822 Commits

Author SHA1 Message Date
ftasnetamot
acdbb79d43 include version.h in repo
Many code checking editors, marking the common.h as erroneous, as
version.h is missing. This can lead to confusion.
Change in Makefile.in with fake empty dependency ensures, that version.h
is recreated at every "make"
Another change in make clean, makes sure, that at this point a stub
version.h is generated.

version.h removed from .gitignore
2024-08-15 23:06:46 +02:00
ftasnetamot
1fd072837b added forgotten link to cloudflare blog. Without this link, the wording
maked no sense.
2024-08-15 23:04:18 +02:00
ftasnetamot
a34f34917a Documentation, why Daisy-Chaining IP-Transparent
applications will fail. Discuss this in some examples.
2024-08-15 23:04:18 +02:00
ftasnetamot
d6041c93c4 added missing 3rd argument to CHECK_RES_RESULT 2024-08-15 23:02:54 +02:00
ftasnetamot
2e2701de55 Changed a CHECK_RES_DIE to CHECK_RES_RETURN, as the real problem will
occur at connect!
2024-08-15 23:02:54 +02:00
ftasnetamot
70a9b97f81 optimized setsockopt() options for better
cooperation between different transparent-ip applications.
See: https://blog.cloudflare.com/how-to-stop-running-out-of-ephemeral-ports-and-start-to-love-long-lived-connections
for an explanation for those changes.
2024-08-15 23:02:54 +02:00
ftasnetamot
72a4376248 Enhance documentation about compiling;
make disabling landlock in Makefile possible, as single point of
configuration
2024-08-15 22:58:54 +02:00
Yves Rutschle
316e9a1863 fix documentation on verboseness (#452) 2024-07-10 15:41:49 +02:00
Yves Rutschle
c892fc4b34 add short for verbose; remove config debug printing 2024-07-10 15:37:34 +02:00
Yves Rutschle
b619f5bf36 add a verbose option that overrides all others 2024-07-10 15:31:55 +02:00
Yves Rutschle
06b7d7ed14 add reference to libwrap in example configuration (fix #418) 2024-06-26 19:19:03 +02:00
Yves Rutschle
a222ea2c99 update Changelog v2.1.3 v2.1.4 2024-06-26 19:17:48 +02:00
yrutschle
eb84c6a55b add libwrap files to landlock read list (fix #450) 2024-06-17 23:00:16 +02:00
yrutschle
93ab4f1e3a refactor in smaller functions 2024-06-17 22:54:52 +02:00
Yves Rutschle
5e252bb3f6 add links to ip-routing transparent proxying 2024-06-12 09:40:33 +02:00
ftasnetamot
d6265e2c50 Added svg file
corrected link to the diagram in md file
2024-06-11 21:40:06 +02:00
ftasnetamot
e1229dca28 updated picture, as png export failed in workflow before :-( 2024-06-09 17:21:04 +02:00
ftasnetamot
06e697e029 removed the warning regards kernel forwarding,
as this is also not necessary.
Updated text and picture
2024-06-09 17:21:04 +02:00
ftasnetamot
0bb3286a7d corrected broken style of connection arrows
in the diagram showing the scenarios
2024-06-09 17:21:04 +02:00
ftasnetamot
2fd9ea600a Added another file, discussing three possible setup scenarios, which
should cover up all setups.

Changes to be committed:
  new file:   scenarios-for-simple-transparent-proxy.md
  modified:   simple_transparent_proxy.md
  new file:   sslh-examples-v1.png
2024-06-09 17:21:04 +02:00
ftasnetamot
f4eea875e2 drastically reduced the configuration by putting all the magic into the interface-configuration 2024-06-04 21:04:56 +02:00
ftasnetamot
e8934f7a81 some more scenarios, how the simple configuration can be used. 2024-06-04 21:04:56 +02:00
ftasnetamot
8271db2d9d Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing.
Explain how all that works.
2024-06-02 14:26:50 +02:00
Yves Rutschle
995916c923 update history 2024-05-25 16:22:47 +02:00
Sergey Ponomarev
799d75413f echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'}
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-05-25 16:21:50 +02:00
Yves Rutschle
8166be1a09 Fix inetd mode (fix #399) 2024-05-16 21:30:11 +02:00
Yves Rutschle
684374f353 avoid useless strcpy (fix #440) 2024-05-11 17:01:48 +02:00
Yves Rutschle
de7351fd84 Make basic.cfg more useful (fix #438) 2024-04-21 18:20:54 +02:00
yrutschle
d2ca706f86 document use of glob for SNI matching (fix #373) 2024-04-13 23:38:32 +02:00
Sergey Ponomarev
c859e341aa .gitignore generated files by ./configure 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
717fe8fae5 INSTALL.md: reformat
Add ./configure step
Fix libpcre-dev to libpcre2-dev
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
1ddf45bf52 tcp_protocol_list_init(): allocate once instead of realloc each time 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ae7530e33f Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
d0a016221c probe.c: Fix Function 'memcmp' is called without explicitly comparing result 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
9286b55702 echosrv.c: Fix Narrowing conversion from 'ssize_t' (aka 'long') to signed type 'int' is implementation-defined 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
31c9e19abb echosrv.c: fix Narrowing conversion from ssize_t to int 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ef8f3d1419 INSTALL.md fix typo 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
2759c223be README.Windows.md fix link 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
b3c770898a
Ignore opts (#436)
* Be less strict about args at startup

Ignore unknown options.

* Don't fail if pid file is accessible
2024-04-13 11:03:54 +02:00
yrutschle
fee8491a8e remove useless capabilities and use standard environment in systemd 2024-04-10 18:39:07 +02:00
Yves Rűtschlé
a80d79fd40 Merge multiple sslh systemd unit configurations 2024-04-10 18:07:28 +02:00
Yves Rűtschlé
4b921be69d Merge systemd unit multiple configurations 2024-04-10 18:06:56 +02:00
Yves Rutschle
1799a81079 fix off-by-one error that would sometime ignore the latest connection 2024-03-31 22:18:58 +02:00
Sergio C
5f1c1b1b61
Update README.md (#431)
Updated tproxy.md location
v2.1.1
2024-03-24 08:33:34 +01:00
Yves Rutschle
58783af410 For MacOS, do not have multiple identicat cases in switch 2024-03-23 09:53:01 +01:00
Yves Rutschle
1957be1dc3 v.2.1.0 2024-03-22 16:41:50 +01:00
Yves Rűtschlé
ecca78bde7 for MacOS, define unknown symbols to equivalent values 2024-03-21 18:54:03 +01:00
Yves Rűtschlé
b94060ad76 undef FD_SETSIZE to avoid compiler warning upon redefine 2024-03-15 15:09:39 +01:00
Yves Rűtschlé
736b108a75 dont log error when remote client drops connection on Windows (fix #427) 2024-03-13 16:58:09 +01:00
Yves Rutschle
7ca567fcd9 clarify the difficulty of transparent proxying 2024-03-12 22:07:17 +01:00