Ipv6rebased#309

Open

bastien-roucaries wants to merge 86 commits intomrash:masterfrom

bastien-roucaries:ipv6rebased

Commits on Apr 4, 2020

Use INET_ADDRSTRLEN instead of hardcoding it
bastien-roucaries
committed
Let IPs resolve using getaddrinfo

khorben
authored and
bastien-roucaries
committed
Factorize IP resolution between http and https
bastien-roucaries
committed
Be more consistent when creating ~/.fwknoprc

khorben
authored and
bastien-roucaries
committed
Improve IPV4 min length by using strlen
bastien-roucaries
committed
Let IPs resolve to IPv6 addresses

khorben
authored and
bastien-roucaries
committed
Allow ipv6 for resolving url
bastien-roucaries
committed
Let IPs resolve to IPv6 addresses

khorben
authored and
bastien-roucaries
committed
Also catch the IPv6 version of INADDR_ANY

khorben
authored and
bastien-roucaries
committed
Migrate is_valid_ipv4_addr() to a more generic function

khorben
authored and
bastien-roucaries
committed
Implement is_valid_ip_addr() with getaddrinfo()

khorben
authored and
bastien-roucaries
committed
Give have_allow_ip() a chance to allow IPv6

khorben
authored and
bastien-roucaries
committed
Allow connecting to remote IPv6 hosts for TCP or UDP

khorben
authored and
bastien-roucaries
committed
Use uppercase to log "IP"

khorben
authored and
bastien-roucaries
committed
Also check for <netinet/ip6.h> and <netinet/icmp6.h>

khorben
authored and
bastien-roucaries
committed
Rework the network listening routine

khorben
authored and
bastien-roucaries
committed
Rework the network listening routine some more

khorben
authored and
bastien-roucaries
committed
Code cleanup

khorben
authored and
bastien-roucaries
committed
Also include <netinet/ip6.h> where relevant

khorben
authored and
bastien-roucaries
committed
Protect some more headers for inclusion

khorben
authored and
bastien-roucaries
committed
Add support for receiving SPA messages over IPv6

khorben
authored and
bastien-roucaries
committed
Interpret incoming addresses according to their family

khorben
authored and
bastien-roucaries
committed
Let access list stanzas be defined in IPv6

khorben
authored and
bastien-roucaries
committed
Typo

khorben
authored and
bastien-roucaries
committed
Typo

khorben
authored and
bastien-roucaries
committed
Constify

khorben
authored and
bastien-roucaries
committed
Use a more appropriate type for sd_len

khorben
authored and
bastien-roucaries
committed
Allow access control "ANY" with any protocol family

khorben
authored and
bastien-roucaries
committed
Use AF_INET instead of PF_INET

khorben
authored and
bastien-roucaries
committed
Use sizeof() instead of re-using hard-coded values

khorben
authored and
bastien-roucaries
committed
Use sizeof() instead of re-using hard-coded values

khorben
authored and
bastien-roucaries
committed
Use a constant for AF_INET

khorben
authored and
bastien-roucaries
committed
Use /usr/bin/env to locate perl

khorben
authored and
bastien-roucaries
committed
Rework IPv6 support when comparing addresses

khorben
authored and
bastien-roucaries
committed
Fix processing command-line arguments with whitespace

khorben
authored and
bastien-roucaries
committed
Set the address family for incoming SPA over UDP

khorben
authored and
bastien-roucaries
committed
Specify the family at run-time for TCP/UDP servers

khorben
authored and
bastien-roucaries
committed
Add IPv6 support to the plain UDP and TCP servers

khorben
authored and
bastien-roucaries
committed
Constify

khorben
authored and
bastien-roucaries
committed
Terminate IPs resolved externally as expected

khorben
authored and
bastien-roucaries
committed
Prepare access stanzas for more address families

khorben
authored and
bastien-roucaries
committed
Use the correct offset for inet_ntop()

khorben
authored and
bastien-roucaries
committed
Simplify the calculation of pkt_data_len

khorben
authored and
bastien-roucaries
committed
Correct the packet length calculation with IPv6

khorben
authored and
bastien-roucaries
committed
Fix some issues with TCP over IPv6

khorben
authored and
bastien-roucaries
committed
Begin to allow IPv6 addresses in source stanzas

khorben
authored and
bastien-roucaries
committed
Add a command-line option to enable IPv6 (TCP/UDP)

khorben
authored and
bastien-roucaries
committed
Optimize moot variable initialization away

khorben
authored and
bastien-roucaries
committed
Fix the build on Linux (iptables)

khorben
authored and
bastien-roucaries
committed
Fix the build with firewalld

khorben
authored and
bastien-roucaries
committed
Update the manual page for the -6 option (--ipv6)

khorben
authored and
bastien-roucaries
committed
Support further address families in the future

khorben
authored and
bastien-roucaries
committed
Verify if the protocol family matches incoming packets

khorben
authored and
bastien-roucaries
committed
Do not use INADDR_ANY for default ports

khorben
authored and
bastien-roucaries
committed
Check for errors from inet_addr() with INADDR_NONE

khorben
authored and
bastien-roucaries
committed
Fix build with NFQ enabled

khorben
authored and
bastien-roucaries
committed
Allow the longest possible IPv6 address in sources

khorben
authored and
bastien-roucaries
committed
Add a configuration variable for IPv6 firewall binaries

khorben
authored and
bastien-roucaries
committed
Add the fw_command6 member to the right struct fw_config

khorben
authored and
bastien-roucaries
committed
Initialize the configuration for ip6tables as well

khorben
authored and
bastien-roucaries
committed
Add IPv6 support to --fw-list{,all}

khorben
authored and
bastien-roucaries
committed
Update a comment

khorben
authored and
bastien-roucaries
committed
Add preliminary support for IPv6 with iptables

khorben
authored and
bastien-roucaries
committed
Code cleanup

khorben
authored and
bastien-roucaries
committed
Fix a couple more uses of ctype(3)

khorben
authored and
bastien-roucaries
committed
Provide enough space to resolve IPv6 addresses

khorben
authored and
bastien-roucaries
committed
Remove support for IPv6 for rules shared with IPv4

khorben
authored and
bastien-roucaries
committed
Add support for rule expiration with IPv6

khorben
authored and
bastien-roucaries
committed
Revert "Remove support for IPv6 for rules shared with IPv4"

khorben
authored and
bastien-roucaries
committed
Code cleanup

khorben
authored and
bastien-roucaries
committed
Default to IPv6 rules when listening on IPv6

khorben
authored and
bastien-roucaries
committed
Remove useless code

khorben
authored and
bastien-roucaries
committed
Resolve hostnames to IPv6 addresses in IPv6 mode

khorben
authored and
bastien-roucaries
committed
Re-indent

khorben
authored and
bastien-roucaries
committed
Only support IPv4 on Windows

khorben
authored and
bastien-roucaries
committed
Code cleanup

khorben
authored and
bastien-roucaries
committed
Use "::" for matching any address for IPv6 rules

khorben
authored and
bastien-roucaries
committed
No longer accept colon (":") as port separator

khorben
authored and
bastien-roucaries
committed
Fix DNAT with IPv6

khorben
authored and
bastien-roucaries
committed
Use "::/0" for IPT_ANY_IPV6

khorben
authored and
bastien-roucaries
committed
Port src_dst_check() to IPv6

khorben
authored and
bastien-roucaries
committed
Also output the value obtained for ip6tables

khorben
authored and
bastien-roucaries
committed
Complete the check and search for ip6tables

khorben
authored and
bastien-roucaries
committed
[test suite] start on IPv6 tests

mrash
authored and
bastien-roucaries
committed
[test suite] first working IPv6 complete cycle test

mrash
authored and
bastien-roucaries
committed
add IPv6 UDP server test, and IPv6 invalid destination test

mrash
authored and
bastien-roucaries
committed