| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
| |
for passive mode data connections (PASV/EPSV -> 227/229). Well,
the actual punching happens a bit later, when the aliasing link
becomes fully specified.
Prodded by: Danny Carroll <dannycarroll@hotmail.com>
MFC after: 1 week
Notes:
svn path=/head/; revision=86953
|
| |
|
|
|
|
|
| |
Requested by: Charles Mott <cmott@scientech.com>
Notes:
svn path=/head/; revision=85964
|
| |
|
|
| |
Notes:
svn path=/head/; revision=84195
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
NAT in extended passive mode if the server's public IP address was
different from the main NAT address. This caused a wrong aliasing
link to be created that did not route the incoming packets back to
the original IP address of the server.
natd -v -n pub0 -redirect_address localFTP publicFTP
Note that even if localFTP == publicFTP, one still needs to supply
the -redirect_address directive. It is needed as a helper because
extended passive mode's 229 reply does not contain the IP address.
MFC after: 1 week
Notes:
svn path=/head/; revision=83771
|
| |
|
|
|
|
|
| |
Previously approved by: Charles Mott <cmott@scientech.com>
Notes:
svn path=/head/; revision=82001
|
| |
|
|
|
|
|
| |
Reported by: Bernd Fuerwitt <bf@fuerwitt.de>
Notes:
svn path=/head/; revision=78886
|
| |
|
|
|
|
|
| |
Approved by: Charles Mott <cmott@scientech.com>
Notes:
svn path=/head/; revision=77701
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
For FTP control connection, keep the CRLF end-of-line termination
status in there.
Fixed the bug when the first FTP command in a session was ignored.
PR: 24048
MFC after: 1 week
Notes:
svn path=/head/; revision=77485
|
| |
|
|
|
|
|
| |
whether they should create a link if lookup has failed or not.
Notes:
svn path=/head/; revision=67980
|
| |
|
|
|
|
|
|
| |
- Stricter checking of PORT/EPRT/227/229 messages format.
- Moved all security checks into one place.
Notes:
svn path=/head/; revision=61735
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
It does mean that it is now possible to run passive-mode FTP
server behind NAT.
- SECURITY: FTP aliasing engine now ensures that:
o the segment preceding a PORT/227 segment terminates with a \r\n;
o the IP address in the PORT/227 matches the source IP address of
the packet;
o the port number in the PORT command or 277 reply is greater than
or equal to 1024.
Submitted by: Erik Salander <erik@whistle.com>
Reviewed by: ru
Notes:
svn path=/head/; revision=61677
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Minor optimizations.
- Minor spelling fixes.
PR: 14305
Submitted by: ume
Rewritten by: ru
Notes:
svn path=/head/; revision=59075
|
| |
|
|
|
|
|
| |
Approved by: brian (well, he approved adding $Id$)
Notes:
svn path=/head/; revision=50597
|
| |
|
|
|
|
|
| |
Statify functions in alias_nbt.c
Notes:
svn path=/head/; revision=44616
|
| |
|
|
|
|
|
| |
Pointed out by: "Steve Sims" <SimsS@IBM.Net>
Notes:
svn path=/head/; revision=36711
|
| |
|
|
|
|
|
|
| |
Obtained from: Yes development tree (+ 10 lines of patches from
Charles Mott, original libalias author)
Notes:
svn path=/head/; revision=32377
|
|
|
ppp (or will be shortly). Natd can now be updated to use
this library rather than carrying its own version of the code.
Submitted by: Charles Mott <cmott@srv.net>
Notes:
svn path=/cvs2svn/branches/CMOTT/; revision=26026
|