Yves Rutschle
a222ea2c99
update Changelog
2024-06-26 19:17:48 +02:00
yrutschle
eb84c6a55b
add libwrap files to landlock read list ( fix #450 )
2024-06-17 23:00:16 +02:00
yrutschle
93ab4f1e3a
refactor in smaller functions
2024-06-17 22:54:52 +02:00
Yves Rutschle
5e252bb3f6
add links to ip-routing transparent proxying
2024-06-12 09:40:33 +02:00
ftasnetamot
d6265e2c50
Added svg file
...
corrected link to the diagram in md file
2024-06-11 21:40:06 +02:00
ftasnetamot
e1229dca28
updated picture, as png export failed in workflow before :-(
2024-06-09 17:21:04 +02:00
ftasnetamot
06e697e029
removed the warning regards kernel forwarding,
...
as this is also not necessary.
Updated text and picture
2024-06-09 17:21:04 +02:00
ftasnetamot
0bb3286a7d
corrected broken style of connection arrows
...
in the diagram showing the scenarios
2024-06-09 17:21:04 +02:00
ftasnetamot
2fd9ea600a
Added another file, discussing three possible setup scenarios, which
...
should cover up all setups.
Changes to be committed:
new file: scenarios-for-simple-transparent-proxy.md
modified: simple_transparent_proxy.md
new file: sslh-examples-v1.png
2024-06-09 17:21:04 +02:00
ftasnetamot
f4eea875e2
drastically reduced the configuration by putting all the magic into the interface-configuration
2024-06-04 21:04:56 +02:00
ftasnetamot
e8934f7a81
some more scenarios, how the simple configuration can be used.
2024-06-04 21:04:56 +02:00
ftasnetamot
8271db2d9d
Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing.
...
Explain how all that works.
2024-06-02 14:26:50 +02:00
Yves Rutschle
995916c923
update history
2024-05-25 16:22:47 +02:00
Sergey Ponomarev
799d75413f
echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'}
...
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-05-25 16:21:50 +02:00
Yves Rutschle
8166be1a09
Fix inetd mode ( fix #399 )
2024-05-16 21:30:11 +02:00
Yves Rutschle
684374f353
avoid useless strcpy ( fix #440 )
2024-05-11 17:01:48 +02:00
Yves Rutschle
de7351fd84
Make basic.cfg more useful ( fix #438 )
2024-04-21 18:20:54 +02:00
yrutschle
d2ca706f86
document use of glob for SNI matching ( fix #373 )
2024-04-13 23:38:32 +02:00
Sergey Ponomarev
c859e341aa
.gitignore generated files by ./configure
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
717fe8fae5
INSTALL.md: reformat
...
Add ./configure step
Fix libpcre-dev to libpcre2-dev
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
1ddf45bf52
tcp_protocol_list_init(): allocate once instead of realloc each time
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ae7530e33f
Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
d0a016221c
probe.c: Fix Function 'memcmp' is called without explicitly comparing result
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
9286b55702
echosrv.c: Fix Narrowing conversion from 'ssize_t' (aka 'long') to signed type 'int' is implementation-defined
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
31c9e19abb
echosrv.c: fix Narrowing conversion from ssize_t to int
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ef8f3d1419
INSTALL.md fix typo
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
2759c223be
README.Windows.md fix link
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
b3c770898a
Ignore opts ( #436 )
...
* Be less strict about args at startup
Ignore unknown options.
* Don't fail if pid file is accessible
2024-04-13 11:03:54 +02:00
yrutschle
fee8491a8e
remove useless capabilities and use standard environment in systemd
2024-04-10 18:39:07 +02:00
Yves Rűtschlé
a80d79fd40
Merge multiple sslh systemd unit configurations
2024-04-10 18:07:28 +02:00
Yves Rűtschlé
4b921be69d
Merge systemd unit multiple configurations
2024-04-10 18:06:56 +02:00
Yves Rutschle
1799a81079
fix off-by-one error that would sometime ignore the latest connection
2024-03-31 22:18:58 +02:00
Sergio C
5f1c1b1b61
Update README.md ( #431 )
...
Updated tproxy.md location
2024-03-24 08:33:34 +01:00
Yves Rutschle
58783af410
For MacOS, do not have multiple identicat cases in switch
2024-03-23 09:53:01 +01:00
Yves Rutschle
1957be1dc3
v.2.1.0
2024-03-22 16:41:50 +01:00
Yves Rűtschlé
ecca78bde7
for MacOS, define unknown symbols to equivalent values
2024-03-21 18:54:03 +01:00
Yves Rűtschlé
b94060ad76
undef FD_SETSIZE to avoid compiler warning upon redefine
2024-03-15 15:09:39 +01:00
Yves Rűtschlé
736b108a75
dont log error when remote client drops connection on Windows ( fix #427 )
2024-03-13 16:58:09 +01:00
Yves Rutschle
7ca567fcd9
clarify the difficulty of transparent proxying
2024-03-12 22:07:17 +01:00
Yves Rutschle
3117c15fbd
when sslh-fork accept() fails with some errors, retry accept instead of dying
2024-01-11 21:32:39 +01:00
Yves Rutschle
e428fc505c
prevent children from continuing the parent's work in case of failure
2024-01-11 21:24:19 +01:00
Yves Rutschle
4dfb4d300a
add default LANDLOCK_ACCESS_FS_REFER define for Ubuntu ( fix #420 )
2024-01-06 11:56:57 +01:00
Yves Rutschle
39184b5622
enable landlock access to files to allow forking and name resolution
2024-01-05 13:21:55 +01:00
Yves Rutschle
940461de18
check name resolution error to avoid segfault
2024-01-05 11:15:53 +01:00
Yves Rutschle
6f949419d1
fix comment to reflect reality
2024-01-05 10:34:29 +01:00
Yves Rutschle
dab5df7409
clarify where the name resolution error comes from
2024-01-05 10:32:41 +01:00
Yves Rutschle
402ca5219b
fix warnings on sockaddr storage
2024-01-04 23:22:44 +01:00
Yves Rutschle
046401148d
add ./configure stage to docker build
2024-01-04 23:04:26 +01:00
Yves Rutschle
780e536aeb
use autoconf to crete build scripts depending on landlock presence ( fix #417 )
2024-01-04 22:45:10 +01:00
Yves Rutschle
ed0ab12a16
reintroduce --ssl as alias to --tls
2024-01-02 21:38:23 +01:00
