Commit graph

82 commits

Author SHA1 Message Date
Erik Ekman
9e265625a1 Fix authentication bypass bug
The client could bypass the password check by continuing after getting error
from the server and guessing the network parameters. The server would still
accept the rest of the setup and also network traffic.

Add checks for normal and raw mode that user has authenticated before allowing
any other communication.

Problem found by Oscar Reparaz.

Backported to iodine 0.6 branch.
2014-06-17 18:59:06 +02:00
Erik Ekman
859b019d65 Update version to 0.6.0-rc1 2010-02-13 14:38:32 +00:00
Erik Ekman
dc140c8b24 Fix #86, patch from jsbid1 gmail.com 2010-02-08 16:09:45 +00:00
Erik Ekman
4d42dbd879 #82, switch to gethostbyname() for win32 support 2009-09-26 09:42:32 +00:00
Erik Ekman
b23f08773a #82 update docs 2009-09-25 22:11:18 +00:00
Erik Ekman
c9debed450 #76 Update changelog 2009-09-20 21:10:48 +00:00
Erik Ekman
1e72e7cc78 Update changelog after #75 2009-09-20 16:05:37 +00:00
Erik Ekman
5c64a44d5e Updated changelog after #79 2009-09-19 22:19:09 +00:00
Erik Ekman
bcd7c1c15c #78, print server tunnel ip 2009-09-19 08:24:59 +00:00
Erik Ekman
dfd74623a6 #77, get password from env variable 2009-09-19 08:09:12 +00:00
Erik Ekman
482e50222f Updated changelog 2009-08-15 23:52:47 +00:00
Erik Ekman
021a6b5fd5 Updated docs 2009-08-15 22:02:00 +00:00
Erik Ekman
7f76ce7ce4 Update changelog and proto docs 2009-08-15 13:10:21 +00:00
Erik Ekman
6033e2db91 Update changelog 2009-07-23 07:12:37 +00:00
Erik Ekman
f1f7faee70 Update changelog 2009-07-16 08:46:21 +00:00
Erik Ekman
9e268419e7 Add support for applying SELinux context 2009-06-24 17:28:13 +00:00
Erik Ekman
35b7f36bcc update changelog 2009-06-24 16:40:54 +00:00
Erik Ekman
5631670e15 Any number of TAP32 interfaces supported, use -d to choose. #46 2009-06-14 20:12:35 +00:00
Erik Ekman
0b695e5a96 Fixed #47, support any TAP device name 2009-06-14 19:50:35 +00:00
Erik Ekman
f517ce42d2 Updated changelog 2009-06-11 17:55:47 +00:00
Erik Ekman
ae8f7ca321 new release 2009-06-01 18:34:50 +00:00
Erik Ekman
aa0c6a915e updated changelog 2009-05-19 06:08:37 +00:00
Erik Ekman
4a517b61db Update changelog 2009-05-14 18:37:38 +00:00
Erik Ekman
949b412127 Update changelog after release 2009-03-21 13:12:12 +00:00
Erik Ekman
bd49866e29 #53 Support TAP32 version 0901 as well 2009-03-21 12:51:59 +00:00
Erik Ekman
4c7f66f514 Set interface MTU to 1200.
1188 is the uncompressed DNS reply payload size that gets through
unfragmented on Ethernet.
2009-03-07 00:32:14 +00:00
Erik Ekman
21808e708d Increase default mtu to 1500 2009-03-04 21:27:48 +00:00
Erik Ekman
cf2551cd8c #44 add note about -P argument, update changelog 2009-02-22 16:46:50 +00:00
Erik Ekman
a3cea72400 #45: Use IpHelper to get DNS server on win32 2009-02-22 14:27:10 +00:00
Erik Ekman
982e892fc7 updated changelog with #51 2009-02-17 20:48:00 +00:00
Erik Ekman
f741e3d551 #50 added syslog logging for version and login packets. no-op on windows 2009-02-15 18:24:12 +00:00
Erik Ekman
d7aea72bd5 Added win32 specific readme 2009-01-25 17:01:06 +00:00
Erik Ekman
31b2958b28 update changelog after release 2009-01-23 19:39:43 +00:00
Erik Ekman
ae1b5d6800 Updated changelog 2009-01-16 19:00:37 +00:00
Erik Ekman
d7f07d2f1f Enhanced checks on incoming queries, check user exists and is active 2009-01-10 20:23:50 +00:00
Erik Ekman
db13d81caf #7 finally done\! Added autoprobing of max downstream fragsize. 2009-01-10 19:30:55 +00:00
Erik Ekman
f8eb4c952b Allow setting netmask in iodined, fixes #27. The same netmask will be given to clients as well. Updated docs. 2009-01-04 12:39:28 +00:00
Erik Ekman
58f789307b Updated changelog for #37 2009-01-03 23:14:02 +00:00
Erik Ekman
3740894350 Revert client shutdown code, it seems BADIP can arrive even though everything works 2008-12-06 12:25:02 +00:00
Erik Ekman
cb0fa56232 updated changelog 2008-09-14 13:37:44 +00:00
Erik Ekman
55176af538 Added -n to set NS ip, updated docs, added checks 2008-09-14 13:21:11 +00:00
Erik Ekman
2eb78f9e8c Reverted [686], [689] and [692]. SSH login now works again. Increased version. 2008-09-14 12:44:55 +00:00
Erik Ekman
4203f115f5 Use base64 is case is preserved and plus sign is allowed 2008-09-14 11:34:56 +00:00
Erik Ekman
4c805fef6a Fix issue #33, respond to NS requests 2008-09-09 20:55:13 +00:00
Erik Ekman
8eccbf097a Stop client if server is restarted 2008-09-09 19:37:51 +00:00
Erik Ekman
c96b83e3d2 Forward non-tunnel requests to another udp port (fixes #31) 2008-08-07 21:18:15 +00:00
Erik Ekman
b619662201 Patch to make it build on BeOS R5-BONE and Haiku from Francois Revol 2008-08-07 16:53:59 +00:00
Erik Ekman
6531d5e72b Eliminate extra 'ping' message when server sends data to client which generates a reply 2008-08-07 15:05:51 +00:00
Erik Ekman
2270063464 updated changelog 2008-08-07 14:40:39 +00:00
Erik Ekman
188e69aa1f Fixed segfault when sending version rejects: VNAK/VFUL 2008-08-07 14:16:12 +00:00