ChangeLog

Revision 1378, 38.5 kB (checked in by wichert, 2 weeks ago)
Add exitcode to iptables failure errors
Property svn:eol-style set to `native` Property svn:keywords set to `Author Date Id Revision`

Line
1	# $Id$
2
3	2008-09-30 Wichert Akkerman <wichert@wiggy.net>
4	* Add exitcode to iptables failure errors.
5	* Include the gw_id in auth server updates so the client does not have
6	to keep track of it in a session.
7	* Include the gateway id in the firewall table names. Fixes ticket #466
8	* URL encode the token before transmitting (it was already decoded).
9	Fixes ticket #473
10	* Clean up compiler warnings.
11	* Security: strncpy may not NUL-terminate strings, so enforce this
12	ourselves. Fixes ticket #464
13	* Make it possible to protect the status page. Fixes ticket #463.
14
15	2008-07-20 Alexandre Carmel-Veilleux <acv@miniguru.ca>
16	* src/util.c: Fixed #include bug that caused segfaults on newer Linux
17
18	2008-04-21 Alexandre Carmel-Veilleux <acv@miniguru.ca>
19	* Integrated patch #452 from Wichert Akkerman <wichert@wiggy.net>: Add const to function arguments in libhttpd to enforce more type checking and prevent certain class of problems.
20	* Compatiblity fix: Libhttpd assumes that type u_int is defined. Added an #ifndef/#include <sys/types.h> pair to httpd.h to make sure that assertion is true.
21	* Integrated patch #453 from Wichert Akkerman <wichert@wiggy.net>: Add configurable html to wifidog error messages. This has been a long-requested feature.
22
23	2008-04-13 Benoit Gr�ire <bock@step.polymtl.ca>
24	* contrib/build-openwrt-kamikazeipk/wifidog/Makefile: Add iptables userspace dependencies
25	* Release 1.1.5
26
27	2008-03-24 Benoit Gr�ire <bock@step.polymtl.ca>
28	* Integrate with OpenWRT kamikaze build system
29
30	2007-11-01 Benoit Gr�ire <bock@step.polymtl.ca>
31	* Apply portability patches by David Young <dyoung@pobox.com>. These have been reviewed, but not tested.
32
33	2007-10-18 Benoit Gr�ire <bock@step.polymtl.ca>
34	* fw_iptables.c: From Philippe April: reverted change made in 1241 so we properly remove the entry from mangle.WiFiDog_Incoming when kicking out users, it was affecting statistics
35	* Update doxygen.cfg.in for latest version and to fix path ambiguity during make dist.
36	* Release 1.1.4
37
38	2007-07-06 Benoit Gr�ire <bock@step.polymtl.ca>
39	* Makefile.am: Slight change in make ipk tagrget. It seems that sometimes builddir isn't defined. srcdir works just as well in this case.
40
41	2007-06-27 Benoit Gr�ire <bock@step.polymtl.ca>
42	* util.c: Fix while loop initialisation bug
43	* conf.h: Forgot to change the value of NUM_EXT_INTERFACE_DETECT_RETRY to actually make it wait forever.
44	* Remove hardcoded authserver paths. Can now be defined in the config file (auth server section).
45	* Centralise browser redirect code to simplify code
46	* Add manual logout URL, based in part on work by David Bird
47	* Release 1.1.3 final
48
49	2007-06-24 Benoit Gr�ire <bock@step.polymtl.ca>
50	* Close #321: Make the Gateway retry forever if it cannot find it's interface. You never know when someone may finally replug the network cable or something...
51	* Close #332: Apply patch from Laurent Marchal. biguphpc<AT>gmail<DOT>com
52	* fw_iptables.c: Fix error in iptables_fw_access(). Rules were created as ACCEPT instead of DROP
53	* firewall.c: Fix bug in fw_sync_with_authserver(). The traffic for the validation period of a user who validated his account while connected wouldn't get counted.
54	* doc/wifidog_firewall_map.dia: At long last, full documentation of the firewall. We would have avoided a lot of stupid mistakes if we produced that sooner.
55	* Release 1.1.3_rc1
56
57	2007-05-24 Benoit Gr�ire <bock@step.polymtl.ca>
58	* wdctl_thread.c: Fix #324, again. Credit goes to Medea, I misunderstood his instructons.
59	* From David Bird <david@coova.com> libhttpd/: Fix #266 - don't process query string parameters and keep them in that request.path.
60
61	2007-05-18 Benoit Gr�ire <bock@step.polymtl.ca>
62	* wdctl_thread.c: Fix #324
63
64	2007-04-26 Benoit Gr�ire <bock@step.polymtl.ca>
65	* wifidog.conf: Improve comments and add examples of blocking access to the upstream LAN.
66
67	2007-04-26 Benoit Gr�ire <bock@step.polymtl.ca>
68	* conf.h: The DEFAULT_CHECKINTERVAL was 5 instead of 60 (as stated in the config file) which caused huge needless load on the auth servers, and needless ping traffic towards the clients if it wasn't manually set.
69
70	2007-04-09 Benoit Gr�ire <bock@step.polymtl.ca>
71	* Makefile.am: Slight path fix when using building make ipk. Tell me if you have trouble with this
72
73	2007-01-06 Benoit Gr�ire <bock@step.polymtl.ca>
74	* contrib/ Add contrib dir to collect the scripts and other code distributed with, but not really part of wifidog.
75	* Include the scripts used to build a ipkg on Openwrt RC6 and 0.9
76	* Modify the build system to finally be able to build wifidog directly from the wifidog directory using the same files
77	used to make the official .ipk, without having to copy ANYTHNG to the openwrt SDK.
78	At last, there is now a new target: make ipk make ipk OPENWRTSDK=path_to_openwrt_sdk
79	* ipk/ Removed the obsolete OpenWRT RC4 scripts
80	* README.openwrt: Update
81	* scripts/openwrt/ remove obsolete dir.
82	* contrib/dump_fw.sh: Convenience script for firewall debugging.
83
84	2007-01-06 Benoit Gr�ire <bock@step.polymtl.ca>
85	* Documentation update in the code
86	* Released 1.1.3_beta6
87
88	2006-10-26 Benoit Gr�ire <bock@step.polymtl.ca>
89	* src/conf.h: Fix #238 by using $sysconfdir to compute the default config-file location.
90
91	2006-10-08 Alexandre Carmel-Veilleux <acv@miniguru.ca>
92	* Changed my email in a few files.
93	* Broken down some printf's on multiple lines.
94	* Added comments.
95
96	2006-09-14 Benoit Gr�ire <bock@step.polymtl.ca>
97	* src/util.c, src/conf.h: Fix autodectection of the External interface if not specified in the config file. If the interface (typically pppoe) wasn't yet fully up when wifidog starts, wifidog would stop every connection from going trough. It will now retry every second for up to two minutes, and then exit with a fatal error if it can't successfully detect it.
98
99	2006-02-23 Philippe April <philippe@ilesansfil.org>
100	* src/fw_iptables.c:
101	* Changed order in the filter.FORWARD chain
102	* Added TCPMSS rule
103	* Fixed deleting the rules on shutdown
104	* Fixed wdctl reset problem
105	* Released 1.1.3_beta4
106
107	2006-02-06 Benoit Gr�ire <bock@step.polymtl.ca>
108	* src/fw_iptables.c: Fix deleting the rules on shutdown.
109
110	2006-01-31 Benoit Gr�ire <bock@step.polymtl.ca>
111	* Release 1.1.3_beta2
112
113	2006-01-31 Benoit Gr�ire <bock@step.polymtl.ca>
114	* src/fw_iptables.c: Add the global ruleset to the nat table to fix #65.
115	Add the table parameter to iptables_load_ruleset() and iptables_compile
116	* libhttpd/protocol.c: Fix pointer type mismatch
117	* src/conf.c,h: Remove deprecated option AuthServMaxTries (which was already ignored anyway.
118
119	2006-01-23 Benoit Gr�ire <bock@step.polymtl.ca>
120	* src/conf.h: Fix the value of DEFAULT_AUTHSERVPATH and completely wrong code comment. Not the default indicated in the config file and the define are in sync.
121
122	2006-01-17 Mina Naguib <mina@ilesansfil.org>
123	* Ingisgnificant cleanup of CVS artifacts after svn migration
124
125	2005-11-24 Philippe April <philippe@ilesansfil.org>
126	* Bad idea
127
128	2005-11-01 Max Horvath <max.horvath@maxspot.de>
129	* Added .project to .cvsignore
130
131	2005-11-01 Philippe April <philippe@ilesansfil.org>
132	* Added OPTIONS section in wifidog-init (example: enable syslog)
133
134	2005-10-09 Philippe April <philippe@ilesansfil.org>
135	* Changed html pages, added info to wdctl status
136
137	2005-10-07 Philippe April <philippe@ilesansfil.org>
138	* Released 1.1.3_beta1
139
140	2005-10-03 Philippe April <philippe@ilesansfil.org>
141	* libhttpd: Fixed two bugs parsing the GET query string making wifidog segfault
142
143	2005-09-24 Mina Naguib <mina@ilesansfil.org>
144	* New wdctl command "restart" which will get wifidog to restart itself
145	while preserving the existing clientlist. Perfect for 0-downtime
146	upgrading!
147	* safe.c: New safe_fork that croaks if the fork fails, also takes care of
148	closing some global file descriptors for the child
149	* debug.c: Now also logs the PID as part of every entry
150	* gateway.c: Handler for SIGCHLD now waitpid()s with WNOHANG flag to prevent deadlock
151	when the handler is called and another wait() or waitpid() is used
152	* util.c: execute() now uses waitpid() instead of wait() to reap only the child
153	it fork/executed
154	* Extra debugging entries throughout code
155
156	2005-09-24 Mina Naguib <mina@ilesansfil.org>
157	* conf.c: Pre-emptive bugfix - harsh lockdown of parsing trusted MAC
158	addresses from config file
159
160	2005-09-24 Philippe April <philippe@ilesansfil.org>
161	* (finally) Added {Saul Albert,Jo Walsh,Schuyler}'s patch (thank you!) to send
162	the GW interface's mac address as the node_id if no node_id is specified. It allows
163	the use of generic configuration files without the need to hardcode the
164	node_id in.
165	* Added TrustedMACList configuration variable which allows specifying
166	MAC addresses which are allowed to go through without authentication.
167	* Updated OpenWrt instructions.
168
169	2005-09-08 Philippe April <philippe@ilesansfil.org>
170	* Added compile instructions and installation for OpenWrt Whiterussian-rc2
171	* Released 1.1.2
172
173	2005-05-30 Mina Naguib <mina@ilesansfil.org>
174	* New wdctl command "restart" which will get wifidog to restart itself while preserving the existing clientlist. Perfect for 0-downtime upgrading!
175	* safe.c: New safe_fork that croaks if the fork fails, also takes care of closing some global file descriptors for the child
176	* debug.c: Now also logs the PID as part of every entry
177	* gateway.c: Handler for SIGCHLD now waitpid()s with WNOHANG flag to prevent deadlock when the handler is called and another wait() or waitpid() is used
178	* util.c: execute() now uses waitpid() instead of wait() to reap only the child it fork/executed
179	* Extra debugging entries throughout code
180
181	2005-05-24 Mina Naguib <mina@ilesansfil.org>
182	* wdctl.c: Minor bugfix pointed out by David Vincelli: When an invalid
183	command is given to wdctl, the error message showed "Invalid command:
184	wdctl" instead of the actual command supplied
185
186	2005-05-23 Philippe April <philippe@ilesansfil.org>
187	* Released 1.1.2_pre1
188
189	2005-05-23 Mina Naguib <mina@ilesansfil.org>
190	* fw_uptables.c: When appending call to chain WiFiDog_Outgoing from
191	nat.prerouting, add it via -A (at end) instead of -I 1 (at beginning) to
192	allow for existing nat forwarding.
193
194	2005-05-16 Mina Naguib <mina@ilesansfil.org>
195	* centralserver.c: read()s from central server in auth_server_request() are
196	now timed-out (via select). This is hopefully a bugfix to the
197	thread-freezing problem.
198
199	2005-05-06 Mina Naguib <mina@ilesansfil.org>
200	* Bugfix non-RFC compliant HTTP requests using \n instead of \r\n as line
201	terminations as per email from ludocornut@users.sourceforge.net
202
203	2005-04-28 Philippe April <philippe@ilesansfil.org>
204	* Released 1.1.2_beta2
205
206	2005-04-28 Mina Naguib <mina@ilesansfil.org>
207	* wifidog.conf: Make the default ruleset for validating users = allow all
208	(except sending SMTP)
209
210	2005-04-20 Philippe April <philippe@ilesansfil.org>
211	* fw_iptables.c: Insert ourselves at the end of filter.FORWARD instead of
212	at the beginning since important FW instructions are located there on the
213	WRT54Gs when used with some DSL providers and we never execute them
214	otherwise.
215	* Released 1.1.2_beta1
216
217	2005-04-03 Philippe April <philippe@ilesansfil.org>
218	* Fixed issue with FAQ
219	* ipkg/rules: If autogen.sh doesn't exist, it's ok. 'configure' will.
220
221	2005-04-01 Philippe April <philippe@ilesansfil.org>
222	* Duplicated auth server list in NAT table to fix the issue
223	of using an auth server on port 80, since port 80 was being systematically
224	redirected to 2060 otherwise.
225	* Released 1.1.1
226
227	2005-03-29 Mina Naguib <mina@ilesansfil.org>
228	* Added FAQ document copied from wiki
229
230	2005-03-22 Philippe April <philippe@ilesansfil.org>
231	* Released 1.1.0
232
233	2005-03-20 Mina Naguib <mina@ilesansfil.org>
234	* More verbose debugging output
235
236	2005-03-12 Mina Naguib <mina@ilesansfil.org>
237	* More debugging output
238	* Document ugly hack involving tid_fw_thread
239	* SIGPIPE now ignored (as it's comment said) instead of being sent to the
240	handler for SIGCHLD
241	* Bugfix firewall destruction not happening from termination handler - had
242	to move explicit thread kills after, not before, firewall destruction
243
244	2005-03-11 Mina Naguib <mina@ilesansfil.org>
245	* If external interface was unspecified in the conf file, try to determine
246	it from the default route
247	* If external interface is known, specify it in the trigger rule in
248	nat.PREROUTING to prevent the rule from matching traffic inbound to the
249	router itself. This should fix the issue raised by Philippe and Pascal on
250	the mailing list
251	* Bugfix: UNDO ABOVE 2 ITEMS. Aparently you cannot use the "-o" iptables
252	option in nat.PREROUTING which makes knowing external_interface useless
253	* Added new chain in nat.PREROUTING that explicitly allows all traffic to
254	the router's internal IP from the internal interface, effectively
255	addressing the same above problem
256
257	2005-03-07 Mina Naguib <mina@ilesansfil.org>
258	* auth.c: Got rid of legacy _http_output and _http_redirect - replaced them
259	with libhttpd functions and http_wifidog_header/http_wifidog_footer
260	* auth.c: When re-directing to auth server now respects SSL setting instead
261	of always http+port 80
262	* auth.c: Better debugging output of what it's doing when it acts on auth
263	server response
264	* A little bit more care with buffers and their sizes
265	* Minor whitespace tweaking and a couple of internal doc typo fixes
266
267	2005-03-06 Mina Naguib <mina@ilesansfil.org>
268	* Check return values of pthread_create
269	* Internal documentation touch-ups
270	* auth.c: Bugfix invalid http header sent by _http_output
271	* Bugfix traffic counter read from iptables as long int instead of long
272	long int
273	* Minor insignificant code touch-ups:
274	* Replace pthread_mutex_lock/unlock calls with appropriate
275	LOCK_FOO/UNLOCK_FOO macros for consistency
276	* Lock first before using some variables, not after
277	* Indentation adjustments
278
279	2005-03-04 Mina Naguib <mina@ilesansfil.org>
280	* Bugfix huge uptime pointed out to be by Philippe - was caused when the
281	date is set (with ntpclient for example) after wifidog starts
282	* Beautified "Uh oh!" apology screens and redirection screen
283
284	2005-03-02 Alexandre Carmel-Veilleux <acv@acv.ca>
285	* Ifdef'd out the bits that are Linux specific if __linux__ is not
286	defined.
287
288	2005-03-01 Mina Naguib <mina@ilesansfil.org>
289	* Minor visual tweaks to the web interface
290
291	2005-03-01 Philippe April <philippe@ilesansfil.org>
292	* Tagged v1_1_0_beta3
293
294	2005-02-28 Mina Naguib <mina@ilesansfil.org>
295	* Do not update the last_updated field on incoming traffic - update it on
296	outgoing traffic only. This should be a much more reliable indication of
297	client no longer being there
298	* WifiDog status is now viewable with a web browser at
299	http://ip:port/wifidog/status
300	* Added new web hook for http://ip:port/wifidog
301	* Beautified web interface at http://ip:port/wifidog/*
302
303	2005-02-24 Mina Naguib <mina@ilesansfil.org>
304	* auth_server_request now returns AUTH_ERROR on error instead of AUTH_VALIDATION_FAILED
305	* centralserver.c: Fix typo (was =+, made it +=) that made the response
306	from the auth server corrupted in memory if the entire response would not
307	fit in 1 packet and retrieved with 1 read() call
308	* Better logging of details and calling of mark_* (auth+online/offline)
309
310	2005-02-22 Philippe April <philippe@ilesansfil.org>
311	* Tagged v1_1_0_beta2
312
313	2005-02-20 Mina Naguib <mina@ilesansfil.org>
314	* New safe.c with safe_malloc, safe_strdup, safe_asprintf and
315	safe_vasprintf with propper logging and exit when error. Replaced all
316	instances of original with safe versions in all files
317	* Fix memory leak in iptables_fw_counters_update
318	* Partial merge from CaptiveDNS branch: Consolidated much of the networking
319	calls to the auth servers into a magical function called connect_auth_server()
320	that's responsible for dns lookup, connecting, marking servers bad, marking
321	online/auth_online, and refreshing the firewall rules.
322	* Partial merge from CaptiveDNS branch: Added new functions mark_auth_online(),
323	mark_auth_offline() and is_auth_online() - similar in nature to is_online()
324	etc. except tailored to decide on auth servers status - currently being called by
325	connect_auth_server()
326	* Partial merge from CaptiveDNS branch: Different apology in 404 handler
327	depending on whether internet is down or just auth server is down
328	* Partial merge from CaptiveDNS branch: wdctl status now shows status of
329	is_online and is_auth_online
330	* Fixed several inconsistencies regarding the parity and size of
331	incoming/outgoing counters. Standardized on "unsigned long long int" in
332	declarations and printf/scanf formats
333
334	2005-02-16 Philippe April <philippe@ilesansfil.org>
335	* ipkg/rules - When we clean, forgot to delete ipkg-build-stamp
336
337	2005-02-15 Mina Naguib <mina@ilesansfil.org>
338	* Now also reports wifidog_uptime when it pings the server, as well as
339	shows it in wdctl status
340
341	2005-02-13 Mina Naguib <mina@ilesansfil.org>
342	* Completely re-did the iptables rules. Most of the rules are now in the
343	filter table instead of the nat table. Also DROPs are now replaced with
344	REJECTs to help tell the user connection refused instead of endless pauses
345	* Bugfix: Traffic from client to router was counted twice in the "outgoing"
346	bytecount since it increased both counters in mangle.* and filter.* - Got
347	rid of TABLE_WIFIDOG_WIFI_TO_GW completely since it's unneeded
348
349	2005-02-12 Mina Naguib <mina@ilesansfil.org>
350	* Stricter format rules for all scan functions hunting for IPs and MAC addresses
351	* fw_iptables.c: Make sure scanned IP address is a valid IP address
352	* firewall.c: Fix memory leak in arp_get
353	* libhttpd/protocol.c: Abort connection if read non-ascii from client. This
354	is often a telltale sign of a program such as skype using port 80 for
355	non-http requests - this therefore ends the thread as early as possible
356	instead of having it lay around for a while trying to get a valid http
357	request and taking up resources
358	* ping_thread.c: When pinging auth server now also sends sys_uptime, sys_memfree
359	and sys_load
360	* -v commandline option now shows wifidog version
361
362	2005-02-11 Philippe April <philippe@ilesansfil.org>
363	* Tagged v1_1_0_beta1
364
365	2005-02-11 Philippe April <philippe@ilesansfil.org>
366	* Fixed a bug in counting the traffic between client and gateway
367	* Alpha8
368
369	2005-02-04 Mina Naguib <mina@ilesansfil.org>
370	* Partially bugfix apology when offline
371	* ipkg/rules: More tweaking to make it build nicely with recent openwrt
372	buildroots
373
374	2005-02-03 Mina Naguib <mina@ilesansfil.org>
375	* Keep track of last times we successfully & unsuccessfully spoke to the
376	auth server/used DNS. Then, if we know we're not online, show a little
377	apology to the user instead of re-directing them to the auth server.
378	* ipkg/rules: Added some extra version detection to auto-detect versions
379	of kernel, iptables and ipkg-utils instead of having them hardcoded. This
380	makes creating ipkg's work with different OpenWRT releases
381	* fw_iptables.c: Fixed memory leak caused by not freeing return from
382	iptables_compile in iptables_load_ruleset
383	* http.c: Deleted unused call to client_list_find
384	* http.c: /about URL now shows wifidog version
385	* Cosmetic typo fixes
386
387	2005-02-03 Philippe April <isf_lists@philippeapril.com>
388	* Ping the users everytime we check their counters, that way we keep them
389	alive
390	* Optional ExternalInterface
391	* Optional GatewayAddress (we discover it. finally.)
392	* We check for the traffic from the clients to the firewall, to catch the
393	traffic the icmp ping is generating
394	* Fixed bug where we were doing the opposite of what desired when checking if authentication server was alive
395	* Bumped to alpha7
396
397	2005-01-23 Philippe April <isf_lists@philippeapril.com>
398	* wdctl status will return the auth servers in the linked list
399	* We'll now forward to the auth server to display the used-to-be-ugly
400	messages like "go ahead and validate your account you have 15 minutes"
401	* Bumped to alpha6
402
403	2005-01-06 Philippe April <philippe@philippeapril.com>
404	* fw_iptables.c: Changed REJECT to DROP for the end of the table Unknown,
405	REJECT doesn't seem to be available in the NAT table.
406	* fw_iptables.c: Indented things
407	* fw_iptables.c Fix: Created the authservers table at the beginning and destroy
408	at exit time only to avoid recreating it everytime
409	* Bumped to alpha5
410
411	2005-01-05 Philippe April <philippe@philippeapril.com>
412	* Typo, fixed some spaces (mostly esthetic)
413	* Bumped to alpha4
414
415	2004-12-19 Alexandre Carmel-Veilleux <acv@acv.ca>
416	* src/fw_iptables.c: Tweak of auth_server firewall rule setting
417	code. (and promptly undone, fixing the cause is better then
418	fixing the symptom)
419	* src/conf.c: NULL-fill auth_server struct so that
420	auth_server->last_ip always equals NULL when first filled.
421
422	2004-12-16 Benoit Gr�ire <bock@step.polymtl.ca>
423	* src/fw_iptables.c: Display iptables command that is run in debug mode.
424
425	2004-12-07 Benoit Gr�ire <bock@step.polymtl.ca>
426	* src/firewall.c: Fix reversed incoming and outgoing connections in statistics code
427	* bump version to alpha3
428
429	2004-11-29 Alexandre Carmel-Veilleux <acv@acv.ca>
430	* wifidog.conf: Fixed firewall rule bug.
431	* src/fw_iptables.c: Unknown user default block rule not "REJECT"
432	instead of "DROP"
433
434	2004-11-23 Alexandre Carmel-Veilleux <acv@acv.ca>
435	* src/conf.c: Fixed a NULL pointer dereference in get_ruleset().
436
437	2004-11-22 Alexandre Carmel-Veilleux <acv@acv.ca>
438	* libhttpd/api.c: Fix leak in HttpdEndRequest().
439	* src/ping_thread.c: Fix auth_server IP change code with latest
440	from previous branch.
441	* src/conf.h: Same as above.
442	* src/fw_iptables.c: Same as above.
443	* src/conf.[ch]: Firewall rule set parsing code.
444	* wifidog.conf: Default firewall rule set defined.
445	* src/fw_iptables.[ch]: Firewall rule set enacting code.
446	* configure.in: bumped version to 1.1.0-alpha2
447
448	2004-11-18 Benoit Gr�ire <bock@step.polymtl.ca>
449	* src/ping_thread.c: Merge phil's bug fixes from stable branch
450	* ipkg/rules: Merge phil's bug fixes from stable branch
451	* configure.in: Set version to 1.1.0alpha
452
453	2004-11-18 Alexandre Carmel-Veilleux <acv@acv.ca>
454	* src/fw_iptables.[ch]: Merged in Phil's patch.
455	* src/*: Added ping_thread hooks to reset authserver table in the
456	firewall if it notices the auth_servers changing IPs.
457
458	2004-11-17 Alexandre Carmel-Veilleux <acv@acv.ca>
459	* libhttpd/*: libhttpd has been taken behind the shed and shot in
460	the back of the head. The replacement separates the request struct
461	from the server struct. It's thread safe if none of OUR threads
462	write to server.
463	* src/*: All the changes to handle the new libhttpd and also to
464	move over to a worker thread system. http_callback_auth() no
465	longer spawns a thread either.
466	* *: this update preceded by a cvs tag PRE_NEW_LIBHTTPD.
467	* *: You want to check the mailing list archive also.
468
469	2004-11-10 Alexandre Carmel-Veilleux <acv@acv.ca>
470	* libhttpd/protocol.c: select() based timeout.
471
472	2004-10-31 Alexandre Carmel-Veilleux <acv@acv.ca>
473	* configure.in: bumped version number to "1.0.2-pre1" since we
474	already have ile sans fil hot spots advertising "1.0.1".
475
476	2004-10-30 Alexandre Carmel-Veilleux <acv@acv.ca>
477	* src/ping_thread.c: asynch read(). fixed bug in byte counting.
478
479	2004-10-29 Philippe April <philippe@philippeapril.com>
480	* ipkg/rules: added conffiles so it does not overwrite config files
481
482	2004-10-29 Alexandre Carmel-Veilleux <acv@acv.ca>
483	* src/ping_thread.c: Much new debugging information
484	* multiple files: Logging for all mutexes
485
486	2004-10-28 Philippe April <philippe@philippeapril.com>
487	* ipkg/rules: building ipkg-tools before packaging
488
489	2004-10-28 Alexandre Carmel-Veilleux <acv@acv.ca>
490	* multiple files: Implemented a FirewallRule config command, it
491	doesn't actually do anything yet.
492	* libhttpd: #if 0'd out lots of request parsing code.
493	* libhttpd: changed URL parsing.
494
495	2004-10-27 Philippe April <philippe@philippeapril.com>
496	* ipkg/rules: removed --build=mipsel from ./configure
497
498	2004-10-26 Philippe April <philippe@philippeapril.com>
499	* ipkg/rules: sed -i is not standard, did a workaround.
500	* ipkg/rules: openwrt's buildroot has changed, modified ipkg
501	accordingly, please read README.openwrt
502
503	2004-10-22 Alexandre Carmel-Veilleux <acv@acv.ca>
504	* src/various: Added wd_gethostbyname, a thread-safe (serialized)
505	version of gethostbyname.
506
507	2004-10-15 Alexandre Carmel-Veilleux <acv@acv.ca>
508	* src/auth.c: Fixed hard coded port.
509
510	2004-10-09 Alexandre Carmel-Veilleux <acv@acv.ca>
511	* src/gateway.c: More logging on termination_handler.
512
513	2004-10-08 Alexandre Carmel-Veilleux <acv@acv.ca>
514	* src/wdctl_thread.c: Fix wdctl_status to return all connected
515	users.
516
517	2004-10-07 Alexandre Carmel-Veilleux <acv@acv.ca>
518	* src/conf.c: Fixed mark_auth_server_bad() for the case where there
519	is only one auth server.
520	* src/ping_thread.c: Added extra debugging.
521	* src/ping_thread.c: Fixed file descriptor leak.
522	* src/centralserver.c: Fixed many file descriptor leaks.
523	* src/centralserver.c: Failure of read() no longer fatal.
524	* src/centralserver.c: In case of failure, return from
525	auth_server_request() is no longer an undefined authresponse.
526	* src/util.c: Fixed typo in logging.
527	* src/wdctl_thread.c: Added logging when socket path is too long.
528	* src/debug.c: Debug now logs the time of an event.
529
530	2004-08-30 Alexandre Carmel-Veilleux <acv@acv.ca>
531	* wifidog.conf: Corrected an example
532	* README.openwrt: Typo fixed, editorial changes
533	* ChangeLog: Benoit's last update entry was set in the future ;-).
534	* All over src/: Compiled with -Wall and fixed all nagging.
535
536	2004-08-30 Benoit Gr�ire <bock@step.polymtl.ca>
537	* Makefile.am: Add rpm target
538	* wifidog.spec.in: Rework spec file. Now works and include the init script
539	* ipkg/rules: Deal with the incomplete init.d system of the OpenWrt. Install scripts/init.d/wifidog as /usr/bin/wifidog-init, and call wifidog-init start from S65wifidog.
540	* scripts/openwrt/S65wifidog: Add file
541	* scripts/init.d/wifidog: Fix performance and protability problem. Make it chkconfig compliant. Test that chkconfig --add wifidog works (at least on mandrake)
542	* src/wdctl.c: Change some message, make sure wdctl return 0 unless there is an error.
543
544	2004-08-30 Benoit Gr�ire <bock@step.polymtl.ca>
545	* README.openwrt: Documentation update
546	* Makefile.am: Make a ipkg target to ease WRT54G installation
547	* ipkg/rules: Add wdctl and the init.d script.
548	* Add BUILDROOT variable to the build system so we can use it when needed
549	* src/ping_thread.c: Have the server ping immediately on boot. Note that this will only help if the second server responds. The logic of the ping itself should be changed so it iterates in the list until it finds one that responds or exausts the list
550	* wifidog.conf: Add more doc, and (most) of ISF's default config in comments.
551	* Bump version in anticipation for release
552
553	2004-08-29 Guillaume Beaudoin <isf@soli.ca>
554	* wifidog.spec.in: Changed prefix to match scripts/init.d/wifidog.
555	* debian/rules: Configuration and init.d file added.
556	* debian/control: Description and Depends field changed.
557	* Makefile.am: Added scripts directory and ipkg/rules file.
558
559	2004-08-29 Pascal Leclerc <pascal@plec.ca>
560	* scripts/init.d/wifidog: Startup/shutdown script for Wifidog deamon
561
562	2004-08-29 Guillaume Beaudoin <isf@soli.ca>
563	* wifidog.spec.in: Must be in decending chronological order.
564
565	2004-08-29 Guillaume Beaudoin <isf@soli.ca>
566	* wifidog.spec.in: Remove some leftover from libOFX.
567	* Makefile.am: Include debian/* files.
568	* We should now be able to package .deb and .rpm from dist.
569
570	2004-08-27 Benoit Gr�ire <bock@step.polymtl.ca>
571	* README.openwrt,src/conf.c,h: Documentation update
572	* src/gateway.c, src/ping_thread.c, src/wdctl.c, src/wdctl_thread.c: Fix linking problems related to errno.h and extern int errno
573
574	2004-08-26 Pascal Leclerc <pascal@plec.ca>
575	* Makefile.am: Remove phpauth from EXTRA_DIST
576
577	2004-08-25 Alexandre Carmel-Veilleux <acv@acv.ca>
578	* src/auth.c: Path as changed in 1.26 was preceded by a /, the path already contains a / so it would yield http://host//path/
579
580	2004-08-25 Benoit Gr�ire <bock@step.polymtl.ca>
581	* src/auth.c: Remove hardcoded path.
582
583	2004-08-23 Benoit Gr�ire <bock@step.polymtl.ca>
584	* src/ping_thread.c: Send the gateway id to the central server during ping, so the server know which gateway checked in, and then knows for sure that it is up (well, once the server implements it...).
585
586	2004-08-23 Benoit Gr�ire <bock@step.polymtl.ca>
587	* src/centralserver.c: Fix path for auth by appending /auth/ to auth_server->authserv_path. Wifidog works again.
588
589	2004-08-20 Alexandre Carmel-Veilleux <acv@acv.ca>
590	* Debug output of all HTTP transactions and their responses.
591	* Changed ipkg to use wifidog.conf from the base tree
592	* Send url to central server for link back out
593
594	2004-08-19 Alexandre Carmel-Veilleux <acv@acv.ca>
595	* Sort of fixed the hanging thread (with an explicit thread kill)
596	* Fixed ping code
597
598	2004-08-13 Alexandre Carmel-Veilleux <acv@acv.ca>
599	* All Auth Server configuration now handled by the "AuthServer"
600	directive.
601	* The "AuthServer" directive is now multi line.
602
603	2004-08-11 Alexandre Carmel-Veilleux <acv@acv.ca>
604	* Added code to do heartbeat.
605	* Changed AuthServer yet again.
606
607	2004-08-09 Alexandre Carmel-Veilleux <acv@acv.ca>
608	* WiFiDog now can read multiple auth servers in its config file.
609	* Added functions to handle the auth servers list.
610	* WiFiDog can failover between servers for its internal requests.
611	* Firewall sets rules for all auth servers.
612
613	2004-08-06 Alexandre Carmel-Veilleux <acv@acv.ca>
614	* AuthservPath no longer mandatory in config file.
615
616	2004-08-04 Philippe April <wifidog@philippeapril.com>
617	* Renamed iptables.[ch] to fw_iptables.[ch]
618
619	2004-08-03 Alexandre Carmel-Veilleux <acv@acv.ca>
620	* Fixed broken sockaddr_un usage in wdctl.c and wdctl_thread.c
621
622	2004-08-01 Benoit Gr�ire <bock@step.polymtl.ca>
623	* Delete everything in phpauth, it will now live in it's own module (wifidog-auth)
624
625	2004-08-01 Alexandre Carmel-Veilleux <acv@acv.ca>
626	* Added wdctl facility
627
628	2004-07-21 Philippe April <wifidog@philippeapril.com>
629	* Cleaned up the ipkg makefile
630	* Added makefile to build on Debian
631
632	2004-07-19 Alexandre Carmel-Veilleux <acv@acv.ca>
633	* Build script for OpenWRT ipkg
634
635	2004-07-06 Alexandre Carmel-Veilleux <acv@acv.ca>
636	* Added cache control to default error message returned.
637
638	2004-07-05 Philippe April <papril777@yahoo.com>
639	* Fixed an endless loop in client_list_delete
640
641	2004-06-10 Alexandre Carmel-Veilleux <acv@acv.ca>
642	* Added debugging to libhttpd so that httpdGetConnection() traces
643	its execution into ./httpdGetConnection.log. This should be removed
644	once it's no longer needed or put within #ifdef DEBUG's.
645
646	2004-06-01 Philippe April <papril777@yahoo.com>
647	* Sending User-Agent header to central server
648
649	2004-05-28 Philippe April <papril777@yahoo.com>
650	* Fixed bugs implemented after major changes
651
652	2004-05-27 Benoit Gr�ire <bock@step.polymtl.ca>
653	* Massive Doxygen update in all files. IMPORTANT: The new convention is: @brief in the .h, long description and parameters in the .c
654	* Cleaned up some more issues in my notes taken at the formal review
655	* client_list.c,h: Make client_list_free_node() private, define and document client_list_mutex here
656	* config.c: Start the hunt for evil globals: Get rid of the config global
657	* doc/doxygen.cfg.in: Enable generation of internal doc, a few other tweaks
658	* Documentation now generates a TODO list and DEPRECATED list, please look at them
659
660	2004-05-27 Alexandre Carmel-Veilleux <acv@acv.ca>
661	* Cleaned up all the issues brought forward in the code review
662	on 2004-05-26 at Benoit's. There are to many changes to list
663	individually.
664
665	2004-05-15 Philippe April <papril777@yahoo.com>
666	* Commented out cookie handling in libhttpd because it segfaults if
667	you pass a particular formatting/buggy one
668
669	2004-05-14 Philippe April <papril777@yahoo.com>
670	* Fixed crash when receiving SIGPIPE signal with write() would fail
671
672	2004-05-13 Philippe April <papril777@yahoo.com>
673	* Advertise to the central server when we logged out a user
674
675	2004-05-12 Philippe April <papril777@yahoo.com>
676	* Sending a "stage" when doing authentication for the server
677	to be able to know if it's a login, or just a counters update.
678
679	2004-05-11 Philippe April <papril777@yahoo.com>
680	* Now tracking the hotspot id and ip in database
681
682	2004-05-07 Philippe April <wifidog@philippeapril.com>
683	* Now we store both incoming and outgoing counters on server
684	and expire if no activity at all on both
685	* Changed the structure of nodes a little
686
687	2004-05-07 Philippe April <wifidog@philippeapril.com>
688	* New parameter ExternalInterface
689	* Made possible to count inbound traffic by inserting new rules
690
691	2004-05-07 Philippe April <wifidog@philippeapril.com>
692	* Cleaned up common.h from files
693
694	2004-05-07 Philippe April <wifidog@philippeapril.com>
695	* Made iptables' tables DEFINEs instead of being hardcoded
696
697	2004-05-07 Philippe April <wifidog@philippeapril.com>
698	* Fixed typo
699
700	2004-05-06 Philippe April <papril777@yahoo.com>
701	* Cleanups and standardized things
702
703	2004-05-06 Philippe April <papril777@yahoo.com>
704	* Cleanups in fw_counter function
705
706	2004-05-05 Philippe April <papril777@yahoo.com>
707	* Calling iptables directly instead of using shell scripts
708	for fw_init, fw_destroy and fw_allow/fw_deny
709	* Removed shell script for fw.counters
710	* Fixed memory leaks
711	* Moved most of the iptables-specific (all but the counters)
712	to iptables.c to modularize a bit more
713	* Hack to allow deciding if we want FW calls' messages quiet or not
714
715	2004-04-23 Philippe April <papril777@yahoo.com>
716	* Fixed a debug line
717
718	2004-04-22 Philippe April <papril777@yahoo.com>
719	* Major changes, cleaned up code
720	* Changed the way firewall tags traffic
721
722	2004-04-21 Philippe April <papril777@yahoo.com>
723	* Changed fw.destroy so it cleans up more in a while loop
724
725	2004-04-20 Alexandre Carmel-Veilleux <acv@acv.ca>
726	* fixed expiration time
727
728	2004-04-20 Philippe April <papril777@yahoo.com>
729	* A lot of changes regarding debugging facilities and added logging
730	to syslog
731	* Removed possibility to specify port on command line
732
733	2004-04-19 Philippe April <papril777@yahoo.com>
734	* Changed some debugging severity
735
736	2004-04-19 Benoit Gr�ire <bock@step.polymtl.ca>
737	* Properly integrate libhttpd into the source tree ;) Note that this will create a proper system wide shared library for libghttpd. Still to be done: 1- Store Mina's patch somewhere, in case we want to upgrade libhttpd. 2-Add configure option not to build httpd, and use an already installed one.
738
739	2004-04-18 Alexandre Carmel-Veilleux <acv@acv.ca>
740	* Fixed pthread_cond_timedwait. The mutex needed to be locked as
741	per the POSIX spec, yet Linux or Mac OS X don't care...
742	* Fixed the double SIGTERM handler on Linux...
743
744	2004-04-17 Alexandre Carmel-Veilleux <acv@acv.ca>
745	* Added work around for uClibc bug in auth.c
746
747	2004-04-17 Philippe April <papril777@yahoo.com>
748	* Fixed firewall scripts to make them standard and some firewall functions
749
750	2004-04-17 Alexandre Carmel-Veilleux <acv@acv.ca>
751	* Updated documentation in firewall.c
752
753	2004-04-17 Philippe April <papril777@yahoo.com>
754	* Fixed path returning to gateway in phpauth/login/index.php
755
756	2004-04-16 Alexandre Carmel-Veilleux <acv@acv.ca>
757	* Merged in libhttpd into the source tree
758
759	2004-04-16 Philippe April <papril777@yahoo.com>
760	* Fixed CRLF/formatting in phpauth/login/index.php
761	* Added some documentation for firewall.c, commandline.c
762	* Removed an unnecessary line dist_sysconf_DATA from Makefile.am
763
764	2004-04-15 Alexandre Carmel-Veilleux <acv@acv.ca>
765	* Changed the locking mechanism, now all access to t_node * structs
766	are properly protected.
767
768	2004-04-15 Alexandre Carmel-Veilleux <acv@acv.ca>
769	* Connection now closed if counter hasn't change for one full
770	period.
771
772	2004-04-14 Philippe April <papril777@yahoo.com>
773	* Fixed shell script hardcoded interface
774
775	2004-04-14 Alexandre Carmel-Veilleux <acv@acv.ca>
776	* Existing IPs are logged off when they're authenticated again.
777
778	2004-04-14 Alexandre Carmel-Veilleux <acv@acv.ca>
779	* Fixed clean up so it happens at the right time.
780
781	2004-04-14 Alexandre Carmel-Veilleux <acv@acv.ca>
782	* Major retooling of insert_userclass(), fixed seg fault.
783	* The program now works as advertised.
784
785	2004-04-14 Alexandre Carmel-Veilleux <acv@acv.ca>
786	* Switched to threads. Alpha quality build, at best
787
788	2004-04-12 Alexandre Carmel-Veilleux <acv@acv.ca>
789	* Changed child return value handling, again. Now it's actually
790	using the real value instead of the flag.
791	* The http.c authentication code now closes the http connection
792	from the user.
793
794	2004-04-11 Alexandre Carmel-Veilleux <acv@acv.ca>
795	* Added extra debugging information.
796	* Fixed return value handling in debugging calls.
797
798	2004-04-11 Alexandre Carmel-Veilleux <acv@acv.ca>
799	* Removed duplicates signal handling hooks
800	* Additional comments in SIGCHLD handler
801
802	2004-04-11 Alexandre Carmel-Veilleux <acv@acv.ca>
803	* Node find if's expressions changed
804
805	2004-04-11 Alexandre Carmel-Veilleux <acv@acv.ca>
806	* SIGCHLD Handler initializaed outside of deamon mode now.
807
808	2004-04-11 Alexandre Carmel-Veilleux <acv@acv.ca>
809	* Very large modification. The entire architecture has been reworked
810	so that authentications to the central server are performed in a
811	fork()'d child process and the exit code from that child is then
812	used to set the User Class of the connection.
813	* The UserClasses (global definitions) and Rights (per connection)
814	have been integrated.
815
816	2004-03-16 Mina Naguib <minaguib@users.sourceforge.net>
817	* Changed HTTP server tasks to be handled by libhttpd - merged
818	incorporate_libhttpd branch
819
820	2004-03-13 Philippe April <papril777@yahoo.com>
821	* Modified the way firewall scripts are called so we can configure
822	them in the config file (a bit more modular than it was)
823	* Added simple linked list to keep track of clients and to
824	keep a counter of the utilization and send it to the auth server
825	* Fixed CRLF/formatting in phpauth/auth/index.php
826	* Hacked phpauth/auth/index.php to handle very basic utilization tracking
827
828	2004-03-12 Philippe April <papril777@yahoo.com>
829	* Changed all perror()s into debug()s and added errno.h to common.h
830
831	2004-03-10 Philippe April <papril777@yahoo.com>
832	* Small fix to firewall.c so we don't define variables after
833	the function has started (so it builds on gcc-2.95)
834
835	2004-03-09 Philippe April <papril777@yahoo.com>
836	* Major changes, not forking anymore for new connections, now using
837	select() instead. It will allow us to efficiently use a linked list to track
838	users and other things. It introduces some bugs and design issues but will
839	be better in the end.
840
841	2004-03-09 Philippe April <papril777@yahoo.com>
842	* Small fix in the default.php login page
843	* exit() where the program was supposed to exit but wasn't when the
844	firewall could not be setup
845
846	2004-03-09 Alexandre Carmel-Veilleux <acv@acv.ca>
847	* Tiny change to increase cross-platform compatibility. It can now build on OS X and it comes close to building on my old BSD box.
848
849	2004-03-08 Benoit Gr�ire <bock@step.polymtl.ca>
850	* Initial CVS import. Integrate a standrad GNU build system and Doxygen to the build process. Add Doxygen and CVS headers, .cvsignores, etc. Note that the imported code is Philippe April (papril777 at yahoo.com)'s work. Tell me if I forgot anything. Please note that the paths in the src/fw* scripts are still hardcoded. Don't forget to update the ChangeLog file every commit and add doxygen comments to your code. Happy hacking.
851

Note: See TracBrowser for help on using the browser.

root/trunk/wifidog/ChangeLog

Download in other formats: