head 1.30; access; symbols pkgsrc-2023Q4:1.30.0.6 pkgsrc-2023Q4-base:1.30 pkgsrc-2023Q3:1.30.0.4 pkgsrc-2023Q3-base:1.30 pkgsrc-2023Q2:1.30.0.2 pkgsrc-2023Q2-base:1.30 pkgsrc-2023Q1:1.29.0.16 pkgsrc-2023Q1-base:1.29 pkgsrc-2022Q4:1.29.0.14 pkgsrc-2022Q4-base:1.29 pkgsrc-2022Q3:1.29.0.12 pkgsrc-2022Q3-base:1.29 pkgsrc-2022Q2:1.29.0.10 pkgsrc-2022Q2-base:1.29 pkgsrc-2022Q1:1.29.0.8 pkgsrc-2022Q1-base:1.29 pkgsrc-2021Q4:1.29.0.6 pkgsrc-2021Q4-base:1.29 pkgsrc-2021Q3:1.29.0.4 pkgsrc-2021Q3-base:1.29 pkgsrc-2021Q2:1.29.0.2 pkgsrc-2021Q2-base:1.29 pkgsrc-2021Q1:1.28.0.10 pkgsrc-2021Q1-base:1.28 pkgsrc-2020Q4:1.28.0.8 pkgsrc-2020Q4-base:1.28 pkgsrc-2020Q3:1.28.0.6 pkgsrc-2020Q3-base:1.28 pkgsrc-2020Q2:1.28.0.4 pkgsrc-2020Q2-base:1.28 pkgsrc-2020Q1:1.28.0.2 pkgsrc-2020Q1-base:1.28 pkgsrc-2019Q4:1.27.0.4 pkgsrc-2019Q4-base:1.27 pkgsrc-2019Q3:1.26.0.6 pkgsrc-2019Q3-base:1.26 pkgsrc-2019Q2:1.26.0.4 pkgsrc-2019Q2-base:1.26 pkgsrc-2019Q1:1.26.0.2 pkgsrc-2019Q1-base:1.26 pkgsrc-2018Q4:1.25.0.18 pkgsrc-2018Q4-base:1.25 pkgsrc-2018Q3:1.25.0.16 pkgsrc-2018Q3-base:1.25 pkgsrc-2018Q2:1.25.0.14 pkgsrc-2018Q2-base:1.25 pkgsrc-2018Q1:1.25.0.12 pkgsrc-2018Q1-base:1.25 pkgsrc-2017Q4:1.25.0.10 pkgsrc-2017Q4-base:1.25 pkgsrc-2017Q3:1.25.0.8 pkgsrc-2017Q3-base:1.25 pkgsrc-2017Q2:1.25.0.4 pkgsrc-2017Q2-base:1.25 pkgsrc-2017Q1:1.25.0.2 pkgsrc-2017Q1-base:1.25 pkgsrc-2016Q4:1.24.0.12 pkgsrc-2016Q4-base:1.24 pkgsrc-2016Q3:1.24.0.10 pkgsrc-2016Q3-base:1.24 pkgsrc-2016Q2:1.24.0.8 pkgsrc-2016Q2-base:1.24 pkgsrc-2016Q1:1.24.0.6 pkgsrc-2016Q1-base:1.24 pkgsrc-2015Q4:1.24.0.4 pkgsrc-2015Q4-base:1.24 pkgsrc-2015Q3:1.24.0.2 pkgsrc-2015Q3-base:1.24 pkgsrc-2015Q2:1.23.0.22 pkgsrc-2015Q2-base:1.23 pkgsrc-2015Q1:1.23.0.20 pkgsrc-2015Q1-base:1.23 pkgsrc-2014Q4:1.23.0.18 pkgsrc-2014Q4-base:1.23 pkgsrc-2014Q3:1.23.0.16 pkgsrc-2014Q3-base:1.23 pkgsrc-2014Q2:1.23.0.14 pkgsrc-2014Q2-base:1.23 pkgsrc-2014Q1:1.23.0.12 pkgsrc-2014Q1-base:1.23 pkgsrc-2013Q4:1.23.0.10 pkgsrc-2013Q4-base:1.23 pkgsrc-2013Q3:1.23.0.8 pkgsrc-2013Q3-base:1.23 pkgsrc-2013Q2:1.23.0.6 pkgsrc-2013Q2-base:1.23 pkgsrc-2013Q1:1.23.0.4 pkgsrc-2013Q1-base:1.23 pkgsrc-2012Q4:1.23.0.2 pkgsrc-2012Q4-base:1.23 pkgsrc-2012Q3:1.22.0.22 pkgsrc-2012Q3-base:1.22 pkgsrc-2012Q2:1.22.0.20 pkgsrc-2012Q2-base:1.22 pkgsrc-2012Q1:1.22.0.18 pkgsrc-2012Q1-base:1.22 pkgsrc-2011Q4:1.22.0.16 pkgsrc-2011Q4-base:1.22 pkgsrc-2011Q3:1.22.0.14 pkgsrc-2011Q3-base:1.22 pkgsrc-2011Q2:1.22.0.12 pkgsrc-2011Q2-base:1.22 pkgsrc-2011Q1:1.22.0.10 pkgsrc-2011Q1-base:1.22 pkgsrc-2010Q4:1.22.0.8 pkgsrc-2010Q4-base:1.22 pkgsrc-2010Q3:1.22.0.6 pkgsrc-2010Q3-base:1.22 pkgsrc-2010Q2:1.22.0.4 pkgsrc-2010Q2-base:1.22 pkgsrc-2010Q1:1.22.0.2 pkgsrc-2010Q1-base:1.22 pkgsrc-2009Q4:1.21.0.22 pkgsrc-2009Q4-base:1.21 pkgsrc-2009Q3:1.21.0.20 pkgsrc-2009Q3-base:1.21 pkgsrc-2009Q2:1.21.0.18 pkgsrc-2009Q2-base:1.21 pkgsrc-2009Q1:1.21.0.16 pkgsrc-2009Q1-base:1.21 pkgsrc-2008Q4:1.21.0.14 pkgsrc-2008Q4-base:1.21 pkgsrc-2008Q3:1.21.0.12 pkgsrc-2008Q3-base:1.21 cube-native-xorg:1.21.0.10 cube-native-xorg-base:1.21 pkgsrc-2008Q2:1.21.0.8 pkgsrc-2008Q2-base:1.21 cwrapper:1.21.0.6 pkgsrc-2008Q1:1.21.0.4 pkgsrc-2008Q1-base:1.21 pkgsrc-2007Q4:1.21.0.2 pkgsrc-2007Q4-base:1.21 pkgsrc-2007Q3:1.20.0.4 pkgsrc-2007Q3-base:1.20 pkgsrc-2007Q2:1.20.0.2 pkgsrc-2007Q2-base:1.20 pkgsrc-2007Q1:1.19.0.4 pkgsrc-2007Q1-base:1.19 pkgsrc-2006Q4:1.19.0.2 pkgsrc-2006Q4-base:1.19 pkgsrc-2006Q3:1.18.0.4 pkgsrc-2006Q3-base:1.18 pkgsrc-2006Q2:1.18.0.2 pkgsrc-2006Q2-base:1.18 pkgsrc-2006Q1:1.17.0.6 pkgsrc-2006Q1-base:1.17 pkgsrc-2005Q4:1.17.0.4 pkgsrc-2005Q4-base:1.17 pkgsrc-2005Q3:1.17.0.2 pkgsrc-2005Q3-base:1.17 pkgsrc-2005Q2:1.16.0.2 pkgsrc-2005Q2-base:1.16 pkgsrc-2005Q1:1.14.0.4 pkgsrc-2005Q1-base:1.14 pkgsrc-2004Q4:1.14.0.2 pkgsrc-2004Q4-base:1.14 pkgsrc-2004Q3:1.13.0.4 pkgsrc-2004Q3-base:1.13 pkgsrc-2004Q2:1.13.0.2 pkgsrc-2004Q2-base:1.13 pkgsrc-2004Q1:1.12.0.2 pkgsrc-2004Q1-base:1.12 pkgsrc-2003Q4:1.10.0.2 pkgsrc-2003Q4-base:1.10 netbsd-1-6-1:1.9.0.2 netbsd-1-6-1-base:1.9 netbsd-1-6:1.7.0.6 netbsd-1-6-RELEASE-base:1.7 pkgviews:1.7.0.2 pkgviews-base:1.7 buildlink2:1.5.0.2 buildlink2-base:1.5 netbsd-1-5-PATCH003:1.5 netbsd-1-5-PATCH001:1.3 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.30 date 2023.06.26.09.20.58; author jperkin; state Exp; branches; next 1.29; commitid sdbICAaN4jd7druE; 1.29 date 2021.06.01.07.42.08; author adam; state Exp; branches; next 1.28; commitid zaRjzrzrxsyIVoVC; 1.28 date 2020.01.26.17.31.48; author rillig; state Exp; branches; next 1.27; commitid 4fBBvoSLJaGd0eUB; 1.27 date 2019.11.03.11.45.33; author rillig; state Exp; branches; next 1.26; commitid llzTCvoTAgLcNoJB; 1.26 date 2019.02.09.19.51.09; author rhialto; state Exp; branches; next 1.25; commitid 0OKwMMTPjRb438bB; 1.25 date 2017.02.12.01.01.19; author mef; state Exp; branches; next 1.24; commitid L00zp6l0WO7HaBFz; 1.24 date 2015.09.13.21.55.15; author leot; state Exp; branches; next 1.23; commitid P1LlvIX0MfjnL8By; 1.23 date 2012.10.23.17.18.15; author asau; state Exp; branches; next 1.22; 1.22 date 2010.03.08.11.59.54; author obache; state Exp; branches; next 1.21; 1.21 date 2007.12.04.13.30.06; author abs; state Exp; branches; next 1.20; 1.20 date 2007.05.25.00.28.19; author rh; state Exp; branches; next 1.19; 1.19 date 2006.12.12.19.34.06; author joerg; state Exp; branches; next 1.18; 1.18 date 2006.05.26.08.50.13; author adam; state Exp; branches; next 1.17; 1.17 date 2005.08.12.19.13.11; author drochner; state Exp; branches; next 1.16; 1.16 date 2005.04.11.21.46.45; author tv; state Exp; branches; next 1.15; 1.15 date 2005.04.04.10.00.54; author adam; state Exp; branches; next 1.14; 1.14 date 2004.10.03.00.17.49; author tv; state Exp; branches; next 1.13; 1.13 date 2004.04.12.21.54.27; author snj; state Exp; branches; next 1.12; 1.12 date 2004.02.14.17.21.46; author jlam; state Exp; branches; next 1.11; 1.11 date 2004.01.06.22.03.31; author keihan; state Exp; branches; next 1.10; 1.10 date 2003.07.17.22.51.04; author grant; state Exp; branches; next 1.9; 1.9 date 2002.09.10.06.10.04; author jlam; state Exp; branches; next 1.8; 1.8 date 2002.09.09.21.51.52; author wiz; state Exp; branches; next 1.7; 1.7 date 2002.07.12.15.13.08; author wiz; state Exp; branches; next 1.6; 1.6 date 2002.07.12.14.47.03; author wiz; state Exp; branches; next 1.5; 1.5 date 2001.12.19.22.25.30; author agc; state Exp; branches; next 1.4; 1.4 date 2001.09.27.23.18.26; author jlam; state Exp; branches; next 1.3; 1.3 date 2001.03.20.12.46.50; author rh; state Exp; branches; next 1.2; 1.2 date 2001.02.17.18.18.44; author wiz; state Exp; branches; next 1.1; 1.1 date 2000.10.15.17.29.14; author rh; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2000.10.15.17.29.14; author rh; state Exp; branches; next ; desc @@ 1.30 log @dante: SunOS needs libnsl. @ text @# $NetBSD: Makefile,v 1.29 2021/06/01 07:42:08 adam Exp $ DISTNAME= dante-1.4.3 CATEGORIES= net security MASTER_SITES= http://www.inet.no/dante/files/ MAINTAINER= pkgsrc-users@@NetBSD.org HOMEPAGE= https://www.inet.no/dante/ COMMENT= BSD-licensed socks 4/5 proxy suite LICENSE= modified-bsd CONFLICTS= socks4-[0-9]* USE_LIBTOOL= yes GNU_CONFIGURE= yes CONFIGURE_ARGS+= --with-socks-conf=${PKG_SYSCONFDIR}/socks.conf CONFIGURE_ARGS+= --with-sockd-conf=${PKG_SYSCONFDIR}/sockd.conf LDFLAGS.SunOS+= -lnsl CHECK_PORTABILITY_SKIP= contrib/StartupItems.Dante RCD_SCRIPTS= sockd INSTALLATION_DIRS+= share/examples/dante post-install: .for cfg in sockd.conf socks-simple.conf socks.conf ${INSTALL_DATA} ${WRKSRC}/example/${cfg} ${DESTDIR}${PREFIX}/share/examples/dante .endfor .include "../../mk/bsd.pkg.mk" @ 1.29 log @dante: updated to 1.4.3 1.4.3: Generic changes: o RHEL8 build fix. Server changes: o LDAP module functionality expanded with support for PAC and LDAP based authentication. o Fix an error case where the Dante mother process would never terminate a request process that failed handling a client due to resource shortage, leading the request process to hang around idle forever. Will hopefully fix problem reported by ANON. o Fix for BSD authentication ECHILD error on OpenBSD. Client changes: o Work around an issue where "logoutput: syslog" in the client could create issues for the application being socksified. o Added missing NULL argument check in Raccept(). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2020/01/26 17:31:48 rillig Exp $ d19 2 @ 1.28 log @all: migrate homepages from http to https pkglint -r --network --only "migrate" As a side-effect of migrating the homepages, pkglint also fixed a few indentations in unrelated lines. These and the new homepages have been checked manually. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2019/11/03 11:45:33 rillig Exp $ d3 1 a3 2 DISTNAME= dante-1.4.2 PKGREVISION= 1 @ 1.27 log @net: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2019/02/09 19:51:09 rhialto Exp $ d9 1 a9 1 HOMEPAGE= http://www.inet.no/dante/ @ 1.26 log @Use a bigger hammer to disable ssp for interposition.c. cwrapper also adds -D__FORTIFY_SOURCE=2. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2017/02/12 01:01:19 mef Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.25 log @Updated net/dante to 1.4.2 -------------------------- *** *** Monday, February 6, 2017 -- Dante v1.4.2 *** o Support new version of libminiupnp. Patch from Michele Testa o Fix memory bug in the client that would lead to a crash when resolving hostnames on certain platforms. Diagnosis and patch from Jeremie Courreges-Anglas . Thank you. o A new environment variable has been added to aid application compatibility with socksify: SOCKS_FORCE_BLOCKING_CONNECT. See the socksify manpage for more information. o Fixed bug in configure that broke compilation with rpmbuild on newer Linux versions. Multiple bug reports received, thanks to everyone that reported this problem. o Add glibc-devel as Dante rpm requirement. Requires entry for librt, used by socksify. Suggested by . Also needed for libdl.so. o Various NetBSD configure and server related fixes. Thanks to Anthony Howe for bug reports and testing. o Corrected srchost values in examples/sockd.conf. Thanks to Danesh Pajoh, Babak for bug report. o Various build fixes, affecting RHEL 7 and potentially other platforms. Thanks to Thomas Petazzoni for submitting related patch. o Updates to hostid/TCP_IPA code to use newer API version. o Added check for OpenBSD getpwnam_shadow(). o Added workaround for __FD_ELT() fortify related bug in recent glibc versions. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2015/09/13 21:55:15 leot Exp $ d4 1 @ 1.24 log @Update net/dante to dante-1.4.1. Changes: *** *** Wednesday, September 3, 2014 -- Dante v1.4.1 *** o Fixed configure problem with detection of libc.so on recent FreeBSD versions. Problem report and testing by Mikhail . o Fixed problem in configure test used for figuring out which buffer in an IPC socket is used for determining bytes that can be buffered. Should fix problem on FreeBSD. Diagnosed in detail by Mikhail . Also reported by Carlos Jacobo Puga Medina . o Fixed bug in handling of buffered GSSAPI data. o Added keywords for specifying that only IPv4 or IPv6 should be used on internal or external interfaces. o Fix bug that prevented external.rotation: same-same from working correctly. Reported by Alexander.V.Makkoveev (makkoveev@@gmail.com.example.com). o AIX 6.1 compilation fixes. o NetBSD 6.1.3 gethostbyaddr() configure fix. Problem reported by Anthony Howe . o Use wait3(2) rather than wait4(2), as the latter (implemented as a wrapper on Solaris) has a bug on Solaris in the handling of the WAIT_ANY value. This is -1 traditionally, but on Solaris wait4(2) is expecting it to be the value 0. This change also fixes a similar problem on AIX. o Remove extra CRLF from CONNECT request, as in patch submitted by "Dyson, Brian J" . *** *** Monday, November 18, 2013 -- Dante v1.4.0 *** o Older syntax for setting the socket buffer sizes via socket.recvbuf.udp, socket.sendbuf.udp, socket.recvbuf.tcp and socket.sendbuf.tcp options have been deprecated and replaced with the more general API for setting socket options. "socket.recvbuf.udp" can now be set by ".udp.so_rcvbuf" "socket.sendbuf.udp" can now be set by ".udp.so_sndbuf" "socket.recvbuf.tcp" can now be set by ".tcp.so_rcvbuf" "socket.sendbuf.tcp" can now be set by ".tcp.so_sndbuf" refers to either "internal", for Dante's internal interface(s), or "external", for Dante's external interface(s). o socks-rules now require a "socks" prefix (like client-rules require a "client" prefix), and the socks "method" keyword has been renamed to "socksmethod". o The "socksmethod" keyword can now be set in client-rules too. It is used to override the default preference for what socksmethod to select for which clients addresses, making it possible to by default e.g., have the preference "gssapi username none", but for some client-ranges have a different preference, e.g., "none username gssapi". Normally there is no need to use set this keyword in a client-rule. o Fallback to direct (non-proxy) routes now defaults to off in the client, as well as in the server. To keep previous behaviour in the client, with direct route fallback for destinations with no matching route, set SOCKS_DIRECTROUTE_FALLBACK to "yes" in the environment, or ./configure with --enable-drt-fallback. Direct fallback is enabled if there are no routes configured (as is usually the case in a server configuration), and disabled otherwise. o IPv6 is now supported in the server. Standard IPv6 address syntax is used for addresses, with the addition of the special address "0/0" used for matching both all IPv4 and all IPv6 addresses. o New "monitor" object added. Syntax is similar to rules and routes, but instead of applying to individual sessions, it applies to all sessions currently matching the addresses to monitor. This can be used for monitoring network anomalies related to too little data being transferred or too many disconnects occurring, triggering alarms if detected. o Possibility to configure system errors and DNS-errors for special logging in certain cases (when connecting and performing hostname resolving). o More aggressive regarding how many processes to fork when starting and how many processes to reserve for future clients. o Added new log keyword: "tcpinfo". Used to report more extensive statistics about sessions, including TCP_INFO on supported platforms. o SIGINFO/SIGUSR1 output is now logged at level "info" instead of level "debug". o SIGHUP code rewritten. Should function considerably better in environments were SIGHUP is, for whatever reason, sent an excessive amount of times every second. o Default for the maximum number of clients an i/o process can handle has been increased from 8 to 32. o Improved UDP compatibility by sending appropriate ICMP unreachable errors to clients and targets, if running with the appropriate privileges (typically, root is required for this). Makes it possible for a client or target to be notified that a UDP packet it wanted the Dante server to forward was not forwarded. o Reduction in memory consumption at the expense of allocating extra memory dynamically in the very rare, perhaps non-existing, cases where the extra memory is needed. o The default timeout for TCP i/o (timeout.io.tcp) has been changed from 84000 to 0. 0 means use the kernels default, which in most cases will mean no timeout. See UPGRADE for more information. o The session module has been merged with the mainstream Dante code, and has also been extended to support the following new features: - connection throttling (number of new sessions accepted per second). - state-keys. Two state keys are currently supported: - per-IP address. - per-hostid (hostid is supported on certain platforms, with certain kernel patches, with certain clients). The syntax has also changed (see UPGRADE). See the manual for more information about the new features. o Code used for finding the correct outgoing address to bind when external.rotation is set to "route" replaced with much simpler, but hopefully equally (or better) functioning code. Idea taken from Quagga. o Use getpassphrase() rather then getpass() to obtain password for username authentication when available. Avoids 9 character limit on Solaris. Suggested by Albert Fluegel o Use sqrt() rather than sqrtl() in stddev calculation, as sqrtl() is not available on some platforms (such as FreeBSD 7.2). Problem reported by Rudolf Polzer . o If the authentication method used was RFC931 (ident), the username was not always logged when it should be. Reported by Gregory Charot (EVENIUM) . o Syntax checking has been improved to better detect invalid or likely incorrect server configurations. This can result in some configurations that have previously been accepted or accepted with warnings by Dante, to now cause an error on startup, preventing the Dante server from starting up until the configuration error has been fixed. o Fixed compilation on OpenBSD with compilers not supporting -Wbounded. Problem report and testing by Mikael More . o GSSAPI "clear" is no longer enabled by default, as it is not part of the SOCKS GSSAPI standard per se. o external.rotation was not handling non-IPv4 target addresses correctly. Reported and diagnosed by Rudolf Polzer . o The "--disable-libwrap" option has been renamed "--without-libwrap". o Fixed bug that would cause the following warning to sometimes be erroneously reported: "warning: accept(2) failed: Resource temporarily unavailable" o SIGINFO log information extended to include information about i/o buffer status and as well as UDP packet latency. o Real-time scheduling priority settings and CPU affinity settings made available in sockd.conf. See https://www.inet.no/dante/files/dante_realtime_preview.pdf for a performance analysis done in relation to these new features. o General API for setting socket options on sockets used by Dante made available in sockd.conf. o Support for cross compilation of client library for Android (system name 'arm-linux-androideabi'). Testing and analysis by Yoav Weiss . o Problem with sockd.init generation in dante.spec fixed. Reported by Luiz Gustavo Nascimento . *** *** Thursday, August 4, 2011 -- Dante v1.3.2 *** o Part of the possible resource optimization indicated in section 4.4 of the Dante 1.3.1 performance evaluation report (http://www.inet.no/dante/doc/1.3.x/dante_performance_1.3.1.pdf) has been implemented: scheduling new clients to the Dante process with fewest free slots available. o If a proxy server (socks, http, or upnp) is configured via environment variables, don't attempt to also parse any socks.conf files. o The "HTTP_PROXY" environment variable has been renamed to "HTTP_CONNECT_PROXY" to avoid conflict with HTTP proxies that do not support the HTTP CONNECT request. o Fixed an unintended change to ACL semantics regarding bind requests in Dante 1.2.3. Noted by Ralf Wenk . Many thanks. o Fixed a bug regarding handling of cases where the ulimit for max number of files is unlimited. Reported and analyzed by Ralf Wenk . o Fixed a bug introduced in 1.3.1 related to privileges during startup on Solaris. *** *** Tuesday, June 21, 2011 -- Dante v1.3.1 *** o Fixed a bug regarding handling of socks clients that do not follow the spec and start sending traffic data before request has been granted. o Fixed an error related to ACL on UDP-packets. If a given SOCKS client was allowed to send some UDP packets, in some cases packets from the same SOCKS client that should have been blocked were allowed. *** *** Tuesday, June 14, 2011 -- Dante v1.3.0 *** o Fixed a bug related to parsing the HTTP_PROXY environment variable. Problem reported by John Fletcher . Note that the format of the HTTP_PROXY variable has also changed. o Logfiles can now be added or changed in sockd.conf after startup. o The priority of proxy routes has changed, so that a SOCKS v4 route is now preferred over a SOCKS v5 route when both can be used, because v4 requests can be performed faster than v5 requests. o Support for a new module, providing LDAP based authorisation. Developed by Markus Moeller (markus_moeller at compuserve.com). Note that modules need to be purchased separately. See "http://www.inet.no/dante/module.html" for more information about Dante modules. o Resource requirements have been significantly reduced. Performance has also been improved. o When checking whether a username is member of a group, as used in in group-based authentication checks, also check against the primary groupname of the user, as listed in /etc/passwd or similar, rather than only against the entries in /etc/group or similar. Based on a patch from Ralf Wenk . Thanks. o The socket buffer sizes can now be set in sockd.conf. The default value is 0, which lets the kernel choose the buffer sizes itself. o A new keyword has been added to the configuration files: "errorlog". The syntax is the same as for the "logoutput" keyword, but "errorlog" is used to specify how errors, and only errors, should be logged. The meaning of the "logoutput" keyword has not changed, and will still log errors if configured to do so. o "child.maxidle: yes" is now the default setting, meaning most idle sockd child processes will be terminated automatically. o A bug that prevented binding privileged ports in the client from working has been fixed. Bug reported by Christophe Réquillart o Two new timeout parameters have been added to sockd.conf: - "timeout.connect": This controls how many seconds the server will wait for a connect initiated on behalf of the SOCKS-client to complete. The default is 30. Setting it to 0 will use the kernel default. - "timeout.tcp_fin_wait": This controls the equivalent of TCP FIN-WAIT-2. Note that FIN-WAIT-2 is a normal TCP state. Having many tcp connections stuck in this state does not indicate something is wrong, but it can create a resource problem for the kernel if there are too many of them. The default value is 0, meaning, let the kernel handle it as before rather than for Dante to time out sessions in this state. o "timeout.connect" is now supported also in socks.conf. The value overrides the default timeout when the client attempts to connect to the SOCKS server. o The different server timeouts (negotiate, connect, i/o) can now be set on a rule-by-rule basis, and not just globally for all rules. o The config.h variables MAX_ROUTE_FAILS and BADROUTE_EXPIRE can now set in the configuration files instead of at compile time. The new values are "route.maxfail" and "route.badexpire" and control how to handle bad routes (to e.g., a SOCKS/HTTP proxy server). o Support for a new value for the "external.rotation" keyword: "same-same". This will tell the Dante server to use the same address for outgoing connections as the address the SOCKS client was accepted on, i.e., one of the internal addresses. Based on a patch from Lysenko Konstantin . Thanks. o Fixed a bug where we could end up exiting if we got a SIGHUP at a point where we had no more free file descriptors, and thus could not reopen the sockd.conf. Problem reported by Mark Sinner . o The most time consuming part of the work performed by the request children (waiting for connect(2) to complete) has been moved to the i/o children. This should reduce the total number of sockd processes necessary to handle medium and higher loads, since the request children can only handle one client at a time, while the i/o children can handle many. o The "srchost" parameter "nomismatch" has been renamed to "nodnsmismatch", while "nounknown" has been renamed to "nodnsunknown". The "nodnsmismatch" and "nodnsunknown" functionality is now implemented internally in sockd, rather than via libwrap; there is no longer any dependency on libwrap ("tcp_wrappers") when using these options. o BSD authentication support on OpenBSD. o Option ordering in sockd.conf is now enforced, rather than just recommended. Server options now always have to come before rules and routes. o The file to write the pid to can now be specified on the command line using the "-p" option. o If TMPDIR is not set, temporary files will be created in the current working directory when sockd is started. If this fails, temporary files will be created in "/tmp" as before. o A 64-bit version of libdsocks is now built on 64-bit OpenSolaris machines. Should make socksify work with 64-bit applications. o Fix compilation on machines with Linuxthreads. Locking via Linuxthreads is however not supported. Problem report and testing by Nicolas VANHAUTE o Fix usage of negation operation in shell scripts causing problems for socksify when using Bourne shell on Solaris 8. Problem reported by Sebastian Kayser . o Size of byte and packet counters used for logging changed to 64 bits. o IBM Visual Age C/C++ V8 compilation fixes for AIX. Problem reported by Kieron Curtis2 *** *** Monday, March 21, 2011 -- Dante v1.2.3 *** o Fix problem introduced in version 1.2.1, causing the SO_REUSEADDR flag to not be set. Would cause problems during server restart if only the main process was killed. Thanks to Ralf Wenk for reporting this problem. o The regular expression for host and interface name parsing has been relaxed somewhat, allowing the use of some interface names and host names containing characters that were not allowed previously. Fixes problem reported by karesmakro , Ralf Wenk , and . o The traffic log format has been slightly extended and now includes complete information about all communication endpoints, for both normal usage and with server chaining. o Compilation fixes for older Linux distributions. o Fix bug where the Solaris capabilities were not correctly added/removed at all times. o Compilation fixes for AIX 6.1. Problem report and testing by Ville O Kesola and Ralf Wenk . *** *** Tuesday, September 21, 2010 -- Dante v1.2.2 *** o Fix PAM bug introduced in v1.2.0 that would leak resources when using PAM. Also relax the code handling PAM concerning unknown msg_styles. o Set PAM_RUSER so that rhosts-based PAM authentication can work. o Wrapper for calling getsockopt(2) with SO_ERROR added. o Compilation fixes for AIX 6.1. Problem reported by Ralf Wenk . Note to Ralf Wenk: we have been unable to contact you on the email address you send from. *** *** Friday, May 28, 2010 -- Dante v1.2.1 *** o GSSAPI support is no longer disabled on Heimdal versions older than 0.8.0, which have no wrap/unwrap support for aes256-cts-hmac-sha1-96. The following krb5.conf configuration might be needed to ensure that AES-256 is not used: default_etypes = arcfour-hmac-md5 des3-cbc-sha1 des-cbc-crc des-cbc-md5 default_etypes_des = des-cbc-crc des-cbc-md5 Problem analyzed by Markus Moeller . o Code for shutting down idle sockd processes put back and can be enabled again, if desired. It is not recommended for busy servers however as performance may be slightly degraded. o Fix bug related to clients using MSG_PEEK and GSSAPI on Linux. Problem found by Markus Moeller . o Don't print warning if accept(2) fails when started with the -N option. When started with the -N option, it is expected that accept(2) will fail in 1/k of the cases. Instead just log a debug message about it. Should fix problem reported by Mark Sinner . o The fflush() wrapper function did not handle a NULL argument. Reported by "Kirby Zhou" and Victor Sologoubov o Fix libsocks upnpcleanup() linking problem when compiled without libminiupnpc. Problem reported by Kyle Thurow and Adam Prato . o Assert failure related to message passing on some 64-bit architectures fixed. Problem reported by Soner Tari . o The capi/socks.h file was not correctly installed. Problem reported by Soner Tari . o Compilation fixes for OpenSuse 11.1. Problem reported by Markus Moeller (markus_moeller at compuserve.com). o Compilation fix for config_parse.y compilation without YYDEBUG. Problem reported by Markus Moeller (markus_moeller at compuserve.com). o Compilation fixes for AIX 6.1. Problem reported by Ralf Wenk . Tested by Marcel Augenstein. *** *** Tuesday, October 27, 2009 -- Dante v1.2.0 *** o Improvements to client thread compatibility. The client library should now be mostly thread safe. o Solaris privilege model support. Based on patch from Mayuresh Nirhali & co. o Make support for the socks 5 version described in draft-5.05 be configurable. Before this was always enabled, but it breaks clients based on NEC socks code in some cases as they use the same bit to mean something completely different. A new option has been added to sockd.conf to enable it: "compatibility: draft-5.05". Unless explicitly enabled, the Dante server will not use the socks 5.05 draft specification. Problem found by Markus Moeller (markus_moeller at compuserve.com). o Don't leak username/passwords provided to us for local authentication to upstream proxy server when server-chaining. Error reported by Mathieu DELAPLACE . o Fixed a bug/oversight that imposed an artificial limit on the number of sockd processes that could be created, even when the load required more. o Slight improvement of configuration parsing in an attempt to avoid confusing non-qualified hostnames with NIC interface names. o The default connect-timeout/negotiate-timeout has been reduced from 120 seconds to 30 seconds. The "connecttimeout" name has also been deprecated in favour of "timeout.negotiate". o Separate iotimeouts can be set for udp and tcp clients. The "iotimeout" object has also been deprecated in favour of "timeout.io". o New configure option: "--disable-drt-fallback". Used to disable the attempted automatic fallback to a direct route if there are no usable proxy routes. Default is, as before, automatic fallback. o Added a new option: "udp.connectdst". Controls whether the server should connect udp sockets to the destination. The default for this release is yes, which improves performance, but _may_ be incompatible with some udp-based application protocols. Please let us know if you experience problems with some applications no longer working. o Markus Moeller (markus_moeller at compuserve.com) contributed support for GSSAPI encryption/authentication (RFC 1961) to both the socks server and socks client. Many thanks to Markus for this and for a lot of help in testing it. o Fixed problem with connection close before accept on HPUX. Based on patch from Reine Persson . o Support for SunOS 4 and Solaris 2.5.1 removed. o Added gethostbyaddr prototype for compilation on FreeBSD v6.2. Patch from "Igor Mozolevsky" . o Fix getifa compilation problem on Solaris 8. Reported by "Thomas" . o Patch from Markus Moeller (markus_moeller at compuserve.com), to limit the range of udp-ports used between the socks-client and the Dante server. o By default, try to auto-add direct routes for all addresses on the LAN. To disable it, set SOCKS_AUTOADD_LANROUTES to "no". o Fix bug that caused problems with certain combinations of bind(2)/accept(2)/close(2). Reported by Markus Moeller (markus_moeller at compuserve.com). o Fix bug that erroneously blocked the bind request from some clients. Reported by Markus Moeller (markus_moeller at compuserve.com). o Add support for environment variables SOCKS4_SERVER, SOCKS5_SERVER, HTTP_PROXY, and UPNP_IGD. If set, they specify the socks v4, socks v5 server, http proxy, or UPNP-enabled ID to use, without the need for a socks.conf. This should make it possible to run socksify with reasonable results even without a socks.conf, as long as one of these new environment variables are set correctly. o Auto-add direct routes for all gateways. Should make the client a little more user-friendly by not having to specify "direct" routes for the proxyserver any longer. o More fine grained marking of when to mark a proxy route as "bad" so that it will not be used again by the same client. Also add a new variable to config.h, MAX_ROUTE_FAILS, determining how many times a route can fail before being blacklisted. Default is one (same semantics as before there was a variable to control this). o Fix bug that could prevent password authentication from working on some systems. Spotted by Nathan Johnson . o Add configure option --without-glibc-secure, which disables check for the glibc variable __libc_enable_secure. Creates undesired dependencies for packaging. Reported by Mathieu CHOUQUET-STRINGER . o New getifaddrs() compatibility function, taken from Heimdal-1.2.1. o (Open)Solaris sa_len compilation problem fixed. Reported by Markus Moeller (markus_moeller at compuserve.com). o New version of the BSD version of "external.rotation: route", from Christoph Badura . o Support for interface names in sockd rules, and in the destination address for socks routes. Should make it easier to set up direct routes for local lan in the client (specify all local interface names in route statements), and block connections to e.g. loopback addresses (specify the the loopback interface name in a block rule) in the server. o UPnP support in the client, using the miniupnp library by Thomas Bernard (http://miniupnp.free.fr/). UPnP is a protocol implemented by many home/small-business routers and adsl-modems. It allows you to dynamically open up ports on the router for accepting incoming connections, as well as figuring out what the external ipaddress of the router is. Dante uses this to make socksify of ftp/bittorent/etc programs work via the UPnP router. Note that only the miniupnp library with release date 2009/09/21 or later is expected to work with Dante. o Be less strict about bind in the client. The standards says it is expected that the client first performs a connect via the socks server, but it seems some/many socks servers support the client requesting a bind without a previous connect, so we assume that is the case in the client from now on. o Changed the magic bytes that indicate the client is requesting use of the Dante-specific bind extension from 0x00000000 to 0xffffffff, as part of the process to become less strict about the bind command requiring a previous connection. o Don't zero password in client if we read it from environment, or it will not work the next time the same client process tries to authenticate to the server. Found by Pavel Fedin . That mail address no longer works. Please contact us if you have another address for Mr. Fedin. o Add support for "group:" syntax to rules, similar to "user:" statement. Requested by Don Harvie o Close connection to PAM server each time we get an error-reply from it, fixing a bug. Patch from Robert Marcano . o Incorrect assert fixed. Problem reported by "d binderman" . o Log close of client-rule with correct command. Fixes bug reported by Tom Vandenbelt . o Update to autoconf 2.61 and libtool 1.5.26. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2012/10/23 17:18:15 asau Exp $ d3 1 a3 1 DISTNAME= dante-1.4.1 @ 1.23 log @Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2010/03/08 11:59:54 obache Exp $ d3 1 a3 2 DISTNAME= dante-1.1.19 PKGREVISION= 1 d5 1 a5 1 MASTER_SITES= ftp://ftp.inet.no/pub/socks/ d10 1 @ 1.22 log @Add user-destdir installation support. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2007/12/04 13:30:06 abs Exp $ a13 2 PKG_DESTDIR_SUPPORT= user-destdir @ 1.21 log @Update dante to 1.1.19nb1: Add rc.d startup script @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2007/05/25 00:28:19 rh Exp $ d14 2 d25 2 a27 1 ${INSTALL_DATA_DIR} ${PREFIX}/share/examples/dante d29 1 a29 1 ${INSTALL_DATA} ${WRKSRC}/example/${cfg} ${PREFIX}/share/examples/dante @ 1.20 log @Make it explicit that this is a Socks 4/5 proxy as suggested by lukem@@ Remove me as maintainer (I haven't been maintaining this for some time now) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2006/12/12 19:34:06 joerg Exp $ d4 1 d21 2 @ 1.19 log @Skip a file we don't care about in the portability check. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2006/05/26 08:50:13 adam Exp $ d7 1 a7 1 MAINTAINER= rh@@NetBSD.org @ 1.18 log @Changes 1.1.19: o Disabled code for shutting down idle sockd processes, appears to need more testing. o Upgrade to Automake 1.9.6. o Use __libc_enable_secure if it exists and issetugid() doesn't. Should allow the SOCKS_CONF environment variable to be used on Linux. o Check if large files need special support; logfiles can grow large. o Drop trying to optimize away unnecessary PAM calls, creates obscure problems on some PAM-Linux implementations. o Fixed bug introduced as part of additions to better preserve TCP semantics across connections. o New module available: session. This gives control over how many sessions different clients can create. o In order to share some code, there were some api changes made to the bandwidth module, requiring users to upgrade. Users of the bandwidth module can contact sales for a free upgrade. o Fix bug preventing immediate-error on wrong password to take effect for servers configured to use PAM. o Update usage of 'head'. o Support server-chaining. Currently only the tcp connect command is supported. It might be possible to add support for udp and tcp bind if requested. o Fix PAM-related bug introduced in version 1.1.16. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2005/08/12 19:13:11 drochner Exp $ d18 2 @ 1.17 log @update to 1.1.17 changes: -Enabled code for shutting down idle sockd processes. -Return immediate error if username/password is wrong -better preserve TCP semantics across connections -bugfixes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2005/04/11 21:46:45 tv Exp $ d3 1 a3 1 DISTNAME= dante-1.1.17 @ 1.16 log @Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2005/04/04 10:00:54 adam Exp $ d3 1 a3 1 DISTNAME= dante-1.1.15 @ 1.15 log @Changes 1.1.15: o Limit the maximum number of available descriptors if necessary, avoiding a possible overflow of fd_sets. o Added absolute timestamp to logformat, in preparation for new module. o Fixed problem involving non-blocking connects in socks clients on Linux. o Prototype related tests during configure are rewritten. Might require prototypes for some platforms to be readded. o Compilation fixes for AIX 5.1-ML03 with IBM Visual Age C/C++ V5. Based on patch from Kieron Curtis2 . o A 'an macro' version of the sockd.8 manual page. Submitted by Tony Leneis . o Upgrade to autoconf 2.59, libtool 1.5.10 and automake 1.9.3. o Patch to code for shutting down idle sockd processes, from William Adams . NOT ENABLED. o Add test for setegid(), use replacement if not found. Replacement code based on patch by . o Do not warn at runtime about SO_{SND,RCV}LOWAT socket options if not supported by OS. Based on patch from William Adams . o enable setegid() call after moving it to correct place; William Adams . o Support for socksification of getipnodebyname(), contributed by Lennart Dahlström . o Support for socksification of getaddrinfo(), contributed by Motoyuki Kasahara . o Fix some problems with descriptor passing on platforms without cmsghdr. o AIX 5.1 ML-03 compilation fixes for IBM Visual Age C/C++ compiler version 5 by Kieron Curtis2 . o Remove usage of SO_BSDCOMPAT, obsolete and causes warnings with version 2.6 Linux kernels. Noted by Adrian Bridgett . @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2004/10/03 00:17:49 tv Exp $ a12 1 USE_BUILDLINK3= yes @ 1.14 log @Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10 in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include. @ text @d1 1 a1 2 # $NetBSD: Makefile,v 1.13 2004/04/12 21:54:27 snj Exp $ # d3 3 a5 14 DISTNAME= dante-1.1.14 PKGREVISION= 1 CATEGORIES= net security MASTER_SITES= ftp://ftp.inet.no/pub/socks/ MAINTAINER= rh@@NetBSD.org HOMEPAGE= http://www.inet.no/dante/ COMMENT= BSD-licensed socks 4/5 proxy suite CONFLICTS= socks4-[0-9]* USE_BUILDLINK3= YES GNU_CONFIGURE= YES USE_LIBTOOL= YES d7 9 @ 1.13 log @Convert to buildlink3. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2004/02/14 17:21:46 jlam Exp $ d5 1 @ 1.12 log @LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that are automatically handled by the default setting in bsd.pkg.mk. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2004/01/06 22:03:31 keihan Exp $ d14 1 a14 1 USE_BUILDLINK2= YES @ 1.11 log @Update dante to 1.1.14. Compared to the previous release, this version brings amongst other changes the following: Server changes: o Fix bug that prevented rfc931 auth (ident) from working, patch from "Meno Abels" . o Workaround for 'bswap_32' header bug on linux. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2003/07/17 22:51:04 grant Exp $ a17 1 LIBTOOL_OVERRIDE= ${WRKSRC}/libtool @ 1.10 log @s/netbsd.org/NetBSD.org/ @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2002/09/10 06:10:04 jlam Exp $ d4 1 a4 1 DISTNAME= dante-1.1.13 @ 1.9 log @Use buildlink2 and add a buildlink2.mk file for other packages. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2002/09/09 21:51:52 wiz Exp $ d8 1 a8 1 MAINTAINER= rh@@netbsd.org @ 1.8 log @Use PKG_SYSCONFDIR. From Urban Boquist in pkg/18242. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2002/07/12 15:13:08 wiz Exp $ d14 1 d19 2 a20 2 CONFIGURE_ARGS+= --with-socks-conf=${PKG_SYSCONFDIR}/etc/socks.conf CONFIGURE_ARGS+= --with-sockd-conf=${PKG_SYSCONFDIR}/etc/sockd.conf @ 1.7 log @LTCONFIG_OVERRIDE -> LIBTOOL_OVERRIDE. Makes libdsocks.a appear again. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2002/07/12 14:47:03 wiz Exp $ d18 2 a19 2 CONFIGURE_ARGS+= --with-socks-conf=${PREFIX}/etc/socks.conf CONFIGURE_ARGS+= --with-sockd-conf=${PREFIX}/etc/sockd.conf @ 1.6 log @Update to 1.1.13. Changes since 1.1.9: Logging fixes (deprecating -l option to sockd) Two commercial modules available, redirect and bandwidth (not included in pkg) Some more from the 'Changes' file: o Move daemon() call to later so more errors can be reported, suggested by Borsenkow Andrej . o fix problem when linking with libsocks; NISHIMURA Daisuke . o fix some problems when socksifying, making certain programs hang forever (e.g. certain versions/installations of "ssh -X"). Thanks to NISHIMURA Daisuke for diagnosis, help and testing. o Don't mark the rule as good either if sockscf.state.unfixedpamdata, fixes bug reported by Jerry Murdock" . o fix a bug preventing the list given in a 'user:' keyword from being checked correctly. Reported by Oleg Bulavsky . o "-h" prints out configfile used, based on suggestion from dh_tsc_10@@ugcs.net. o fix bugs that reset some defaults at the wrong time, reported by dh_tsc_10@@ugcs.net. o prototype script for generation of graphs with usage information included (bin/sockd-graphgen). Contact us if you run a socks server with significant usage, and you are willing to help with testing. o Some minor optimisations in server i/o code, at the cost of some timer accuracy concerning bandwidth limiting/client expiration. o prefix "socks" to some global variables to avoid collisions during socksify. Reported by Don Reid . o capi/socks.h needs Rxxx prototypes to work with a c++ compiler. Noted by Alex Morozov . o If Rgetsockname() is called on a socket that a previous uncompleted Rconnect() has been done on, try to sleep until Rconnect() has finished instead of returning ENOBUFS. Hoped to help compatibility with some applications. o Modified httpproxy code a little, based on patch from dh_tsc_10@@ugcs.net. o Code for selecting which of multiple external ipaddresses to use on a global basis based on routing. Code contributed by Tom Chan . o Rename "pamservicename" to "pam.servicename". o Fix memory overrun problem in Rgethostbyname*(). Found and diagnosed by dme@@dme.org, thanks. o new method added: "pam". Code contributed by Patrick Bihan-Faou, MindStep Corporation, patrick@@mindstep.com. o let client-rules have their own global methodline, "clientmethod", default value set to "none". The global "method" is only used for socks-rules now. o delay checking of password/etc til we have received the socks request (rather than during negotiation, as was the case). Required for supporting passwordbased authentication via non-socks methods, e.g. pam. o socklen_t definition updated for NetBSD 1.5U. Problem report and patch submitted by Janne Snabb . o Output from 'config.guess' is not sufficient to determine use of elf on NetBSD. Problem report and patch submitted by Janne Snabb @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2001/12/19 22:25:30 agc Exp $ d17 1 a17 1 LTCONFIG_OVERRIDE= ${WRKSRC}/ltconfig @ 1.5 log @Add the appropriate types to various network system call prototypes, so that configuration works on NetBSD. Fixes a problem highlighted in recent i386 bulk build report. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2001/09/27 23:18:26 jlam Exp $ d4 1 a4 1 DISTNAME= dante-1.1.9 a19 5 BUILD_DEPENDS+= autoconf>=2.13:../../devel/autoconf pre-configure: cd ${WRKSRC} && ${LOCALBASE}/bin/autoconf @ 1.4 log @Mechanical changes to 375 files to change dependency patterns of the form foo-* to foo-[0-9]*. This is to cause the dependencies to match only the packages whose base package name is "foo", and not those named "foo-bar". A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net. Also change dependency examples in Packages.txt to reflect this. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2001/03/20 12:46:50 rh Exp $ d20 5 @ 1.3 log @Update dante to 1.1.9. Changes include: *** Tuesday, March 13, 2001 -- Dante v1.1.9 o fix big bug in rulespermit(). Problem reported by Stephan Eisvogel . *** Tuesday, February 20, 2001 -- Dante v1.1.8 o contrib directory actually added to distributed archive *** Tuesday, February 20, 2001 -- Dante v1.1.7 o contrib/sockd-stat.awk, provides statistics based on sockd logfiles. Contributed by Stephan Eisvogel . o If gethostbyname() fails, treat it as if resolveprotocol was set to fake, meaning we hope the socksserver will be able to resolve it. Will presumably make certain dns configurations work better for client. o When showing rule (debug mode), print out linenumber too. loosely based on suggestion from "N. Kremla" (kremlanh@@aramco.com.sa). o contrib/ directory added. o Support for giving interfacenames as internal/external address. o osf host test in configure did not match all alpha based machines; Dobrica Pavlinusic . o -V flag added to sockd, which causes the server to exit after parsing the configuration file. o Header file (socks.h) with socks function prototypes added. By default installed in /usr/local/include. *** Tuesday, November 21, 2000 -- Dante v1.1.6 o fix a bug related to hostnamelength parsing in server. Thanks to "Thomas Jarosch" . *** Monday, October 16, 2000 -- Dante v1.1.5 o New prototype for gethostbyaddr in RedHat 7.0 added. First reported by Paul R Streitman . o RedHat needs libnsl for tcpwrappers to work. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2001/02/17 18:18:44 wiz Exp $ d12 1 a12 1 CONFLICTS= socks4-* @ 1.2 log @Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.1.1 2000/10/15 17:29:14 rh Exp $ d4 1 a4 1 DISTNAME= dante-1.1.4 @ 1.1 log @Initial revision @ text @d1 1 a1 1 # $NetBSD$ d10 1 @ 1.1.1.1 log @Initial import of dante-1.1.4, a BSD-licensed socks 4/5 proxy suite. @ text @@