root/trunk/wifidog/ChangeLog @ 1305

Revision 1305, 37.1 KB (checked in by benoitg, 6 years ago)
  • Apply portability patches by David Young <dyoung@…>. These have been reviewed, but not tested.
  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
Line 
1# $Id$
22007-11-01 Benoit Gr�goire  <bock@step.polymtl.ca>
3        * Apply portability patches by David Young <dyoung@pobox.com>.  These have been reviewed, but not tested.
4
52007-10-18 Benoit Gr�goire  <bock@step.polymtl.ca>
6        * fw_iptables.c: From Philippe April:  reverted change made in 1241 so we properly remove the entry from mangle.WiFiDog_Incoming when kicking out users, it was affecting statistics
7        * Update doxygen.cfg.in for latest version and to fix path ambiguity during make dist.
8        * Release 1.1.4
9
102007-07-06 Benoit Gr�goire  <bock@step.polymtl.ca>
11        * Makefile.am:  Slight change in make ipk tagrget.  It seems that sometimes builddir isn't defined.  srcdir works just as well in this case.
12       
132007-06-27 Benoit Gr�goire  <bock@step.polymtl.ca>
14        * util.c:  Fix while loop initialisation bug
15        * conf.h:  Forgot to change the value of NUM_EXT_INTERFACE_DETECT_RETRY to actually make it wait forever.
16        * Remove hardcoded authserver paths.  Can now be defined in the config file (auth server section).
17        * Centralise browser redirect code to simplify code
18        * Add manual logout URL, based in part on work by David Bird
19        * Release 1.1.3 final
20       
212007-06-24 Benoit Gr�goire  <bock@step.polymtl.ca>
22        * Close #321:  Make the Gateway retry forever if it cannot find it's interface.  You never know when someone may finally replug the network cable or something...
23        * Close #332:  Apply patch from Laurent Marchal. biguphpc<AT>gmail<DOT>com
24        * fw_iptables.c:  Fix error in iptables_fw_access().  Rules were created as ACCEPT instead of DROP
25        * firewall.c:  Fix bug in fw_sync_with_authserver().  The traffic for the validation period of a user who validated his account while connected wouldn't get counted.
26        * doc/wifidog_firewall_map.dia:  At long last, full documentation of the firewall.  We would have avoided a lot of stupid mistakes if we produced that sooner.
27        * Release 1.1.3_rc1
28
292007-05-24 Benoit Gr�goire  <bock@step.polymtl.ca>
30        * wdctl_thread.c:  Fix #324, again.  Credit goes to Medea, I misunderstood his instructons.
31        * From David Bird <david@coova.com> libhttpd/: Fix #266 - don't process query string parameters and keep them in that request.path.
32
332007-05-18 Benoit Gr�goire  <bock@step.polymtl.ca>
34        * wdctl_thread.c:  Fix #324
35       
362007-04-26 Benoit Gr�goire  <bock@step.polymtl.ca>
37        * wifidog.conf:  Improve comments and add examples of blocking access to the upstream LAN.
38
392007-04-26 Benoit Gr�goire  <bock@step.polymtl.ca>
40        * conf.h:  The DEFAULT_CHECKINTERVAL was 5 instead of 60 (as stated in the config file) which caused huge needless load on the auth servers, and needless ping traffic towards the clients if it wasn't manually set.
41
422007-04-09 Benoit Gr�goire  <bock@step.polymtl.ca>
43        * Makefile.am:  Slight path fix when using building make ipk.  Tell me if you have trouble with this
44
452007-01-06 Benoit Gr�goire  <bock@step.polymtl.ca>
46        * contrib/ Add contrib dir to collect the scripts and other code distributed with, but not really part of wifidog.
47        * Include the scripts used to build a ipkg on Openwrt RC6 and 0.9
48        * Modify the build system to finally be able to build wifidog directly from the wifidog directory using the same files
49                used to make the official .ipk, without having to copy ANYTHNG to the openwrt SDK.
50                At last, there is now a new target:  make ipk make ipk OPENWRTSDK=path_to_openwrt_sdk
51        * ipk/ Removed the obsolete OpenWRT RC4 scripts
52        * README.openwrt:  Update
53        * scripts/openwrt/ remove obsolete dir.
54        * contrib/dump_fw.sh:  Convenience script for firewall debugging.
55               
562007-01-06 Benoit Gr�goire  <bock@step.polymtl.ca>
57        * Documentation update in the code
58        * Released 1.1.3_beta6
59
602006-10-26 Benoit Gr�goire  <bock@step.polymtl.ca>
61        * src/conf.h: Fix #238 by using $sysconfdir to compute the default config-file location.
62       
632006-10-08 Alexandre Carmel-Veilleux <acv@miniguru.ca>
64        * Changed my email in a few files.
65        * Broken down some printf's on multiple lines.
66        * Added comments.
67
682006-09-14 Benoit Gr�goire  <bock@step.polymtl.ca>
69        * src/util.c, src/conf.h: Fix autodectection of the External interface if not specified in the config file.  If the interface (typically pppoe) wasn't yet fully up when wifidog starts, wifidog would stop every connection from going trough.  It will now retry every second for up to two minutes, and then exit with a fatal error if it can't successfully detect it.
70
712006-02-23 Philippe April <philippe@ilesansfil.org>
72        * src/fw_iptables.c:
73        * Changed order in the filter.FORWARD chain
74        * Added TCPMSS rule
75        * Fixed deleting the rules on shutdown
76        * Fixed wdctl reset problem
77        * Released 1.1.3_beta4
78
792006-02-06 Benoit Gr�goire  <bock@step.polymtl.ca>
80        * src/fw_iptables.c: Fix deleting the rules on shutdown.
81
822006-01-31 Benoit Gr�goire  <bock@step.polymtl.ca>
83        * Release 1.1.3_beta2
84       
852006-01-31 Benoit Gr�goire  <bock@step.polymtl.ca>
86        * src/fw_iptables.c:  Add the global ruleset to the nat table to fix #65.
87        Add the table parameter to iptables_load_ruleset() and iptables_compile
88        * libhttpd/protocol.c:  Fix pointer type mismatch
89    * src/conf.c,h:  Remove deprecated option AuthServMaxTries (which was already ignored anyway.       
90       
912006-01-23 Benoit Gr�goire  <bock@step.polymtl.ca>
92        * src/conf.h:  Fix the value of DEFAULT_AUTHSERVPATH and completely wrong code comment.  Not the default indicated in the config file and the define are in sync.
93
942006-01-17 Mina Naguib <mina@ilesansfil.org>
95        * Ingisgnificant cleanup  of CVS artifacts after svn migration
96
972005-11-24 Philippe April <philippe@ilesansfil.org>
98        * Bad idea
99
1002005-11-01 Max Horvath <max.horvath@maxspot.de>
101        * Added .project to .cvsignore
102
1032005-11-01 Philippe April <philippe@ilesansfil.org>
104        * Added OPTIONS section in wifidog-init (example: enable syslog)
105
1062005-10-09 Philippe April <philippe@ilesansfil.org>
107        * Changed html pages, added info to wdctl status
108
1092005-10-07 Philippe April <philippe@ilesansfil.org>
110        * Released 1.1.3_beta1
111
1122005-10-03 Philippe April <philippe@ilesansfil.org>
113        * libhttpd: Fixed two bugs parsing the GET query string making wifidog segfault
114
1152005-09-24 Mina Naguib <mina@ilesansfil.org>
116        * New wdctl command "restart" which will get wifidog to restart itself
117        while preserving the existing clientlist.  Perfect for 0-downtime
118        upgrading!
119        * safe.c: New safe_fork that croaks if the fork fails, also takes care of
120        closing some global file descriptors for the child
121        * debug.c: Now also logs the PID as part of every entry
122        * gateway.c: Handler for SIGCHLD now waitpid()s with WNOHANG flag to prevent deadlock
123        when the handler is called and another wait() or waitpid() is used
124        * util.c: execute() now uses waitpid() instead of wait() to reap only the child
125        it fork/executed
126        * Extra debugging entries throughout code
127
1282005-09-24 Mina Naguib <mina@ilesansfil.org>
129        * conf.c: Pre-emptive bugfix - harsh lockdown of parsing trusted MAC
130        addresses from config file
131
1322005-09-24 Philippe April <philippe@ilesansfil.org>
133        * (finally) Added {Saul Albert,Jo Walsh,Schuyler}'s patch (thank you!) to send
134        the GW interface's mac address as the node_id if no node_id is specified. It allows
135        the use of generic configuration files without the need to hardcode the
136        node_id in.
137        * Added TrustedMACList configuration variable which allows specifying
138        MAC addresses which are allowed to go through without authentication.
139        * Updated OpenWrt instructions.
140
1412005-09-08 Philippe April <philippe@ilesansfil.org>
142        * Added compile instructions and installation for OpenWrt Whiterussian-rc2
143        * Released 1.1.2
144
1452005-05-30 Mina Naguib <mina@ilesansfil.org>
146        * New wdctl command "restart" which will get wifidog to restart itself while preserving the existing clientlist.  Perfect for 0-downtime upgrading!
147        * safe.c: New safe_fork that croaks if the fork fails, also takes care of closing some global file descriptors for the child
148        * debug.c: Now also logs the PID as part of every entry
149        * gateway.c: Handler for SIGCHLD now waitpid()s with WNOHANG flag to prevent deadlock when the handler is called and another wait() or waitpid() is used
150        * util.c: execute() now uses waitpid() instead of wait() to reap only the child it fork/executed
151        * Extra debugging entries throughout code
152       
1532005-05-24 Mina Naguib <mina@ilesansfil.org>
154        * wdctl.c: Minor bugfix pointed out by David Vincelli: When an invalid
155        command is given to wdctl, the error message showed "Invalid command:
156        wdctl" instead of the actual command supplied
157
1582005-05-23 Philippe April <philippe@ilesansfil.org>
159        * Released 1.1.2_pre1
160
1612005-05-23 Mina Naguib <mina@ilesansfil.org>
162        * fw_uptables.c: When appending call to chain WiFiDog_Outgoing from
163        nat.prerouting, add it via -A (at end) instead of -I 1 (at beginning) to
164        allow for existing nat forwarding.
165
1662005-05-16 Mina Naguib <mina@ilesansfil.org>
167        * centralserver.c: read()s from central server in auth_server_request() are
168        now timed-out (via select).  This is hopefully a bugfix to the
169        thread-freezing problem.
170
1712005-05-06 Mina Naguib <mina@ilesansfil.org>
172        * Bugfix non-RFC compliant HTTP requests using \n instead of \r\n as line
173        terminations as per email from ludocornut@users.sourceforge.net
174
1752005-04-28 Philippe April <philippe@ilesansfil.org>
176        * Released 1.1.2_beta2
177
1782005-04-28 Mina Naguib <mina@ilesansfil.org>
179        * wifidog.conf: Make the default ruleset for validating users = allow all
180        (except sending SMTP)
181
1822005-04-20 Philippe April <philippe@ilesansfil.org>
183        * fw_iptables.c: Insert ourselves at the end of filter.FORWARD instead of
184        at the beginning since important FW instructions are located there on the
185        WRT54Gs when used with some DSL providers and we never execute them
186        otherwise.
187        * Released 1.1.2_beta1
188
1892005-04-03 Philippe April <philippe@ilesansfil.org>
190        * Fixed issue with FAQ
191        * ipkg/rules: If autogen.sh doesn't exist, it's ok. 'configure' will.
192
1932005-04-01 Philippe April <philippe@ilesansfil.org>
194        * Duplicated auth server list in NAT table to fix the issue
195        of using an auth server on port 80, since port 80 was being systematically
196        redirected to 2060 otherwise.
197        * Released 1.1.1
198
1992005-03-29 Mina Naguib <mina@ilesansfil.org>
200        * Added FAQ document copied from wiki
201
2022005-03-22 Philippe April <philippe@ilesansfil.org>
203        * Released 1.1.0
204
2052005-03-20 Mina Naguib <mina@ilesansfil.org>
206        * More verbose debugging output
207
2082005-03-12 Mina Naguib <mina@ilesansfil.org>
209        * More debugging output
210        * Document ugly hack involving tid_fw_thread
211        * SIGPIPE now ignored (as it's comment said) instead of being sent to the
212        handler for SIGCHLD
213        * Bugfix firewall destruction not happening from termination handler - had
214        to move explicit thread kills after, not before, firewall destruction
215
2162005-03-11 Mina Naguib <mina@ilesansfil.org>
217        * If external interface was unspecified in the conf file, try to determine
218        it from the default route
219        * If external interface is known, specify it in the trigger rule in
220        nat.PREROUTING to prevent the rule from matching traffic inbound to the
221        router itself.  This should fix the issue raised by Philippe and Pascal on
222        the mailing list
223        * Bugfix: UNDO ABOVE 2 ITEMS. Aparently you cannot use the "-o" iptables
224        option in nat.PREROUTING which makes knowing external_interface useless
225        * Added new chain in nat.PREROUTING that explicitly allows all traffic to
226        the router's internal IP from the internal interface, effectively
227        addressing the same above problem
228
2292005-03-07 Mina Naguib <mina@ilesansfil.org>
230        * auth.c: Got rid of legacy _http_output and _http_redirect - replaced them
231        with libhttpd functions and http_wifidog_header/http_wifidog_footer
232        * auth.c: When re-directing to auth server now respects SSL setting instead
233        of always http+port 80
234        * auth.c: Better debugging output of what it's doing when it acts on auth
235        server response
236        * A little bit more care with buffers and their sizes
237        * Minor whitespace tweaking and a couple of internal doc typo fixes
238
2392005-03-06 Mina Naguib <mina@ilesansfil.org>
240        * Check return values of pthread_create
241        * Internal documentation touch-ups
242        * auth.c: Bugfix invalid http header sent by _http_output
243        * Bugfix traffic counter read from iptables as long int instead of long
244        long int
245        * Minor insignificant code touch-ups:
246                * Replace pthread_mutex_lock/unlock calls with appropriate
247                LOCK_FOO/UNLOCK_FOO macros for consistency
248                * Lock first before using some variables, not after
249                * Indentation adjustments
250
2512005-03-04 Mina Naguib <mina@ilesansfil.org>
252        * Bugfix huge uptime pointed out to be by Philippe - was caused when the
253        date is set (with ntpclient for example) after wifidog starts
254        * Beautified "Uh oh!" apology screens and redirection screen
255
2562005-03-02 Alexandre Carmel-Veilleux <acv@acv.ca>
257        * Ifdef'd out the bits that are Linux specific if __linux__ is not
258          defined.
259
2602005-03-01 Mina Naguib <mina@ilesansfil.org>
261        * Minor visual tweaks to the web interface
262
2632005-03-01 Philippe April <philippe@ilesansfil.org>
264        * Tagged v1_1_0_beta3
265
2662005-02-28 Mina Naguib <mina@ilesansfil.org>
267        * Do not update the last_updated field on incoming traffic - update it on
268        outgoing traffic only.  This should be a much more reliable indication of
269        client no longer being there
270        * WifiDog status is now viewable with a web browser at
271        http://ip:port/wifidog/status
272        * Added new web hook for http://ip:port/wifidog
273        * Beautified web interface at http://ip:port/wifidog/*
274
2752005-02-24 Mina Naguib <mina@ilesansfil.org>
276        * auth_server_request now returns AUTH_ERROR on error instead of AUTH_VALIDATION_FAILED
277        * centralserver.c: Fix typo (was =+, made it +=) that made the response
278        from the auth server corrupted in memory if the entire response would not
279        fit in 1 packet and retrieved with 1 read() call
280        * Better logging of details and calling of mark_* (auth+online/offline)
281
2822005-02-22 Philippe April <philippe@ilesansfil.org>
283        * Tagged v1_1_0_beta2
284
2852005-02-20 Mina Naguib <mina@ilesansfil.org>
286        * New safe.c with safe_malloc, safe_strdup, safe_asprintf and
287        safe_vasprintf with propper logging and exit when error. Replaced all
288        instances of original with safe versions in all files
289        * Fix memory leak in iptables_fw_counters_update
290        * Partial merge from CaptiveDNS branch: Consolidated much of the networking
291        calls to the auth servers into a magical function called connect_auth_server()
292        that's responsible for dns lookup, connecting, marking servers bad, marking
293        online/auth_online, and refreshing the firewall rules.
294        * Partial merge from CaptiveDNS branch: Added new functions mark_auth_online(),
295        mark_auth_offline() and is_auth_online() - similar in nature to is_online()
296        etc. except tailored to decide on auth servers status - currently being called by
297        connect_auth_server()
298        * Partial merge from CaptiveDNS branch: Different apology in 404 handler
299        depending on whether internet is down or just auth server is down
300        * Partial merge from CaptiveDNS branch: wdctl status now shows status of
301        is_online and is_auth_online
302        * Fixed several inconsistencies regarding the parity and size of
303        incoming/outgoing counters.  Standardized on "unsigned long long int" in
304        declarations and *printf/*scanf formats
305
3062005-02-16 Philippe April <philippe@ilesansfil.org>
307        * ipkg/rules - When we clean, forgot to delete ipkg-build-stamp
308
3092005-02-15 Mina Naguib <mina@ilesansfil.org>
310        * Now also reports wifidog_uptime when it pings the server, as well as
311        shows it in wdctl status
312
3132005-02-13 Mina Naguib <mina@ilesansfil.org>
314        * Completely re-did the iptables rules.  Most of the rules are now in the
315        filter table instead of the nat table.  Also DROPs are now replaced with
316        REJECTs to help tell the user connection refused instead of endless pauses
317        * Bugfix: Traffic from client to router was counted twice in the "outgoing"
318        bytecount since it increased both counters in mangle.* and filter.* - Got
319        rid of TABLE_WIFIDOG_WIFI_TO_GW completely since it's unneeded
320
3212005-02-12 Mina Naguib <mina@ilesansfil.org>
322        * Stricter format rules for all *scan* functions hunting for IPs and MAC addresses
323        * fw_iptables.c: Make sure scanned IP address is a valid IP address
324        * firewall.c: Fix memory leak in arp_get
325        * libhttpd/protocol.c: Abort connection if read non-ascii from client. This
326        is often a telltale sign of a program such as skype using port 80 for
327        non-http requests - this therefore ends the thread as early as possible
328        instead of having it lay around for a while trying to get a valid http
329        request and taking up resources
330        * ping_thread.c: When pinging auth server now also sends sys_uptime, sys_memfree
331        and sys_load
332        * -v commandline option now shows wifidog version
333
3342005-02-11 Philippe April <philippe@ilesansfil.org>
335        * Tagged v1_1_0_beta1
336
3372005-02-11 Philippe April <philippe@ilesansfil.org>
338        * Fixed a bug in counting the traffic between client and gateway
339        * Alpha8
340
3412005-02-04 Mina Naguib <mina@ilesansfil.org>
342        * Partially bugfix apology when offline
343        * ipkg/rules: More tweaking to make it build nicely with recent openwrt
344        buildroots
345
3462005-02-03 Mina Naguib <mina@ilesansfil.org>
347        * Keep track of last times we successfully & unsuccessfully spoke to the
348        auth server/used DNS. Then, if we know we're not online, show a little
349        apology to the user instead of re-directing them to the auth server.
350        * ipkg/rules: Added some extra version detection to auto-detect versions
351        of kernel, iptables and ipkg-utils instead of having them hardcoded.  This
352        makes creating ipkg's work with different OpenWRT releases
353        * fw_iptables.c: Fixed memory leak caused by not freeing return from
354        iptables_compile in iptables_load_ruleset
355        * http.c: Deleted unused call to client_list_find
356        * http.c: /about URL now shows wifidog version
357        * Cosmetic typo fixes
358
3592005-02-03 Philippe April <isf_lists@philippeapril.com>
360        * Ping the users everytime we check their counters, that way we keep them
361        alive
362        * Optional ExternalInterface
363        * Optional GatewayAddress (we discover it. finally.)
364        * We check for the traffic from the clients to the firewall, to catch the
365        traffic the icmp ping is generating
366        * Fixed bug where we were doing the opposite of what desired when checking if authentication server was alive
367        * Bumped to alpha7
368
3692005-01-23 Philippe April <isf_lists@philippeapril.com>
370        * wdctl status will return the auth servers in the linked list
371        * We'll now forward to the auth server to display the used-to-be-ugly
372        messages like "go ahead and validate your account you have 15 minutes"
373        * Bumped to alpha6
374
3752005-01-06 Philippe April <philippe@philippeapril.com>
376        * fw_iptables.c: Changed REJECT to DROP for the end of the table Unknown,
377          REJECT doesn't seem to be available in the NAT table.
378        * fw_iptables.c: Indented things
379        * fw_iptables.c Fix: Created the authservers table at the beginning and destroy
380          at exit time only to avoid recreating it everytime
381        * Bumped to alpha5
382
3832005-01-05 Philippe April <philippe@philippeapril.com>
384        * Typo, fixed some spaces (mostly esthetic)
385        * Bumped to alpha4
386
3872004-12-19 Alexandre Carmel-Veilleux <acv@acv.ca>
388        * src/fw_iptables.c: Tweak of auth_server firewall rule setting
389          code. (and promptly undone, fixing the cause is better then
390          fixing the symptom)
391        * src/conf.c: NULL-fill auth_server struct so that
392          auth_server->last_ip always equals NULL when first filled.
393
3942004-12-16 Benoit Gr�goire  <bock@step.polymtl.ca>
395        * src/fw_iptables.c: Display iptables command that is run in debug mode.
396       
3972004-12-07 Benoit Gr�goire  <bock@step.polymtl.ca>
398        * src/firewall.c: Fix reversed incoming and outgoing connections in statistics code
399        * bump version to alpha3
400
4012004-11-29 Alexandre Carmel-Veilleux <acv@acv.ca>
402        * wifidog.conf: Fixed firewall rule bug.
403        * src/fw_iptables.c: Unknown user default block rule not "REJECT"
404          instead of "DROP"
405
4062004-11-23 Alexandre Carmel-Veilleux <acv@acv.ca>
407        * src/conf.c: Fixed a NULL pointer dereference in get_ruleset().
408
4092004-11-22 Alexandre Carmel-Veilleux <acv@acv.ca>
410        * libhttpd/api.c: Fix leak in HttpdEndRequest().
411        * src/ping_thread.c: Fix auth_server IP change code with latest
412          from previous branch.
413        * src/conf.h: Same as above.
414        * src/fw_iptables.c: Same as above.
415        * src/conf.[ch]: Firewall rule set parsing code.
416        * wifidog.conf: Default firewall rule set defined.
417        * src/fw_iptables.[ch]: Firewall rule set enacting code.
418        * configure.in: bumped version to 1.1.0-alpha2
419
4202004-11-18 Benoit Gr�goire  <bock@step.polymtl.ca>
421        * src/ping_thread.c: Merge phil's bug fixes from stable branch
422        * ipkg/rules:  Merge phil's bug fixes from stable branch
423        * configure.in:  Set version to 1.1.0alpha
424       
4252004-11-18 Alexandre Carmel-Veilleux <acv@acv.ca>
426        * src/fw_iptables.[ch]: Merged in Phil's patch.
427        * src/*: Added ping_thread hooks to reset authserver table in the
428          firewall if it notices the auth_servers changing IPs.
429
4302004-11-17 Alexandre Carmel-Veilleux <acv@acv.ca>
431        * libhttpd/*: libhttpd has been taken behind the shed and shot in
432          the back of the head. The replacement separates the request struct
433          from the server struct. It's thread safe if none of OUR threads
434          write to server.
435        * src/*: All the changes to handle the new libhttpd and also to
436          move over to a worker thread system. http_callback_auth() no
437          longer spawns a thread either.
438        * *: this update preceded by a cvs tag PRE_NEW_LIBHTTPD.
439        * *: You want to check the mailing list archive also.
440
4412004-11-10 Alexandre Carmel-Veilleux <acv@acv.ca>
442        * libhttpd/protocol.c: select() based timeout.
443
4442004-10-31 Alexandre Carmel-Veilleux <acv@acv.ca>
445        * configure.in: bumped version number to "1.0.2-pre1" since we
446          already have ile sans fil hot spots advertising "1.0.1".
447
4482004-10-30 Alexandre Carmel-Veilleux <acv@acv.ca>
449        * src/ping_thread.c: asynch read(). fixed bug in byte counting.
450
4512004-10-29 Philippe April <philippe@philippeapril.com>
452        * ipkg/rules: added conffiles so it does not overwrite config files
453
4542004-10-29 Alexandre Carmel-Veilleux <acv@acv.ca>
455        * src/ping_thread.c: Much new debugging information
456        * multiple files: Logging for all mutexes
457
4582004-10-28 Philippe April <philippe@philippeapril.com>
459        * ipkg/rules: building ipkg-tools before packaging
460
4612004-10-28 Alexandre Carmel-Veilleux <acv@acv.ca>
462        * multiple files: Implemented a FirewallRule config command, it
463          doesn't actually do anything yet.
464        * libhttpd: #if 0'd out lots of request parsing code.
465        * libhttpd: changed URL parsing.
466
4672004-10-27 Philippe April <philippe@philippeapril.com>
468        * ipkg/rules: removed --build=mipsel from ./configure
469
4702004-10-26 Philippe April <philippe@philippeapril.com>
471        * ipkg/rules: sed -i is not standard, did a workaround.
472        * ipkg/rules: openwrt's buildroot has changed, modified ipkg
473        accordingly, please read README.openwrt
474
4752004-10-22 Alexandre Carmel-Veilleux <acv@acv.ca>
476        * src/various: Added wd_gethostbyname, a thread-safe (serialized)
477          version of gethostbyname.
478
4792004-10-15 Alexandre Carmel-Veilleux <acv@acv.ca>
480        * src/auth.c: Fixed hard coded port.
481
4822004-10-09 Alexandre Carmel-Veilleux <acv@acv.ca>
483        * src/gateway.c: More logging on termination_handler.
484
4852004-10-08 Alexandre Carmel-Veilleux <acv@acv.ca>
486        * src/wdctl_thread.c: Fix wdctl_status to return all connected
487        users.
488
4892004-10-07 Alexandre Carmel-Veilleux <acv@acv.ca>
490        * src/conf.c: Fixed mark_auth_server_bad() for the case where there
491        is only one auth server.
492        * src/ping_thread.c: Added extra debugging.
493        * src/ping_thread.c: Fixed file descriptor leak.
494        * src/centralserver.c: Fixed many file descriptor leaks.
495        * src/centralserver.c: Failure of read() no longer fatal.
496        * src/centralserver.c: In case of failure, return from
497        auth_server_request() is no longer an undefined authresponse.
498        * src/util.c: Fixed typo in logging.
499        * src/wdctl_thread.c: Added logging when socket path is too long.
500        * src/debug.c: Debug now logs the time of an event.
501
5022004-08-30 Alexandre Carmel-Veilleux <acv@acv.ca>
503        * wifidog.conf: Corrected an example
504        * README.openwrt: Typo fixed, editorial changes
505        * ChangeLog: Benoit's last update entry was set in the future ;-).
506        * All over src/: Compiled with -Wall and fixed all nagging.
507
5082004-08-30 Benoit Gr�goire  <bock@step.polymtl.ca>
509        * Makefile.am: Add rpm target
510        * wifidog.spec.in:  Rework spec file.  Now works and include the init script
511        * ipkg/rules:  Deal with the incomplete init.d system of the OpenWrt.   Install scripts/init.d/wifidog as /usr/bin/wifidog-init, and call wifidog-init start from S65wifidog.
512        * scripts/openwrt/S65wifidog: Add file
513        * scripts/init.d/wifidog:  Fix performance and protability problem.  Make it chkconfig compliant.  Test that chkconfig --add wifidog works (at least on mandrake)
514        * src/wdctl.c:  Change some message, make sure wdctl return 0 unless there is an error.
515       
5162004-08-30 Benoit Gr�goire  <bock@step.polymtl.ca>
517        * README.openwrt:  Documentation update
518        * Makefile.am:  Make a ipkg target to ease WRT54G installation
519        * ipkg/rules:  Add wdctl and the init.d script.
520        * Add BUILDROOT variable to the build system so we can use it when needed
521        * src/ping_thread.c:  Have the server ping immediately on boot.  Note that this will only help if the second server responds.  The logic of the ping itself should be changed so it iterates in the list until it finds one that responds or exausts the list
522        * wifidog.conf:  Add more doc, and (most) of ISF's default config in comments.
523        * Bump version in anticipation for release
524
5252004-08-29 Guillaume Beaudoin <isf@soli.ca>
526        * wifidog.spec.in: Changed prefix to match scripts/init.d/wifidog.
527        * debian/rules: Configuration and init.d file added.
528        * debian/control: Description and Depends field changed.
529        * Makefile.am: Added scripts directory and ipkg/rules file.
530
5312004-08-29 Pascal Leclerc <pascal@plec.ca>
532        * scripts/init.d/wifidog: Startup/shutdown script for Wifidog deamon
533
5342004-08-29 Guillaume Beaudoin <isf@soli.ca>
535        * wifidog.spec.in: Must be in decending chronological order.
536
5372004-08-29 Guillaume Beaudoin <isf@soli.ca>
538        * wifidog.spec.in: Remove some leftover from libOFX.
539        * Makefile.am: Include debian/* files.
540        * We should now be able to package .deb and .rpm from dist.
541
5422004-08-27 Benoit Gr�goire  <bock@step.polymtl.ca>
543        * README.openwrt,src/conf.c,h:  Documentation update
544        * src/gateway.c, src/ping_thread.c, src/wdctl.c, src/wdctl_thread.c:  Fix linking problems related to errno.h and extern int errno
545       
5462004-08-26 Pascal Leclerc <pascal@plec.ca>
547        * Makefile.am: Remove phpauth from EXTRA_DIST
548
5492004-08-25 Alexandre Carmel-Veilleux <acv@acv.ca>
550        * src/auth.c: Path as changed in 1.26 was preceded by a /, the path already contains a / so it would yield http://host//path/
551
5522004-08-25 Benoit Gr�goire  <bock@step.polymtl.ca>
553        * src/auth.c:  Remove hardcoded path.
554       
5552004-08-23 Benoit Gr�goire  <bock@step.polymtl.ca>
556        * src/ping_thread.c:  Send the gateway id to the central server during ping, so the server know which gateway checked in, and then knows for sure that it is up (well, once the server implements it...).
557       
5582004-08-23 Benoit Gr�goire  <bock@step.polymtl.ca>
559        * src/centralserver.c:  Fix path for auth by appending /auth/ to auth_server->authserv_path.  Wifidog works again.
560       
5612004-08-20 Alexandre Carmel-Veilleux <acv@acv.ca>
562        * Debug output of all HTTP transactions and their responses.
563        * Changed ipkg to use wifidog.conf from the base tree
564        * Send url to central server for link back out
565
5662004-08-19 Alexandre Carmel-Veilleux <acv@acv.ca>
567        * Sort of fixed the hanging thread (with an explicit thread kill)
568        * Fixed ping code
569
5702004-08-13 Alexandre Carmel-Veilleux <acv@acv.ca>
571        * All Auth Server configuration now handled by the "AuthServer"
572        directive.
573        * The "AuthServer" directive is now multi line.
574
5752004-08-11 Alexandre Carmel-Veilleux <acv@acv.ca>
576        * Added code to do heartbeat.
577        * Changed AuthServer yet again.
578
5792004-08-09 Alexandre Carmel-Veilleux <acv@acv.ca>
580        * WiFiDog now can read multiple auth servers in its config file.
581        * Added functions to handle the auth servers list.
582        * WiFiDog can failover between servers for its internal requests.
583        * Firewall sets rules for all auth servers.
584
5852004-08-06 Alexandre Carmel-Veilleux <acv@acv.ca>
586        * AuthservPath no longer mandatory in config file.
587
5882004-08-04 Philippe April <wifidog@philippeapril.com>
589    * Renamed iptables.[ch] to fw_iptables.[ch]
590
5912004-08-03 Alexandre Carmel-Veilleux <acv@acv.ca>
592        * Fixed broken sockaddr_un usage in wdctl.c and wdctl_thread.c
593
5942004-08-01 Benoit Gr�goire  <bock@step.polymtl.ca>
595        * Delete everything in phpauth, it will now live in it's own module (wifidog-auth)
596
5972004-08-01 Alexandre Carmel-Veilleux <acv@acv.ca>
598        * Added wdctl facility
599
6002004-07-21 Philippe April <wifidog@philippeapril.com>
601    * Cleaned up the ipkg makefile
602    * Added makefile to build on Debian
603
6042004-07-19 Alexandre Carmel-Veilleux <acv@acv.ca>
605        * Build script for OpenWRT ipkg
606
6072004-07-06 Alexandre Carmel-Veilleux <acv@acv.ca>
608        * Added cache control to default error message returned.
609
6102004-07-05 Philippe April <papril777@yahoo.com>
611    * Fixed an endless loop in client_list_delete
612
6132004-06-10 Alexandre Carmel-Veilleux <acv@acv.ca>
614        * Added debugging to libhttpd so that httpdGetConnection() traces
615          its execution into ./httpdGetConnection.log. This should be removed
616          once it's no longer needed or put within #ifdef DEBUG's.
617
6182004-06-01 Philippe April <papril777@yahoo.com>
619    * Sending User-Agent header to central server
620
6212004-05-28 Philippe April <papril777@yahoo.com>
622    * Fixed bugs implemented after major changes
623
6242004-05-27 Benoit Gr�goire  <bock@step.polymtl.ca>
625        * Massive Doxygen update in all files.  IMPORTANT: The new convention is:  @brief in the .h, long description and parameters in the .c
626        * Cleaned up some more issues in my notes taken at the formal review
627        * client_list.c,h:  Make client_list_free_node() private, define and document client_list_mutex here
628        * config.c:  Start the hunt for evil globals:  Get rid of the config global
629        * doc/doxygen.cfg.in:  Enable generation of internal doc, a few other tweaks
630        * Documentation now generates a TODO list and DEPRECATED list, please look at them
631
6322004-05-27  Alexandre Carmel-Veilleux <acv@acv.ca>
633        * Cleaned up all the issues brought forward in the code review
634          on 2004-05-26 at Benoit's. There are to many changes to list
635          individually.
636
6372004-05-15  Philippe April <papril777@yahoo.com>
638    * Commented out cookie handling in libhttpd because it segfaults if
639    you pass a particular formatting/buggy one
640
6412004-05-14  Philippe April <papril777@yahoo.com>
642    * Fixed crash when receiving SIGPIPE signal with write() would fail
643
6442004-05-13  Philippe April <papril777@yahoo.com>
645    * Advertise to the central server when we logged out a user
646
6472004-05-12  Philippe April <papril777@yahoo.com>
648    * Sending a "stage" when doing authentication for the server
649    to be able to know if it's a login, or just a counters update.
650
6512004-05-11  Philippe April <papril777@yahoo.com>
652    * Now tracking the hotspot id and ip in database
653
6542004-05-07  Philippe April <wifidog@philippeapril.com>
655    * Now we store both incoming and outgoing counters on server
656    and expire if no activity at all on both
657    * Changed the structure of nodes a little
658
6592004-05-07  Philippe April <wifidog@philippeapril.com>
660    * New parameter ExternalInterface
661    * Made possible to count inbound traffic by inserting new rules
662
6632004-05-07  Philippe April <wifidog@philippeapril.com>
664    * Cleaned up common.h from files
665
6662004-05-07  Philippe April <wifidog@philippeapril.com>
667    * Made iptables' tables DEFINEs instead of being hardcoded
668
6692004-05-07  Philippe April <wifidog@philippeapril.com>
670    * Fixed typo
671
6722004-05-06  Philippe April <papril777@yahoo.com>
673    * Cleanups and standardized things
674
6752004-05-06  Philippe April <papril777@yahoo.com>
676    * Cleanups in fw_counter function
677
6782004-05-05  Philippe April <papril777@yahoo.com>
679    * Calling iptables directly instead of using shell scripts
680    for fw_init, fw_destroy and fw_allow/fw_deny
681    * Removed shell script for fw.counters
682    * Fixed memory leaks
683    * Moved most of the iptables-specific (all but the counters)
684    to iptables.c to modularize a bit more
685    * Hack to allow deciding if we want FW calls' messages quiet or not
686
6872004-04-23  Philippe April <papril777@yahoo.com>
688    * Fixed a debug line
689
6902004-04-22  Philippe April <papril777@yahoo.com>
691    * Major changes, cleaned up code
692    * Changed the way firewall tags traffic
693
6942004-04-21  Philippe April <papril777@yahoo.com>
695    * Changed fw.destroy so it cleans up more in a while loop
696
6972004-04-20  Alexandre Carmel-Veilleux <acv@acv.ca>
698        * fixed expiration time
699
7002004-04-20  Philippe April <papril777@yahoo.com>
701    * A lot of changes regarding debugging facilities and added logging
702    to syslog
703    * Removed possibility to specify port on command line
704
7052004-04-19  Philippe April <papril777@yahoo.com>
706        * Changed some debugging severity
707
7082004-04-19  Benoit Gr�goire  <bock@step.polymtl.ca>
709        * Properly integrate libhttpd into the source tree ;)  Note that this will create a proper system wide shared library for libghttpd.  Still to be done:  1- Store Mina's patch somewhere,  in case we want to upgrade libhttpd.  2-Add configure option not to build httpd, and use an already installed one.
710
7112004-04-18  Alexandre Carmel-Veilleux <acv@acv.ca>
712        * Fixed pthread_cond_timedwait. The mutex needed to be locked as
713        per the POSIX spec, yet Linux or Mac OS X don't care...
714        * Fixed the double SIGTERM handler on Linux...
715
7162004-04-17  Alexandre Carmel-Veilleux <acv@acv.ca>
717        * Added work around for uClibc bug in auth.c
718
7192004-04-17  Philippe April <papril777@yahoo.com>
720        * Fixed firewall scripts to make them standard and some firewall functions
721
7222004-04-17  Alexandre Carmel-Veilleux <acv@acv.ca>
723        * Updated documentation in firewall.c
724
7252004-04-17  Philippe April <papril777@yahoo.com>
726        * Fixed path returning to gateway in phpauth/login/index.php
727
7282004-04-16  Alexandre Carmel-Veilleux <acv@acv.ca>
729        * Merged in libhttpd into the source tree
730
7312004-04-16  Philippe April <papril777@yahoo.com>
732        * Fixed CRLF/formatting in phpauth/login/index.php
733        * Added some documentation for firewall.c, commandline.c
734        * Removed an unnecessary line dist_sysconf_DATA from Makefile.am
735
7362004-04-15  Alexandre Carmel-Veilleux <acv@acv.ca>
737        * Changed the locking mechanism, now all access to t_node * structs
738        are properly protected.
739
7402004-04-15  Alexandre Carmel-Veilleux <acv@acv.ca>
741        * Connection now closed if counter hasn't change for one full
742        period.
743
7442004-04-14  Philippe April <papril777@yahoo.com>
745        * Fixed shell script hardcoded interface
746
7472004-04-14  Alexandre Carmel-Veilleux <acv@acv.ca>
748        * Existing IPs are logged off when they're authenticated again.
749
7502004-04-14  Alexandre Carmel-Veilleux <acv@acv.ca>
751        * Fixed clean up so it happens at the right time.
752
7532004-04-14  Alexandre Carmel-Veilleux <acv@acv.ca>
754        * Major retooling of insert_userclass(), fixed seg fault.
755        * The program now works as advertised.
756
7572004-04-14  Alexandre Carmel-Veilleux <acv@acv.ca>
758        * Switched to threads. Alpha quality build, at best
759
7602004-04-12  Alexandre Carmel-Veilleux <acv@acv.ca>
761        * Changed child return value handling, again. Now it's actually
762        using the real value instead of the flag.
763        * The http.c authentication code now closes the http connection
764        from the user.
765
7662004-04-11  Alexandre Carmel-Veilleux <acv@acv.ca>
767        * Added extra debugging information.
768        * Fixed return value handling in debugging calls.
769
7702004-04-11  Alexandre Carmel-Veilleux <acv@acv.ca>
771        * Removed duplicates signal handling hooks
772        * Additional comments in SIGCHLD handler
773
7742004-04-11  Alexandre Carmel-Veilleux <acv@acv.ca>
775        * Node find if's expressions changed
776
7772004-04-11  Alexandre Carmel-Veilleux <acv@acv.ca>
778        * SIGCHLD Handler initializaed outside of deamon mode now.
779
7802004-04-11  Alexandre Carmel-Veilleux <acv@acv.ca>
781        * Very large modification. The entire architecture has been reworked
782        so that authentications to the central server are performed in a
783        fork()'d child process and the exit code from that child is then
784        used to set the User Class of the connection.
785        * The UserClasses (global definitions) and Rights (per connection)
786        have been integrated.
787
7882004-03-16  Mina Naguib <minaguib@users.sourceforge.net>
789        * Changed HTTP server tasks to be handled by libhttpd - merged
790        incorporate_libhttpd branch
791
7922004-03-13  Philippe April <papril777@yahoo.com>
793        * Modified the way firewall scripts are called so we can configure
794        them in the config file (a bit more modular than it was)
795        * Added simple linked list to keep track of clients and to
796        keep a counter of the utilization and send it to the auth server
797        * Fixed CRLF/formatting in phpauth/auth/index.php
798        * Hacked phpauth/auth/index.php to handle very basic utilization tracking
799
8002004-03-12  Philippe April <papril777@yahoo.com>
801        * Changed all perror()s into debug()s and added errno.h to common.h
802
8032004-03-10  Philippe April <papril777@yahoo.com>
804        * Small fix to firewall.c so we don't define variables after
805        the function has started (so it builds on gcc-2.95)
806
8072004-03-09  Philippe April <papril777@yahoo.com>
808        * Major changes, not forking anymore for new connections, now using
809        select() instead. It will allow us to efficiently use a linked list to track
810        users and other things. It introduces some bugs and design issues but will
811        be better in the end.
812
8132004-03-09  Philippe April <papril777@yahoo.com>
814        * Small fix in the default.php login page
815        * exit() where the program was supposed to exit but wasn't when the
816        firewall could not be setup
817
8182004-03-09  Alexandre Carmel-Veilleux <acv@acv.ca>
819        * Tiny change to increase cross-platform compatibility. It can now build on OS X and it comes close to building on my old BSD box.
820
8212004-03-08  Benoit Gr�goire  <bock@step.polymtl.ca>
822        * Initial CVS import.  Integrate a standrad GNU build system and Doxygen to the build process.  Add Doxygen and CVS headers, .cvsignores, etc.  Note that the imported code is Philippe April (papril777 at yahoo.com)'s work.  Tell me if I forgot anything.  Please note that the paths in the src/fw* scripts are still hardcoded.  Don't forget to update the ChangeLog file every commit and add doxygen comments to your code.  Happy hacking.
823
Note: See TracBrowser for help on using the browser.