Code

Ipv6rebased#309

Code

Open

bastien-roucaries wants to merge 86 commits intomrash:mastermrash/fwknop:masterfrom bastien-roucaries:ipv6rebasedbastien-roucaries/fwknop:ipv6rebasedCopy head branch name to clipboard

+1,134-492

Commits

Commits on Apr 4, 2020

• Use INET_ADDRSTRLEN instead of hardcoding it

  Show description for 6d65f1d
  bastien-roucaries

  committed
  6d65f1d

  Copy full SHA for 6d65f1d

• Let IPs resolve using getaddrinfo

  Show description for 4c73258
  

  khorben

  authored and

  bastien-roucaries

  committed
  4c73258

  Copy full SHA for 4c73258

• Factorize IP resolution between http and https

  Show description for 94bed23
  bastien-roucaries

  committed
  94bed23

  Copy full SHA for 94bed23

• Be more consistent when creating ~/.fwknoprc

  

  khorben

  authored and

  bastien-roucaries

  committed
  03e1c20

  Copy full SHA for 03e1c20

• Improve IPV4 min length by using strlen

  bastien-roucaries

  committed
  de84936

  Copy full SHA for de84936

• Let IPs resolve to IPv6 addresses

  Show description for 2dc902b
  

  khorben

  authored and

  bastien-roucaries

  committed
  2dc902b

  Copy full SHA for 2dc902b

• Allow ipv6 for resolving url

  bastien-roucaries

  committed
  5d8e6cf

  Copy full SHA for 5d8e6cf

• Let IPs resolve to IPv6 addresses

  Show description for 0ab6173
  

  khorben

  authored and

  bastien-roucaries

  committed
  0ab6173

  Copy full SHA for 0ab6173

• Also catch the IPv6 version of INADDR_ANY

  

  khorben

  authored and

  bastien-roucaries

  committed
  5a53b3b

  Copy full SHA for 5a53b3b

• Migrate is_valid_ipv4_addr() to a more generic function

  Show description for 8cc8908
  

  khorben

  authored and

  bastien-roucaries

  committed
  8cc8908

  Copy full SHA for 8cc8908

• Implement is_valid_ip_addr() with getaddrinfo()

  

  khorben

  authored and

  bastien-roucaries

  committed
  2754326

  Copy full SHA for 2754326

• Give have_allow_ip() a chance to allow IPv6

  Show description for 22aa677
  

  khorben

  authored and

  bastien-roucaries

  committed
  22aa677

  Copy full SHA for 22aa677

• Allow connecting to remote IPv6 hosts for TCP or UDP

  Show description for d5ef047
  

  khorben

  authored and

  bastien-roucaries

  committed
  d5ef047

  Copy full SHA for d5ef047

• Use uppercase to log "IP"

  

  khorben

  authored and

  bastien-roucaries

  committed
  a8aa02d

  Copy full SHA for a8aa02d

• Also check for <netinet/ip6.h> and <netinet/icmp6.h>

  Show description for cef18b7
  

  khorben

  authored and

  bastien-roucaries

  committed
  cef18b7

  Copy full SHA for cef18b7

• Rework the network listening routine

  

  khorben

  authored and

  bastien-roucaries

  committed
  43dc125

  Copy full SHA for 43dc125

• Rework the network listening routine some more

  

  khorben

  authored and

  bastien-roucaries

  committed
  508c9f3

  Copy full SHA for 508c9f3

• Code cleanup

  

  khorben

  authored and

  bastien-roucaries

  committed
  47f2309

  Copy full SHA for 47f2309

• Also include <netinet/ip6.h> where relevant

  

  khorben

  authored and

  bastien-roucaries

  committed
  00a4914

  Copy full SHA for 00a4914

• Protect some more headers for inclusion

  

  khorben

  authored and

  bastien-roucaries

  committed
  9b9af40

  Copy full SHA for 9b9af40

• Add support for receiving SPA messages over IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  c69c44e

  Copy full SHA for c69c44e

• Interpret incoming addresses according to their family

  

  khorben

  authored and

  bastien-roucaries

  committed
  73de567

  Copy full SHA for 73de567

• Let access list stanzas be defined in IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  1dc74a1

  Copy full SHA for 1dc74a1

• Typo

  

  khorben

  authored and

  bastien-roucaries

  committed
  b3ea4ab

  Copy full SHA for b3ea4ab

• Typo

  

  khorben

  authored and

  bastien-roucaries

  committed
  43d1b4a

  Copy full SHA for 43d1b4a

• Constify

  

  khorben

  authored and

  bastien-roucaries

  committed
  429ad67

  Copy full SHA for 429ad67

• Use a more appropriate type for sd_len

  

  khorben

  authored and

  bastien-roucaries

  committed
  f2db271

  Copy full SHA for f2db271

• Allow access control "ANY" with any protocol family

  

  khorben

  authored and

  bastien-roucaries

  committed
  c489d83

  Copy full SHA for c489d83

• Use AF_INET instead of PF_INET

  Show description for 65cbaf5
  

  khorben

  authored and

  bastien-roucaries

  committed
  65cbaf5

  Copy full SHA for 65cbaf5

• Use sizeof() instead of re-using hard-coded values

  Show description for b846b35
  

  khorben

  authored and

  bastien-roucaries

  committed
  b846b35

  Copy full SHA for b846b35

• Use sizeof() instead of re-using hard-coded values

  Show description for a4e25b2
  

  khorben

  authored and

  bastien-roucaries

  committed
  a4e25b2

  Copy full SHA for a4e25b2

• Use a constant for AF_INET

  Show description for b1e637b
  

  khorben

  authored and

  bastien-roucaries

  committed
  b1e637b

  Copy full SHA for b1e637b

• Use /usr/bin/env to locate perl

  

  khorben

  authored and

  bastien-roucaries

  committed
  f6bc375

  Copy full SHA for f6bc375

• Rework IPv6 support when comparing addresses

  

  khorben

  authored and

  bastien-roucaries

  committed
  4aac32d

  Copy full SHA for 4aac32d

• Fix processing command-line arguments with whitespace

  

  khorben

  authored and

  bastien-roucaries

  committed
  f3a2e8d

  Copy full SHA for f3a2e8d

• Set the address family for incoming SPA over UDP

  

  khorben

  authored and

  bastien-roucaries

  committed
  f956217

  Copy full SHA for f956217

• Specify the family at run-time for TCP/UDP servers

  Show description for 8f64afb
  

  khorben

  authored and

  bastien-roucaries

  committed
  8f64afb

  Copy full SHA for 8f64afb

• Add IPv6 support to the plain UDP and TCP servers

  

  khorben

  authored and

  bastien-roucaries

  committed
  7dfe143

  Copy full SHA for 7dfe143

• Constify

  

  khorben

  authored and

  bastien-roucaries

  committed
  b18c82c

  Copy full SHA for b18c82c

• Terminate IPs resolved externally as expected

  

  khorben

  authored and

  bastien-roucaries

  committed
  2170845

  Copy full SHA for 2170845

• Prepare access stanzas for more address families

  

  khorben

  authored and

  bastien-roucaries

  committed
  e23c081

  Copy full SHA for e23c081

• Use the correct offset for inet_ntop()

  

  khorben

  authored and

  bastien-roucaries

  committed
  885ac36

  Copy full SHA for 885ac36

• Simplify the calculation of pkt_data_len

  

  khorben

  authored and

  bastien-roucaries

  committed
  0fe28e5

  Copy full SHA for 0fe28e5

• Correct the packet length calculation with IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  fa5a2a5

  Copy full SHA for fa5a2a5

• Fix some issues with TCP over IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  9ae3f8d

  Copy full SHA for 9ae3f8d

• Begin to allow IPv6 addresses in source stanzas

  

  khorben

  authored and

  bastien-roucaries

  committed
  776c7ea

  Copy full SHA for 776c7ea

• Add a command-line option to enable IPv6 (TCP/UDP)

  Show description for b17288a
  

  khorben

  authored and

  bastien-roucaries

  committed
  b17288a

  Copy full SHA for b17288a

• Optimize moot variable initialization away

  

  khorben

  authored and

  bastien-roucaries

  committed
  e2dad97

  Copy full SHA for e2dad97

• Fix the build on Linux (iptables)

  

  khorben

  authored and

  bastien-roucaries

  committed
  3cb8025

  Copy full SHA for 3cb8025

• Fix the build with firewalld

  

  khorben

  authored and

  bastien-roucaries

  committed
  dd927b3

  Copy full SHA for dd927b3

• Update the manual page for the -6 option (--ipv6)

  

  khorben

  authored and

  bastien-roucaries

  committed
  2157346

  Copy full SHA for 2157346

• Support further address families in the future

  

  khorben

  authored and

  bastien-roucaries

  committed
  5a24a63

  Copy full SHA for 5a24a63

• Verify if the protocol family matches incoming packets

  

  khorben

  authored and

  bastien-roucaries

  committed
  cb3aa68

  Copy full SHA for cb3aa68

• Do not use INADDR_ANY for default ports

  

  khorben

  authored and

  bastien-roucaries

  committed
  f3db1b3

  Copy full SHA for f3db1b3

• Check for errors from inet_addr() with INADDR_NONE

  

  khorben

  authored and

  bastien-roucaries

  committed
  e90822b

  Copy full SHA for e90822b

• Fix build with NFQ enabled

  

  khorben

  authored and

  bastien-roucaries

  committed
  6ce6464

  Copy full SHA for 6ce6464

• Allow the longest possible IPv6 address in sources

  

  khorben

  authored and

  bastien-roucaries

  committed
  c2703e4

  Copy full SHA for c2703e4

• Add a configuration variable for IPv6 firewall binaries

  Show description for 38d7931
  

  khorben

  authored and

  bastien-roucaries

  committed
  38d7931

  Copy full SHA for 38d7931

• Add the fw_command6 member to the right struct fw_config

  

  khorben

  authored and

  bastien-roucaries

  committed
  021c6b4

  Copy full SHA for 021c6b4

• Initialize the configuration for ip6tables as well

  

  khorben

  authored and

  bastien-roucaries

  committed
  972b2e7

  Copy full SHA for 972b2e7

• Add IPv6 support to --fw-list{,all}

  

  khorben

  authored and

  bastien-roucaries

  committed
  50661f6

  Copy full SHA for 50661f6

• Update a comment

  

  khorben

  authored and

  bastien-roucaries

  committed
  5784487

  Copy full SHA for 5784487

• Add preliminary support for IPv6 with iptables

  

  khorben

  authored and

  bastien-roucaries

  committed
  7217e45

  Copy full SHA for 7217e45

• Code cleanup

  

  khorben

  authored and

  bastien-roucaries

  committed
  ff4ea85

  Copy full SHA for ff4ea85

• Fix a couple more uses of ctype(3)

  

  khorben

  authored and

  bastien-roucaries

  committed
  6cbe8f3

  Copy full SHA for 6cbe8f3

• Provide enough space to resolve IPv6 addresses

  

  khorben

  authored and

  bastien-roucaries

  committed
  da6f1c9

  Copy full SHA for da6f1c9

• Remove support for IPv6 for rules shared with IPv4

  

  khorben

  authored and

  bastien-roucaries

  committed
  98b367a

  Copy full SHA for 98b367a

• Add support for rule expiration with IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  4369eea

  Copy full SHA for 4369eea

• Revert "Remove support for IPv6 for rules shared with IPv4"

  Show description for c899fcb
  

  khorben

  authored and

  bastien-roucaries

  committed
  c899fcb

  Copy full SHA for c899fcb

• Code cleanup

  

  khorben

  authored and

  bastien-roucaries

  committed
  fc5d908

  Copy full SHA for fc5d908

• Default to IPv6 rules when listening on IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  a8c8a0d

  Copy full SHA for a8c8a0d

• Remove useless code

  

  khorben

  authored and

  bastien-roucaries

  committed
  9ae09ed

  Copy full SHA for 9ae09ed

• Resolve hostnames to IPv6 addresses in IPv6 mode

  

  khorben

  authored and

  bastien-roucaries

  committed
  2ff082c

  Copy full SHA for 2ff082c

• Re-indent

  

  khorben

  authored and

  bastien-roucaries

  committed
  1a020c6

  Copy full SHA for 1a020c6

• Only support IPv4 on Windows

  

  khorben

  authored and

  bastien-roucaries

  committed
  9633a26

  Copy full SHA for 9633a26

• Code cleanup

  

  khorben

  authored and

  bastien-roucaries

  committed
  f1b8181

  Copy full SHA for f1b8181

• Use "::" for matching any address for IPv6 rules

  

  khorben

  authored and

  bastien-roucaries

  committed
  d83e45a

  Copy full SHA for d83e45a

• No longer accept colon (":") as port separator

  Show description for 7929e3a
  

  khorben

  authored and

  bastien-roucaries

  committed
  7929e3a

  Copy full SHA for 7929e3a

• Fix DNAT with IPv6

  

  khorben

  authored and

  bastien-roucaries

  committed
  09b520b

  Copy full SHA for 09b520b

• Use "::/0" for IPT_ANY_IPV6

  

  khorben

  authored and

  bastien-roucaries

  committed
  c3db6be

  Copy full SHA for c3db6be

• Port src_dst_check() to IPv6

  Show description for 0d28bae
  

  khorben

  authored and

  bastien-roucaries

  committed
  0d28bae

  Copy full SHA for 0d28bae

• Also output the value obtained for ip6tables

  Show description for a9ed5d6
  

  khorben

  authored and

  bastien-roucaries

  committed
  a9ed5d6

  Copy full SHA for a9ed5d6

• Complete the check and search for ip6tables

  Show description for 26c1da6
  

  khorben

  authored and

  bastien-roucaries

  committed
  26c1da6

  Copy full SHA for 26c1da6

• [test suite] start on IPv6 tests

  

  mrash

  authored and

  bastien-roucaries

  committed
  040459d

  Copy full SHA for 040459d

• [test suite] first working IPv6 complete cycle test

  

  mrash

  authored and

  bastien-roucaries

  committed
  9c5069e

  Copy full SHA for 9c5069e

• add IPv6 UDP server test, and IPv6 invalid destination test

  

  mrash

  authored and

  bastien-roucaries

  committed
  2f98e06

  Copy full SHA for 2f98e06