summaryrefslogtreecommitdiffstats
path: root/sbin/natd
Commit message (Collapse)AuthorAgeFilesLines
* Summer of Code 2005: improve libalias - part 1 of 2piso2006-09-261-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the first part of my previous Summer of Code work, we get: -made libalias modular: -support for 'particular' protocols (like ftp/irc/etcetc) is no more hardcoded inside libalias, but it's available through external modules loadable at runtime -modules are available both in kernel (/boot/kernel/alias_*.ko) and user land (/lib/libalias_*) -protocols/applications modularized are: cuseeme, ftp, irc, nbt, pptp, skinny and smedia -added logging support for kernel side -cleanup After a buildworld, do a 'mergemaster -i' to install the file libalias.conf in /etc or manually copy it. During startup (and after every HUP signal) user land applications running the new libalias will try to read a file in /etc called libalias.conf: that file contains the list of modules to load. User land applications affected by this commit are ppp and natd: if libalias.conf is present in /etc you won't notice any difference. The only kernel land bit affected by this commit is ng_nat: if you are using ng_nat, and it doesn't correctly handle ftp/irc/etcetc sessions anymore, remember to kldload the correspondent module (i.e. kldload alias_ftp). General information and details about the inner working are available in the libalias man page under the section 'MODULAR ARCHITECTURE (AND ipfw(4) SUPPORT)'. NOTA BENE: this commit affects _ONLY_ libalias, ipfw in-kernel nat support will be part of the next libalias-related commit. Approved by: glebius Reviewed by: glebius, ru
* WARNS=6 and gcc4 cleanup:delphij2005-05-021-15/+15
| | | | | | - Use const where necessary - Use __unused where applicable - Rename variables that is conflicit with global definations
* Eliminate macro calls inside literal displays.ru2005-01-151-3/+3
|
* Remove unused variable.trhodes2005-01-081-1/+0
|
* Give natd multi-instance capabilities.phk2004-07-043-176/+410
| | | | This makes it possible to do load-sharing on two xDSL lines etc.
* Use strlcpy(3) instead of strcpy(3).hmp2004-05-101-3/+3
| | | | | | PR: 46761 Philipp Mergenthaler <philipp.mergenthaler@stud.uni-karlsruhe.de>
* Replace ROUNDUP/ADVANCE with SA_SIZEluigi2004-04-131-5/+1
|
* style.Makefile(5):johan2004-02-231-1/+1
| | | | Use WARNS?= instead of WARNS=.
* Add Cisco Skinny Station protocol support to libalias, natd, and ppp.marcus2003-09-232-0/+33
| | | | | | | | | | | | | | | Skinny is the protocol used by Cisco IP phones to talk to Cisco Call Managers. With this code, one can use a Cisco IP phone behind a FreeBSD NAT gateway. Currently, having the Call Manager behind the NAT gateway is not supported. More information on enabling Skinny support in libalias, natd, and ppp can be found in those applications' manpages. PR: 55843 Reviewed by: ru Approved by: ru MFC after: 30 days
* - Clarify the port range syntax in -redirect_port.ru2003-08-131-14/+24
| | | | | | PR: docs/46286 - "IP number" -> "IP address", for consistency.
* Added an option to specify an alternate PID file.ru2003-08-132-3/+23
| | | | | PR: bin/37159 Submitted by: "Aleksandr A. Babaylov" <.@babolo.ru>
* If the -proxy_only option is used, the -alias_address/-interfaceru2003-06-132-4/+9
| | | | | | | options are not required. Suggested by: Vaclav Petricek MFC after: 2 weeks
* Don't pretend natd(8) doesn't work with ppp(8) interfaces.ru2003-02-281-5/+11
| | | | | | | While there's probably a better way to achieve the same, nothing precludes us from using natd(8) on tun(4) links. Noticed by: bde
* Use a more standard error message. Add FBSDID.charnier2003-02-051-4/+5
| | | | Reviewed by: ru
* Fixed Charles' e-mail here too.ru2003-01-232-3/+3
|
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,schweikh2003-01-011-1/+1
| | | | especially in troff files.
* can not -> cannot.ru2002-08-131-1/+1
|
* mdoc(7) police: canonize FreeBSD in e-mail address.ru2002-08-131-1/+1
|
* The .Nm utilitycharnier2002-07-061-2/+4
|
* Update my email address.archie2002-07-031-1/+1
|
* I don't know what the MAINTAINER means in src/ part of FreeBSD.ru2002-04-121-2/+0
| | | | | | | | | I'll still be overseeing the changes that go into natd(8) and will maintain it the way I see it, non-preventing for the rest of developers. I will re-ask for the MAINTAINER bit if the ${MAINTAINER} gets defined.
* Back out part of the revision 1.2 changes -- sendto(2) canru2002-01-151-73/+28
| | | | | | | | | | | | not return ENOBUFS for unreliable protocols like divert. This should fix an issue when natd(8) keeps spamming already full dummynet(4) queues with the same packet forever. Spotted by: chkno@dork.com Explained by: luigi Reviewed by: Ari Suutari <ari.suutari@syncrontech.com> MFC after: 2 weeks
* s/sysctl -w/sysctl/ru2001-12-111-1/+1
|
* Default to WARNS=2.obrien2001-12-041-1/+1
| | | | | | Binary builds that cannot handle this must explicitly set WARNS=0. Reviewed by: mike
* Make -log_ipfw_denied active by default with -verbose.ru2001-11-272-1/+8
| | | | Discussed with: phk
* Fixed (local) style bugs in previous revision.ru2001-11-272-6/+10
|
* Do not uselessly whine in syslog about packets denied by ipfw rules.phk2001-10-312-3/+19
| | | | | | | | | Set 'log_ipfw_denied' option if you want the old behaviour. PR: 30255 Submitted by: Flemming "F3" Jacobsen <fj@batmule.dk> Reviewed by: phk MFC after: 4 weeks
* mdoc(7) police:ru2001-08-071-6/+4
| | | | | | | Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
* mdoc(7) police: removed HISTORY info from the .Os call.ru2001-07-101-1/+1
|
* Revert the previous commit on objection from the maintainer. Ijoe2001-06-211-3/+2
| | | | | | missed that natd has a -v option that will give similar functionality. Requested by: ru
* When reporting that a packet can't be written back, usually becausejoe2001-06-211-2/+3
| | | | | | | of a restrictive firewall rule, also report detail on the packet that caused the failure. MFC after: 3 days
* mdoc(7) police: normalize .Nd.ru2001-04-181-1/+1
|
* - Backout botched attempt to introduce MANSECT feature.ru2001-03-261-0/+1
| | | | - MAN[1-9] -> MAN.
* Set the default manual section for sbin/ to 8.ru2001-03-201-1/+0
|
* mdoc(7) police: split punctuation characters + misc fixes.ru2001-02-011-2/+2
|
* mdoc(7) police: use the new features of the Nm macro.ru2000-11-201-5/+5
|
* Describe -deny_incoming better, highlight some keywords,ru2000-11-161-22/+57
| | | | add myself to the AUTHORS section.
* more removal of trailing periods from SEE ALSO.ben2000-11-151-1/+1
|
* Suggest looking at rc.conf(5) on how to start natd(8) during boot.ru2000-07-171-0/+3
| | | | Submitted by: dcs
* Don't call warn() with no format string.kris2000-07-101-1/+1
|
* "Ease understanding" of how -punch_fw works.ru2000-06-291-9/+11
| | | | Reviewed by: sheldonh
* Added new option (-punch_fw) which allows to `punch holes'ru2000-06-272-2/+47
| | | | | | | in the ipfirewall(4) for incoming FTP/IRC DCC connections. Submitted by: Rene de Vries <rene@canyon.demon.nl> Rewritten by: ru
* - mdoc(7) style cleanupru2000-06-271-276/+300
| | | | - new version of security note from alex.
* Back out both previous commits.alex2000-06-261-200/+168
| | | | | | | | | | | | The first one got screwed up by me because of rev 1.33, which was incorrectly merged into my patches by myself, and so Ruslan (maintainer) asked me to back them out. Ruslan was ok with the second one, but since it needs rework, it'll be readded later, when it doesn't conflict with the backout of the first one. Pointy hat: alex Beer on next meeting: ru
* Add note about security concerns w/o a firewall but other machinesalex2000-06-261-0/+8
| | | | | | | | on your LAN to the "RUNNING NATD" introduction. In a different way requested by: PR: 18802 Submitted by: Zachary K Drew <drew0054@tc.umn.edu>
* mdoc style cleanup.alex2000-06-261-168/+192
| | | | Reviewed by: sheldonh
* Remove ``pptpalias'' since this is now done transparently by libalias(3).ru2000-06-202-51/+1
|
* Remove unused parameter.ru2000-06-161-6/+6
|
* Fix a small grammar nit, with the maintainer's implicit approval.sheldonh2000-05-221-3/+3
|
* Add new option (-target_addr) to control how to deal with incoming packetsru2000-05-182-1/+34
| | | | | | not associated with any pre-existing link. Submitted by: brian
OpenPOWER on IntegriCloud