Code

Add IPv6 support to fwknop#285

Code

Open

khorben wants to merge 78 commits intomrash:mastermrash/fwknop:masterfrom DeforaNetworks:khorben/ipv6DeforaNetworks/fwknop:khorben/ipv6Copy head branch name to clipboard

+1,048-473

Commits

Commits on Aug 20, 2018

• Let IPs resolve to IPv6 addresses

  Show description for 07693a9
  khorben

  committed
  07693a9

  Copy full SHA for 07693a9

• Let IPs resolve to IPv6 addresses over SSL

  Show description for b8252db
  khorben

  committed
  b8252db

  Copy full SHA for b8252db

• Be more consistent when creating ~/.fwknoprc

  khorben

  committed
  460bd8c

  Copy full SHA for 460bd8c

• Also catch the IPv6 version of INADDR_ANY

  khorben

  committed
  a0dda67

  Copy full SHA for a0dda67

• Migrate is_valid_ipv4_addr() to a more generic function

  Show description for b3494dc
  khorben

  committed
  b3494dc

  Copy full SHA for b3494dc

• Implement is_valid_ip_addr() with getaddrinfo()

  khorben

  committed
  aea56f5

  Copy full SHA for aea56f5

• Give have_allow_ip() a chance to allow IPv6

  Show description for f7b18d6
  khorben

  committed
  f7b18d6

  Copy full SHA for f7b18d6

• Allow connecting to remote IPv6 hosts for TCP or UDP

  Show description for 2f6ea52
  khorben

  committed
  2f6ea52

  Copy full SHA for 2f6ea52

• Use uppercase to log "IP"

  khorben

  committed
  72a50b9

  Copy full SHA for 72a50b9

• Also check for <netinet/ip6.h> and <netinet/icmp6.h>

  Show description for 2367bc2
  khorben

  committed
  2367bc2

  Copy full SHA for 2367bc2

• Rework the network listening routine

  khorben

  committed
  ce9b5fb

  Copy full SHA for ce9b5fb

• Rework the network listening routine some more

  khorben

  committed
  3dc6116

  Copy full SHA for 3dc6116

• Code cleanup

  khorben

  committed
  1a813bb

  Copy full SHA for 1a813bb

• Also include <netinet/ip6.h> where relevant

  khorben

  committed
  a525734

  Copy full SHA for a525734

• Protect some more headers for inclusion

  khorben

  committed
  37a8000

  Copy full SHA for 37a8000

• Add support for receiving SPA messages over IPv6

  khorben

  committed
  6bcaf4f

  Copy full SHA for 6bcaf4f

• Interpret incoming addresses according to their family

  khorben

  committed
  8ecd10b

  Copy full SHA for 8ecd10b

• Let access list stanzas be defined in IPv6

  khorben

  committed
  89c7d6f

  Copy full SHA for 89c7d6f

• Typo

  khorben

  committed
  bd1c488

  Copy full SHA for bd1c488

• Typo

  khorben

  committed
  a2462c6

  Copy full SHA for a2462c6

• Constify

  khorben

  committed
  82a5eec

  Copy full SHA for 82a5eec

• Use a more appropriate type for sd_len

  khorben

  committed
  17549b9

  Copy full SHA for 17549b9

• Allow access control "ANY" with any protocol family

  khorben

  committed
  d1c1373

  Copy full SHA for d1c1373

• Use AF_INET instead of PF_INET

  Show description for baed23c
  khorben

  committed
  baed23c

  Copy full SHA for baed23c

• Use sizeof() instead of re-using hard-coded values

  Show description for f61a308
  khorben

  committed
  f61a308

  Copy full SHA for f61a308

• Use sizeof() instead of re-using hard-coded values

  Show description for b070e80
  khorben

  committed
  b070e80

  Copy full SHA for b070e80

• Use a constant for AF_INET

  Show description for da1ab05
  khorben

  committed
  da1ab05

  Copy full SHA for da1ab05

• Use /usr/bin/env to locate perl

  khorben

  committed
  76d609b

  Copy full SHA for 76d609b

• Rework IPv6 support when comparing addresses

  khorben

  committed
  587a4fb

  Copy full SHA for 587a4fb

• Fix processing command-line arguments with whitespace

  khorben

  committed
  11e9b29

  Copy full SHA for 11e9b29

• Set the address family for incoming SPA over UDP

  khorben

  committed
  d6ce22b

  Copy full SHA for d6ce22b

• Specify the family at run-time for TCP/UDP servers

  Show description for 32cdd11
  khorben

  committed
  32cdd11

  Copy full SHA for 32cdd11

• Add IPv6 support to the plain UDP and TCP servers

  khorben

  committed
  f35c1d7

  Copy full SHA for f35c1d7

• Constify

  khorben

  committed
  7437039

  Copy full SHA for 7437039

• Terminate IPs resolved externally as expected

  khorben

  committed
  a2902cb

  Copy full SHA for a2902cb

• Prepare access stanzas for more address families

  khorben

  committed
  c753215

  Copy full SHA for c753215

• Use the correct offset for inet_ntop()

  khorben

  committed
  d260f50

  Copy full SHA for d260f50

• Simplify the calculation of pkt_data_len

  khorben

  committed
  c8670aa

  Copy full SHA for c8670aa

• Correct the packet length calculation with IPv6

  khorben

  committed
  3e329a5

  Copy full SHA for 3e329a5

• Fix some issues with TCP over IPv6

  khorben

  committed
  9878756

  Copy full SHA for 9878756

• Begin to allow IPv6 addresses in source stanzas

  khorben

  committed
  1fd5fe1

  Copy full SHA for 1fd5fe1

• Add a command-line option to enable IPv6 (TCP/UDP)

  Show description for 6405398
  khorben

  committed
  6405398

  Copy full SHA for 6405398

• Optimize moot variable initialization away

  khorben

  committed
  08e805d

  Copy full SHA for 08e805d

• Fix the build on Linux (iptables)

  khorben

  committed
  15dfc94

  Copy full SHA for 15dfc94

• Fix the build with firewalld

  khorben

  committed
  bbb341c

  Copy full SHA for bbb341c

• Update the manual page for the -6 option (--ipv6)

  khorben

  committed
  3a8e01a

  Copy full SHA for 3a8e01a

• Support further address families in the future

  khorben

  committed
  13dee2c

  Copy full SHA for 13dee2c

• Verify if the protocol family matches incoming packets

  khorben

  committed
  9923fc0

  Copy full SHA for 9923fc0

• Do not use INADDR_ANY for default ports

  khorben

  committed
  c5994a3

  Copy full SHA for c5994a3

• Check for errors from inet_addr() with INADDR_NONE

  khorben

  committed
  e3aeb46

  Copy full SHA for e3aeb46

• Fix build with NFQ enabled

  khorben

  committed
  e29d62e

  Copy full SHA for e29d62e

• Allow the longest possible IPv6 address in sources

  khorben

  committed
  956e1df

  Copy full SHA for 956e1df

• Add a configuration variable for IPv6 firewall binaries

  Show description for edeea23
  khorben

  committed
  edeea23

  Copy full SHA for edeea23

• Add the fw_command6 member to the right struct fw_config

  khorben

  committed
  a7a9ecb

  Copy full SHA for a7a9ecb

• Initialize the configuration for ip6tables as well

  khorben

  committed
  7f9d09e

  Copy full SHA for 7f9d09e

• Add IPv6 support to --fw-list{,all}

  khorben

  committed
  576eb11

  Copy full SHA for 576eb11

• Update a comment

  khorben

  committed
  81e2255

  Copy full SHA for 81e2255

• Add preliminary support for IPv6 with iptables

  khorben

  committed
  fa664db

  Copy full SHA for fa664db

• Code cleanup

  khorben

  committed
  dd0597f

  Copy full SHA for dd0597f

• Fix a couple more uses of ctype(3)

  khorben

  committed
  ba4d095

  Copy full SHA for ba4d095

• Provide enough space to resolve IPv6 addresses

  khorben

  committed
  282aa2d

  Copy full SHA for 282aa2d

• Remove support for IPv6 for rules shared with IPv4

  khorben

  committed
  68cacee

  Copy full SHA for 68cacee

• Add support for rule expiration with IPv6

  khorben

  committed
  d28d1cb

  Copy full SHA for d28d1cb

• Revert "Remove support for IPv6 for rules shared with IPv4"

  Show description for f97214b
  khorben

  committed
  f97214b

  Copy full SHA for f97214b

• Code cleanup

  khorben

  committed
  0bbbd13

  Copy full SHA for 0bbbd13

• Default to IPv6 rules when listening on IPv6

  khorben

  committed
  2bdaeff

  Copy full SHA for 2bdaeff

• Remove useless code

  khorben

  committed
  fd6def0

  Copy full SHA for fd6def0

• Resolve hostnames to IPv6 addresses in IPv6 mode

  khorben

  committed
  561ba96

  Copy full SHA for 561ba96

• Re-indent

  khorben

  committed
  159c62c

  Copy full SHA for 159c62c

• Only support IPv4 on Windows

  khorben

  committed
  70df56f

  Copy full SHA for 70df56f

• Code cleanup

  khorben

  committed
  c1d3656

  Copy full SHA for c1d3656

• Use "::" for matching any address for IPv6 rules

  khorben

  committed
  73d7b79

  Copy full SHA for 73d7b79

• No longer accept colon (":") as port separator

  Show description for 460774c
  khorben

  committed
  460774c

  Copy full SHA for 460774c

• Fix DNAT with IPv6

  khorben

  committed
  f3895bb

  Copy full SHA for f3895bb

• Use "::/0" for IPT_ANY_IPV6

  khorben

  committed
  46d4d77

  Copy full SHA for 46d4d77

• Port src_dst_check() to IPv6

  Show description for 3f3b304
  khorben

  committed
  3f3b304

  Copy full SHA for 3f3b304

Commits on Aug 22, 2018

• Also output the value obtained for ip6tables

  Show description for a2edaec
  khorben

  committed
  a2edaec

  Copy full SHA for a2edaec

Commits on Aug 24, 2018

• Complete the check and search for ip6tables

  Show description for 91f3842
  khorben

  committed
  91f3842

  Copy full SHA for 91f3842