 Philippe April <[email protected]>
* ipkg/rules: added conffiles so it does not overwrite config files
2004-10-29 Alexandre Carmel-Veilleux <[email protected]>
* src/ping_thread.c: Much new debugging information
* multiple files: Logging for all mutexes
2004-10-28 Philippe April <[email protected]>
* ipkg/rules: building ipkg-tools before packaging
2004-10-28 Alexandre Carmel-Veilleux <[email protected]>
* multiple files: Implemented a FirewallRule config command, it
doesn't actually do anything yet.
* libhttpd: #if 0'd out lots of request parsing code.
* libhttpd: changed URL parsing.
2004-10-27 Philippe April <[email protected]>
* ipkg/rules: removed --build=mipsel from ./configure
2004-10-26 Philippe April <[email protected]>
* ipkg/rules: sed -i is not standard, did a workaround.
* ipkg/rules: openwrt's buildroot has changed, modified ipkg
accordingly, please read README.openwrt
2004-10-22 Alexandre Carmel-Veilleux <[email protected]>
* src/various: Added wd_gethostbyname, a thread-safe (serialized)
version of gethostbyname.
2004-10-15 Alexandre Carmel-Veilleux <[email protected]>
* src/auth.c: Fixed hard coded port.
2004-10-09 Alexandre Carmel-Veilleux <[email protected]>
* src/gateway.c: More logging on termination_handler.
2004-10-08 Alexandre Carmel-Veilleux <[email protected]>
* src/wdctl_thread.c: Fix wdctl_status to return all connected
users.
2004-10-07 Alexandre Carmel-Veilleux <[email protected]>
* src/conf.c: Fixed mark_auth_server_bad() for the case where there
is only one auth server.
* src/ping_thread.c: Added extra debugging.
* src/ping_thread.c: Fixed file descriptor leak.
* src/centralserver.c: Fixed many file descriptor leaks.
* src/centralserver.c: Failure of read() no longer fatal.
* src/centralserver.c: In case of failure, return from
auth_server_request() is no longer an undefined authresponse.
* src/util.c: Fixed typo in logging.
* src/wdctl_thread.c: Added logging when socket path is too long.
* src/debug.c: Debug now logs the time of an event.
2004-08-30 Alexandre Carmel-Veilleux <[email protected]>
* wifidog.conf: Corrected an example
* README.openwrt: Typo fixed, editorial changes
* ChangeLog: Benoit's last update entry was set in the future ;-).
* All over src/: Compiled with -Wall and fixed all nagging.
2004-08-30 Benoit Grégoire <[email protected]>
* Makefile.am: Add rpm target
* wifidog.spec.in: Rework spec file. Now works and include the init script
* ipkg/rules: Deal with the incomplete init.d system of the OpenWrt. Install scripts/init.d/wifidog as /usr/bin/wifidog-init, and call wifidog-init start from S65wifidog.
* scripts/openwrt/S65wifidog: Add file
* scripts/init.d/wifidog: Fix performance and protability problem. Make it chkconfig compliant. Test that chkconfig --add wifidog works (at least on mandrake)
* src/wdctl.c: Change some message, make sure wdctl return 0 unless there is an error.
2004-08-30 Benoit Grégoire <[email protected]>
* README.openwrt: Documentation update
* Makefile.am: Make a ipkg target to ease WRT54G installation
* ipkg/rules: Add wdctl and the init.d script.
* Add BUILDROOT variable to the build system so we can use it when needed
* src/ping_thread.c: Have the server ping immediately on boot. Note that this will only help if the second server responds. The logic of the ping itself should be changed so it iterates in the list until it finds one that responds or exausts the list
* wifidog.conf: Add more doc, and (most) of ISF's default config in comments.
* Bump version in anticipation for release
2004-08-29 Guillaume Beaudoin <[email protected]>
* wifidog.spec.in: Changed prefix to match scripts/init.d/wifidog.
* debian/rules: Configuration and init.d file added.
* debian/control: Description and Depends field changed.
* Makefile.am: Added scripts directory and ipkg/rules file.
2004-08-29 Pascal Leclerc <[email protected]>
* scripts/init.d/wifidog: Startup/shutdown script for Wifidog deamon
2004-08-29 Guillaume Beaudoin <[email protected]>
* wifidog.spec.in: Must be in decending chronological order.
2004-08-29 Guillaume Beaudoin <[email protected]>
* wifidog.spec.in: Remove some leftover from libOFX.
* Makefile.am: Include debian/* files.
* We should now be able to package .deb and .rpm from dist.
2004-08-27 Benoit Grégoire <[email protected]>
* README.openwrt,src/conf.c,h: Documentation update
* src/gateway.c, src/ping_thread.c, src/wdctl.c, src/wdctl_thread.c: Fix linking problems related to errno.h and extern int errno
2004-08-26 Pascal Leclerc <[email protected]>
* Makefile.am: Remove phpauth from EXTRA_DIST
2004-08-25 Alexandre Carmel-Veilleux <[email protected]>
* src/auth.c: Path as changed in 1.26 was preceded by a /, the path already contains a / so it would yield http://host//path/
2004-08-25 Benoit Grégoire <[email protected]>
* src/auth.c: Remove hardcoded path.
2004-08-23 Benoit Grégoire <[email protected]>
* src/ping_thread.c: Send the gateway id to the central server during ping, so the server know which gateway checked in, and then knows for sure that it is up (well, once the server implements it...).
2004-08-23 Benoit Grégoire <[email protected]>
* src/centralserver.c: Fix path for auth by appending /auth/ to auth_server->authserv_path. Wifidog works again.
2004-08-20 Alexandre Carmel-Veilleux <[email protected]>
* Debug output of all HTTP transactions and their responses.
* Changed ipkg to use wifidog.conf from the base tree
* Send url to central server for link back out
2004-08-19 Alexandre Carmel-Veilleux <[email protected]>
* Sort of fixed the hanging thread (with an explicit thread kill)
* Fixed ping code
2004-08-13 Alexandre Carmel-Veilleux <[email protected]>
* All Auth Server configuration now handled by the "AuthServer"
directive.
* The "AuthServer" directive is now multi line.
2004-08-11 Alexandre Carmel-Veilleux <[email protected]>
* Added code to do heartbeat.
* Changed AuthServer yet again.
2004-08-09 Alexandre Carmel-Veilleux <[email protected]>
* WiFiDog now can read multiple auth servers in its config file.
* Added functions to handle the auth servers list.
* WiFiDog can failover between servers for its internal requests.
* Firewall sets rules for all auth servers.
2004-08-06 Alexandre Carmel-Veilleux <[email protected]>
* AuthservPath no longer mandatory in config file.
2004-08-04 Philippe April <[email protected]>
* Renamed iptables.[ch] to fw_iptables.[ch]
2004-08-03 Alexandre Carmel-Veilleux <[email protected]>
* Fixed broken sockaddr_un usage in wdctl.c and wdctl_thread.c
2004-08-01 Benoit Grégoire <[email protected]>
* Delete everything in phpauth, it will now live in it's own module (wifidog-auth)
2004-08-01 Alexandre Carmel-Veilleux <[email protected]>
* Added wdctl facility
2004-07-21 Philippe April <[email protected]>
* Cleaned up the ipkg makefile
* Added makefile to build on Debian
2004-07-19 Alexandre Carmel-Veilleux <[email protected]>
* Build script for OpenWRT ipkg
2004-07-06 Alexandre Carmel-Veilleux <[email protected]>
* Added cache control to default error message returned.
2004-07-05 Philippe April <[email protected]>
* Fixed an endless loop in client_list_delete
2004-06-10 Alexandre Carmel-Veilleux <[email protected]>
* Added debugging to libhttpd so that httpdGetConnection() traces
its execution into ./httpdGetConnection.log. This should be removed
once it's no longer needed or put within #ifdef DEBUG's.
2004-06-01 Philippe April <[email protected]>
* Sending User-Agent header to central server
2004-05-28 Philippe April <[email protected]>
* Fixed bugs implemented after major changes
2004-05-27 Benoit Grégoire <[email protected]>
* Massive Doxygen update in all files. IMPORTANT: The new convention is: @brief in the .h, long description and parameters in the .c
* Cleaned up some more issues in my notes taken at the formal review
* client_list.c,h: Make client_list_free_node() private, define and document client_list_mutex here
* config.c: Start the hunt for evil globals: Get rid of the config global
* doc/doxygen.cfg.in: Enable generation of internal doc, a few other tweaks
* Documentation now generates a TODO list and DEPRECATED list, please look at them
2004-05-27 Alexandre Carmel-Veilleux <[email protected]>
* Cleaned up all the issues brought forward in the code review
on 2004-05-26 at Benoit's. There are to many changes to list
individually.
2004-05-15 Philippe April <[email protected]>
* Commented out cookie handling in libhttpd because it segfaults if
you pass a particular formatting/buggy one
2004-05-14 Philippe April <[email protected]>
* Fixed crash when receiving SIGPIPE signal with write() would fail
2004-05-13 Philippe April <[email protected]>
* Advertise to the central server when we logged out a user
2004-05-12 Philippe April <[email protected]>
* Sending a "stage" when doing authentication for the server
to be able to know if it's a login, or just a counters update.
2004-05-11 Philippe April <[email protected]>
* Now tracking the hotspot id and ip in database
2004-05-07 Philippe April <[email protected]>
* Now we store both incoming and outgoing counters on server
and expire if no activity at all on both
* Changed the structure of nodes a little
2004-05-07 Philippe April <[email protected]>
* New parameter ExternalInterface
* Made possible to count inbound traffic by inserting new rules
2004-05-07 Philippe April <[email protected]>
* Cleaned up common.h from files
2004-05-07 Philippe April <[email protected]>
* Made iptables' tables DEFINEs instead of being hardcoded
2004-05-07 Philippe April <[email protected]>
* Fixed typo
2004-05-06 Philippe April <[email protected]>
* Cleanups and standardized things
2004-05-06 Philippe April <[email protected]>
* Cleanups in fw_counter function
2004-05-05 Philippe April <[email protected]>
* Calling iptables directly instead of using shell scripts
for fw_init, fw_destroy and fw_allow/fw_deny
* Removed shell script for fw.counters
* Fixed memory leaks
* Moved most of the iptables-specific (all but the counters)
to iptables.c to modularize a bit more
* Hack to allow deciding if we want FW calls' messages quiet or not
2004-04-23 Philippe April <[email protected]>
* Fixed a debug line
2004-04-22 Philippe April <[email protected]>
* Major changes, cleaned up code
* Changed the way firewall tags traffic
2004-04-21 Philippe April <[email protected]>
* Changed fw.destroy so it cleans up more in a while loop
2004-04-20 Alexandre Carmel-Veilleux <[email protected]>
* fixed expiration time
2004-04-20 Philippe April <[email protected]>
* A lot of changes regarding debugging facilities and added logging
to syslog
* Removed possibility to specify port on command line
2004-04-19 Philippe April <[email protected]>
* Changed some debugging severity
2004-04-19 Benoit Grégoire <[email protected]>
* Properly integrate libhttpd into the source tree ;) Note that this will create a proper system wide shared library for libghttpd. Still to be done: 1- Store Mina's patch somewhere, in case we want to upgrade libhttpd. 2-Add configure option not to build httpd, and use an already installed one.
2004-04-18 Alexandre Carmel-Veilleux <[email protected]>
* Fixed pthread_cond_timedwait. The mutex needed to be locked as
per the POSIX spec, yet Linux or Mac OS X don't care...
* Fixed the double SIGTERM handler on Linux...
2004-04-17 Alexandre Carmel-Veilleux <[email protected]>
* Added work around for uClibc bug in auth.c
2004-04-17 Philippe April <[email protected]>
* Fixed firewall scripts to make them standard and some firewall functions
2004-04-17 Alexandre Carmel-Veilleux <[email protected]>
* Updated documentation in firewall.c
2004-04-17 Philippe April <[email protected]>
* Fixed path returning to gateway in phpauth/login/index.php
2004-04-16 Alexandre Carmel-Veilleux <[email protected]>
* Merged in libhttpd into the source tree
2004-04-16 Philippe April <[email protected]>
* Fixed CRLF/formatting in phpauth/login/index.php
* Added some documentation for firewall.c, commandline.c
* Removed an unnecessary line dist_sysconf_DATA from Makefile.am
2004-04-15 Alexandre Carmel-Veilleux <[email protected]>
* Changed the locking mechanism, now all access to t_node * structs
are properly protected.
2004-04-15 Alexandre Carmel-Veilleux <[email protected]>
* Connection now closed if counter hasn't change for one full
period.
2004-04-14 Philippe April <[email protected]>
* Fixed shell script hardcoded interface
2004-04-14 Alexandre Carmel-Veilleux <[email protected]>
* Existing IPs are logged off when they're authenticated again.
2004-04-14 Alexandre Carmel-Veilleux <[email protected]>
* Fixed clean up so it happens at the right time.
2004-04-14 Alexandre Carmel-Veilleux <[email protected]>
* Major retooling of insert_userclass(), fixed seg fault.
* The program now works as advertised.
2004-04-14 Alexandre Carmel-Veilleux <[email protected]>
* Switched to threads. Alpha quality build, at best
2004-04-12 Alexandre Carmel-Veilleux <[email protected]>
* Changed child return value handling, again. Now it's actually
using the real value instead of the flag.
* The http.c authentication code now closes the http connection
from the user.
2004-04-11 Alexandre Carmel-Veilleux <[email protected]>
* Added extra debugging information.
* Fixed return value handling in debugging calls.
2004-04-11 Alexandre Carmel-Veilleux <[email protected]>
* Removed duplicates signal handling hooks
* Additional comments in SIGCHLD handler
2004-04-11 Alexandre Carmel-Veilleux <[email protected]>
* Node find if's expressions changed
2004-04-11 Alexandre Carmel-Veilleux <[email protected]>
* SIGCHLD Handler initializaed outside of deamon mode now.
2004-04-11 Alexandre Carmel-Veilleux <[email protected]>
* Very large modification. The entire architecture has been reworked
so that authentications to the central server are performed in a
fork()'d child process and the exit code from that child is then
used to set the User Class of the connection.
* The UserClasses (global definitions) and Rights (per connection)
have been integrated.
2004-03-16 Mina Naguib <[email protected]>
* Changed HTTP server tasks to be handled by libhttpd - merged
incorporate_libhttpd branch
2004-03-13 Philippe April <[email protected]>
* Modified the way firewall scripts are called so we can configure
them in the config file (a bit more modular than it was)
* Added simple linked list to keep track of clients and to
keep a counter of the utilization and send it to the auth server
* Fixed CRLF/formatting in phpauth/auth/index.php
* Hacked phpauth/auth/index.php to handle very basic utilization tracking
2004-03-12 Philippe April <[email protected]>
* Changed all perror()s into debug()s and added errno.h to common.h
2004-03-10 Philippe April <[email protected]>
* Small fix to firewall.c so we don't define variables after
the function has started (so it builds on gcc-2.95)
2004-03-09 Philippe April <[email protected]>
* Major changes, not forking anymore for new connections, now using
select() instead. It will allow us to efficiently use a linked list to track
users and other things. It introduces some bugs and design issues but will
be better in the end.
2004-03-09 Philippe April <[email protected]>
* Small fix in the default.php login page
* exit() where the program was supposed to exit but wasn't when the
firewall could not be setup
2004-03-09 Alexandre Carmel-Veilleux <[email protected]>
* Tiny change to increase cross-platform compatibility. It can now build on OS X and it comes close to building on my old BSD box.
2004-03-08 Benoit Grégoire <[email protected]>
* Initial CVS import. Integrate a standrad GNU build system and Doxygen to the build process. Add Doxygen and CVS headers, .cvsignores, etc. Note that the imported code is Philippe April (papril777 at yahoo.com)'s work. Tell me if I forgot anything. Please note that the paths in the src/fw* scripts are still hardcoded. Don't forget to update the ChangeLog file every commit and add doxygen comments to your code. Happy hacking.