| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | code is not being used; toss into Attic |   deraadt | 2005-11-24 | 1 | -1373/+0 |
| | | |||||
| * | Check snprintf return value for -1. |   cloder | 2005-03-05 | 1 | -8/+9 |
| | | | | | OK otto, henning, hshoexer, krw, beck | ||||
| * | const correctness, string literals are const char *, no functional change |   dhartmei | 2005-02-24 | 1 | -4/+4 |
| | | | | | from Joerg Sonnenberger joerg(at)britannica(dot)bec(dot)de | ||||
| * | Fix -S flag for non-root; from Ewen McNeill (closes PR 4066) |   millert | 2005-01-19 | 1 | -2/+2 |
| | | | | | OK dhartmei@ and hshoexer@ | ||||
| * | options sort and sync usage(); |   jmc | 2004-11-19 | 1 | -4/+4 |
| | | | | | from wiz@netbsd | ||||
| * | addr -> address in usage() for consistency. |   brad | 2004-07-11 | 1 | -2/+2 |
| | | |||||
| * | The 'reverse ftp-proxy' mode adds a command line option -R to | dhartmei | 2004-07-06 | 1 | -6/+49 |
| | | | | | | | | | | | | | | ftp-proxy which proxies connection from external ftp clients to an internal ftp server, supporting client passive mode (where server listens on a random port for data connections, and the client connects to the server for data connections). This is the reverse mode to normal operation, where ftp-proxy proxies connections from local clients to external servers, supporting client active mode. ok beck@, henning@ | ||||
| * | #include fixes, from Max Laier, ok beck@ henning@ | dhartmei | 2004-03-14 | 1 | -2/+2 |
| | | |||||
| * | Add a -a address option to set the address which the proxy will use |   beck | 2004-01-22 | 1 | -5/+14 |
| | | | | | | | to bind the local end of outgoing connections, and some man page cleanup. Based on diff provided in pr 3538 by Karl O. Pinc <kop@meme.com> Closes pr 3538. ok dhartmei@ | ||||
| * | pf spelling police |   david | 2003-08-22 | 1 | -2/+2 |
| | | | | | ok dhartmei@ jmc@ | ||||
| * | correctly handle multiline responses with leading space followed by number |   henning | 2003-07-29 | 1 | -1/+3 |
| | | | | | PR3378 mayonez@ssnet.xim.pl, thanks! | ||||
| * | missing protos | deraadt | 2003-06-28 | 1 | -3/+8 |
| | | |||||
| * | delinting from beck | deraadt | 2003-06-23 | 1 | -17/+14 |
| | | |||||
| * | cmdline options in alphabetical order in usage() and manpage | david | 2003-03-20 | 1 | -4/+4 |
| | | | | | | | and make sure they are consistent ok dhartmei@ henning@ | ||||
| * | Honour TCP_WRAPPERS mk.conf setting; ok millert@ |   djm | 2003-01-23 | 1 | -3/+14 |
| | | |||||
| * | various tweaks. someone mailed in a huge diff that was so wrong in so | deraadt | 2002-12-19 | 1 | -56/+65 |
| | | | | | many ways, and i wasted 2 hours finding the gems in it... | ||||
| * | accidental commit | deraadt | 2002-12-19 | 1 | -66/+58 |
| | | |||||
| * | missing .Pp | deraadt | 2002-12-19 | 1 | -58/+66 |
| | | |||||
| * | typos/grammar/better words |   jufi | 2002-07-07 | 1 | -3/+3 |
| | | | | | in comments. | ||||
| * | KNF | deraadt | 2002-07-03 | 1 | -10/+10 |
| | | |||||
| * | no newlines in syslog | beck | 2002-06-09 | 1 | -24/+24 |
| | | |||||
| * | KNF during an audit; found an improperly initialized sockaddr | deraadt | 2002-05-23 | 1 | -31/+19 |
| | | |||||
| * | Pass full length to strlcat(). From Brian Poole. | dhartmei | 2002-03-12 | 1 | -5/+6 |
| | | |||||
| * | print proper host name for the proxy's peer; bob ok |   mickey | 2002-01-10 | 1 | -4/+4 |
| | | |||||
| * | RFC 959 wasn't clear about what happens around a PASV reply, and in | beck | 2001-12-14 | 1 | -5/+8 |
| | | | | | | | | fact RFC 1123 does say that it may not contain parenthesis, and you just have to look at the end of the line. Tholo managed to find a TOPS20 ftp server (toad.xkl.com) that doesn't put parens around the reply - This fixes it so it will handle either case. | ||||
| * | fix multi-line contunuations - ok deraadt@ | beck | 2001-10-10 | 1 | -2/+13 |
| | | |||||
| * | Drop privs to named group, not group with same name as user. | beck | 2001-09-21 | 1 | -2/+2 |
| | | | | | | | noticed by itojun, thanks. fries, you need to catch this for what you're using with faithd | ||||
| * | -Make ftp-proxy drop privs to user "proxy" by default. | beck | 2001-09-05 | 1 | -5/+6 |
| | | | | | | | | *WARNING* this means that it will die when it can't find user proxy if you are not running with a passwd database generated from current - Speling cleanup and missing va_end() noticed by <d.doroshenko@omnitel.net> - fix logging of getpwnam|getgrnam failures. | ||||
| * | remove unneeded code (this is done later) | beck | 2001-08-28 | 1 | -10/+1 |
| | | |||||
| * | oh, some cleanups etc etc | deraadt | 2001-08-28 | 1 | -77/+58 |
| | | |||||
| * | -Functionify some of the main loop, so it isn't so horrificly deep and is | beck | 2001-08-22 | 1 | -233/+305 |
| | | | | | | | | | | | | | | a bit easier to look at, for small values of easier. -Add two options for -u user and -g group to optionally make the proxy drop privs after doing it's pf ioctl's to find out where to go. Running as non root does mean that the PORT and EPRT backchannels do not come from port 20, but this isn't a problem for most sensible ftp clients and sets of packet filter rules that aren't written by a knuckle dragging ape living in the 90's. I would make it drop privs by default, but technically this breaks the ftp specs, and for the upcoming stuff to deal with EPRT, we will need root privs to manipulate rdr rules). | ||||
| * | unsmokecrack - thanks millert | beck | 2001-08-19 | 1 | -22/+20 |
| | | |||||
| * | decruftify with prejudice | beck | 2001-08-19 | 1 | -37/+25 |
| | | |||||
| * | decruftify | beck | 2001-08-19 | 1 | -29/+8 |
| | | |||||
| * | Argh. I must be wearing a stupid sign today | beck | 2001-08-19 | 1 | -2/+2 |
| | | |||||
| * | bye bye atoi. | beck | 2001-08-19 | 1 | -8/+21 |
| | | |||||
| * | oops | beck | 2001-08-19 | 1 | -3/+3 |
| | | |||||
| * | I'm a knuckle-dragging moron, the fd_set is overflowable - make it so | beck | 2001-08-19 | 1 | -28/+39 |
| | | | | | it isn't. | ||||
| * | 1564 lines of cleanup | deraadt | 2001-08-19 | 1 | -271/+221 |
| | | |||||
| * | KNF | beck | 2001-08-19 | 1 | -11/+5 |
| | | |||||
| * | gratuitous KNFism's, don't have it looking like it's your first day | beck | 2001-08-19 | 1 | -13/+8 |
| | | | | | with your new crack pipe | ||||
| * | transparent ftp proxy, based on Obtuse Systems juniper stuff with much | beck | 2001-08-19 | 1 | -0/+1320 |
| modernizing and cleanup. still needs looking at. Currently supports PORT PASV EPRT data connections with only a pf rdr to capture the control connection. (I.E. you don't need ip forwarding or other NAT stuff). Runs from inetd. Supports all passive (EPSV PASV) when using -n flag, where the proxy ignores passive mode data connections (and assumes nat will get them through). Todo yet: More audit IpV6 Handle EPSV in proxy (with an rdr added then removed) Option to Daemonize and bind only to the loopback More Content/Login filtering, etc. etc. and more bloat | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |