ftasnetamot
2fd9ea600a
Added another file, discussing three possible setup scenarios, which
...
should cover up all setups.
Changes to be committed:
new file: scenarios-for-simple-transparent-proxy.md
modified: simple_transparent_proxy.md
new file: sslh-examples-v1.png
2024-06-09 17:21:04 +02:00
ftasnetamot
f4eea875e2
drastically reduced the configuration by putting all the magic into the interface-configuration
2024-06-04 21:04:56 +02:00
ftasnetamot
e8934f7a81
some more scenarios, how the simple configuration can be used.
2024-06-04 21:04:56 +02:00
ftasnetamot
8271db2d9d
Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing.
...
Explain how all that works.
2024-06-02 14:26:50 +02:00
Yves Rutschle
995916c923
update history
2024-05-25 16:22:47 +02:00
Sergey Ponomarev
799d75413f
echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'}
...
Signed-off-by: Sergey Ponomarev <stokito@gmail.com >
2024-05-25 16:21:50 +02:00
Yves Rutschle
8166be1a09
Fix inetd mode ( fix #399 )
2024-05-16 21:30:11 +02:00
Yves Rutschle
684374f353
avoid useless strcpy ( fix #440 )
2024-05-11 17:01:48 +02:00
Yves Rutschle
de7351fd84
Make basic.cfg more useful ( fix #438 )
2024-04-21 18:20:54 +02:00
yrutschle
d2ca706f86
document use of glob for SNI matching ( fix #373 )
2024-04-13 23:38:32 +02:00
Sergey Ponomarev
c859e341aa
.gitignore generated files by ./configure
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
717fe8fae5
INSTALL.md: reformat
...
Add ./configure step
Fix libpcre-dev to libpcre2-dev
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
1ddf45bf52
tcp_protocol_list_init(): allocate once instead of realloc each time
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ae7530e33f
Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
d0a016221c
probe.c: Fix Function 'memcmp' is called without explicitly comparing result
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
9286b55702
echosrv.c: Fix Narrowing conversion from 'ssize_t' (aka 'long') to signed type 'int' is implementation-defined
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
31c9e19abb
echosrv.c: fix Narrowing conversion from ssize_t to int
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ef8f3d1419
INSTALL.md fix typo
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
2759c223be
README.Windows.md fix link
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
b3c770898a
Ignore opts ( #436 )
...
* Be less strict about args at startup
Ignore unknown options.
* Don't fail if pid file is accessible
2024-04-13 11:03:54 +02:00
yrutschle
fee8491a8e
remove useless capabilities and use standard environment in systemd
2024-04-10 18:39:07 +02:00
Yves Rűtschlé
a80d79fd40
Merge multiple sslh systemd unit configurations
2024-04-10 18:07:28 +02:00
Yves Rűtschlé
4b921be69d
Merge systemd unit multiple configurations
2024-04-10 18:06:56 +02:00
Yves Rutschle
1799a81079
fix off-by-one error that would sometime ignore the latest connection
2024-03-31 22:18:58 +02:00
Sergio C
5f1c1b1b61
Update README.md ( #431 )
...
Updated tproxy.md location
2024-03-24 08:33:34 +01:00
Yves Rutschle
58783af410
For MacOS, do not have multiple identicat cases in switch
2024-03-23 09:53:01 +01:00
Yves Rutschle
1957be1dc3
v.2.1.0
2024-03-22 16:41:50 +01:00
Yves Rűtschlé
ecca78bde7
for MacOS, define unknown symbols to equivalent values
2024-03-21 18:54:03 +01:00
Yves Rűtschlé
b94060ad76
undef FD_SETSIZE to avoid compiler warning upon redefine
2024-03-15 15:09:39 +01:00
Yves Rűtschlé
736b108a75
dont log error when remote client drops connection on Windows ( fix #427 )
2024-03-13 16:58:09 +01:00
Yves Rutschle
7ca567fcd9
clarify the difficulty of transparent proxying
2024-03-12 22:07:17 +01:00
Yves Rutschle
3117c15fbd
when sslh-fork accept() fails with some errors, retry accept instead of dying
2024-01-11 21:32:39 +01:00
Yves Rutschle
e428fc505c
prevent children from continuing the parent's work in case of failure
2024-01-11 21:24:19 +01:00
Yves Rutschle
4dfb4d300a
add default LANDLOCK_ACCESS_FS_REFER define for Ubuntu ( fix #420 )
2024-01-06 11:56:57 +01:00
Yves Rutschle
39184b5622
enable landlock access to files to allow forking and name resolution
2024-01-05 13:21:55 +01:00
Yves Rutschle
940461de18
check name resolution error to avoid segfault
2024-01-05 11:15:53 +01:00
Yves Rutschle
6f949419d1
fix comment to reflect reality
2024-01-05 10:34:29 +01:00
Yves Rutschle
dab5df7409
clarify where the name resolution error comes from
2024-01-05 10:32:41 +01:00
Yves Rutschle
402ca5219b
fix warnings on sockaddr storage
2024-01-04 23:22:44 +01:00
Yves Rutschle
046401148d
add ./configure stage to docker build
2024-01-04 23:04:26 +01:00
Yves Rutschle
780e536aeb
use autoconf to crete build scripts depending on landlock presence ( fix #417 )
2024-01-04 22:45:10 +01:00
Yves Rutschle
ed0ab12a16
reintroduce --ssl as alias to --tls
2024-01-02 21:38:23 +01:00
Yves Rutschle
b65f1e8b26
Merged Landlock feature
2023-12-09 14:13:07 +01:00
Konstantin
91b649daa0
Set image tag to use github in docker-compose example ( #414 )
...
Change image tag of the docker-compose example from ```sslh:latest``` to ```ghcr.io/yrutschle/sslh:latest```
2023-11-19 20:43:13 +01:00
Latchezar Tzvetkoff
7499c26e9e
Cleanup error checking logic in bind_peer() ( #412 )
...
Thanks for the cleanup!
2023-11-15 22:02:21 +01:00
Yves Rutschle
90a55b6f9d
document Windows build and docker repositories
2023-11-15 21:49:44 +01:00
Yves Rutschle
1f66e2e093
add sslh-ev
2023-11-15 21:46:42 +01:00
Yves Rutschle
92d2326016
Merge pull request #408 from pcrow/master
...
Fix transparent mode in a multi-stage chain
2023-10-07 21:15:58 +02:00
Preston Crow
81eed9d56a
Transparent mode in a multi-stage chain will fail after the first step
...
because the (ip,port) is already bound. With this change, the bind is
retried with a different port to at least keep the same IP address, which
for most uses is all that is needed. I've tested this on my own system
where sslh is used downstream from stunnel, with both in transparent mode.
2023-10-06 17:50:25 -04:00
Yves Rutschle
490a44723b
fix install to build sslh-fork ( fix #407 )
2023-10-05 11:53:09 +02:00
ftasnetamot
Yves Rutschle
Sergey Ponomarev
Sergio C
Konstantin
Latchezar Tzvetkoff
Yves Rutschle
Preston Crow