2006-07-11 08:54:28 +00:00
|
|
|
|
2007-06-07 18:06:07 +00:00
|
|
|
iodine - http://code.kryo.se/iodine
|
2006-07-11 08:54:28 +00:00
|
|
|
|
2007-06-07 18:06:07 +00:00
|
|
|
***********************************
|
2006-07-11 08:54:28 +00:00
|
|
|
|
|
|
|
|
CHANGES:
|
|
|
|
|
|
2014-06-16 19:12:49 +00:00
|
|
|
2014-06-17: 0.6.0
|
|
|
|
|
- Fix authentication bypass vulnerability; found by Oscar Reparaz.
|
|
|
|
|
|
|
|
|
|
2010-02-06: 0.6.0-rc1 "Hotspotify"
|
2009-06-11 17:55:47 +00:00
|
|
|
- Fixed tunnel not working on Windows.
|
2009-06-14 19:50:35 +00:00
|
|
|
- Any device name is now supported on Windows, fixes #47.
|
2009-06-14 20:12:35 +00:00
|
|
|
- Multiple installed TAP32 interfaces are now supported, fixes #46.
|
2009-06-24 16:40:54 +00:00
|
|
|
- Return nonzero if tunnel fails to open, fixes #62.
|
2009-06-24 17:28:13 +00:00
|
|
|
- Support for setting a SELinux context, based on patch by
|
|
|
|
|
Sebastien Raveau. Sample context file in doc/iodine.te
|
2009-07-16 08:46:21 +00:00
|
|
|
- Allow listen port and DNS forward port to be the same if listen IP
|
|
|
|
|
does not include localhost.
|
2009-07-23 07:12:37 +00:00
|
|
|
- The client will now exit if configuring IP or MTU fails.
|
|
|
|
|
- The starting cache miss value is randomized at startup, fixes #65.
|
2009-08-15 13:10:21 +00:00
|
|
|
- Raw UDP mode added. If the iodined server is reachable directly,
|
|
|
|
|
packets can be sent to it without DNS encoding. Fixes #36.
|
2009-08-15 23:52:47 +00:00
|
|
|
- Do not overwrite users CC/CFLAGS/LDFLAGS, only add to them.
|
2009-08-15 22:02:00 +00:00
|
|
|
- Added -F option to write pidfile, based on patch from
|
|
|
|
|
misc at mandriva.org. Fixes #70.
|
2009-09-19 08:09:12 +00:00
|
|
|
- Allow password to be set via environment variable, fixes #77.
|
|
|
|
|
Based on patch by logix.
|
2009-09-19 08:24:59 +00:00
|
|
|
- Client now prints server tunnel IP, fixes #78. Patch by logix.
|
2009-09-19 22:19:09 +00:00
|
|
|
- Fix build error on Mac OS X 10.6, patch by G. Rischard. #79.
|
2009-09-20 16:05:37 +00:00
|
|
|
- Added support for CNAME/TXT/A/MX query types, fixes #75.
|
|
|
|
|
Patch by Anne Bezemer, merge help by logix.
|
2009-09-20 21:10:48 +00:00
|
|
|
- Merged low-latency patch from Anne Bezemer, fixes #76.
|
2009-09-26 09:42:32 +00:00
|
|
|
- Resolve client nameserver argument if given as hostname, fixes #82.
|
2010-02-08 16:09:45 +00:00
|
|
|
- Open log before chroot, fixes #86: logging on FreeBSD.
|
2009-06-11 17:55:47 +00:00
|
|
|
|
2009-06-01 18:34:50 +00:00
|
|
|
2009-06-01: 0.5.2 "WifiFree"
|
2009-05-14 18:37:38 +00:00
|
|
|
- Fixed client segfault on OS X, #57
|
|
|
|
|
- Added check that nameserver lookup was successful
|
2009-05-19 06:08:37 +00:00
|
|
|
- Fixed ENOTSOCK error on OS X and FreeBSD, #58.
|
2009-05-14 18:37:38 +00:00
|
|
|
|
2009-03-21 13:12:12 +00:00
|
|
|
2009-03-21: 0.5.1 "Boringo"
|
2009-01-25 17:01:06 +00:00
|
|
|
- Added initial Windows support, fixes #43.
|
2009-02-15 18:24:12 +00:00
|
|
|
- Added length check of autoprobe responses
|
|
|
|
|
- Refactored and added unit tests
|
|
|
|
|
- Added syslog logging for iodined on version and login packets
|
2009-02-17 20:48:00 +00:00
|
|
|
- Fixed segfault when encoding just one block, fixes #51.
|
|
|
|
|
The normal code was never affected by this.
|
2009-02-22 14:27:10 +00:00
|
|
|
- Added win32 code to read DNS server from system, fixes #45.
|
2009-02-22 16:46:50 +00:00
|
|
|
- Disabled password echo on win32, fixes #44.
|
2009-03-04 21:27:48 +00:00
|
|
|
- Fix encoding error making all autoprobing > 1024 bytes fail, #52.
|
2009-03-07 00:32:14 +00:00
|
|
|
- Increase default interface MTU to 1200.
|
|
|
|
|
- Fix autoprobing error making every third probe fail, set IP flag
|
|
|
|
|
Dont-Fragment where supported. Fixes #54.
|
2009-03-21 12:51:59 +00:00
|
|
|
- Added TAP32 version 0901 as accepted (#53).
|
2009-01-25 17:01:06 +00:00
|
|
|
|
2009-01-23 19:39:43 +00:00
|
|
|
2009-01-23: 0.5.0 "iPassed"
|
2008-08-07 14:16:12 +00:00
|
|
|
- Fixed segfault in server when sending version reject.
|
2008-08-07 16:53:59 +00:00
|
|
|
- Applied patch to make iodine build on BeOS R5-BONE and Haiku,
|
|
|
|
|
from Francois Revol. Still work to do to get tun device working.
|
2008-08-07 21:18:15 +00:00
|
|
|
- Added capability to forward DNS queries outside tunnel domain to
|
2008-09-14 13:37:44 +00:00
|
|
|
a nameserver on localhost. Use -b port to enable, fixes #31.
|
2008-09-09 20:55:13 +00:00
|
|
|
- iodined now replies to NS request on its own domain, fixes issue #33.
|
2008-09-14 13:21:11 +00:00
|
|
|
The destination IP address is sent as reply. Use -n to specify
|
|
|
|
|
a specific IP address to return (if behind NAT etc).
|
2008-09-14 11:34:56 +00:00
|
|
|
- Upstream data is now Base64 encoded if relay server preserves case and
|
|
|
|
|
supports the plus (+) character in domain names, fixes #16.
|
2009-01-03 23:14:02 +00:00
|
|
|
- Fixed problem in client when DNS trans. ID has highest bit set (#37)
|
2009-01-04 12:39:28 +00:00
|
|
|
- IP addresses are now assigned within the netmask, so iodined can
|
|
|
|
|
use any address for itself, fixes #28.
|
|
|
|
|
- Netmask size is now adjustable. Setting a small net will reduce the
|
|
|
|
|
number of users. Use x.x.x.x/n notation on iodined tunnel ip.
|
|
|
|
|
This fixes #27.
|
2009-01-10 19:30:55 +00:00
|
|
|
- Downstream data is now fragmented, and the fragment size is auto-
|
|
|
|
|
probed after login. Fixes #7. It only took a few years :)
|
2009-01-10 20:23:50 +00:00
|
|
|
- Enhanced the checks that validates incoming packets
|
2009-01-16 19:00:37 +00:00
|
|
|
- Fixed endless loop in fragment size autodetection, #39.
|
|
|
|
|
- Fixed broken hostname dot placing with specific lengths, #40.
|
2008-08-07 13:22:30 +00:00
|
|
|
|
2008-08-06 20:51:20 +00:00
|
|
|
2008-08-06: 0.4.2 "Opened Zone"
|
2008-07-12 11:50:42 +00:00
|
|
|
- Applied a few small patches from Maxim Bourmistrov and Gregor Herrmann
|
|
|
|
|
- Applied a patch for not creating and configuring the tun interface,
|
|
|
|
|
Debian bug #477692 by Vincent Bernat, controlled by -s switch
|
2008-07-12 12:06:56 +00:00
|
|
|
- Applied a security patch from Andrew Griffiths, use setgroups() to
|
|
|
|
|
limit the groups of the user
|
2008-08-06 20:02:34 +00:00
|
|
|
- Applied a patch to make iodine build on (Open)Solaris, from Albert Lee
|
2008-09-14 13:37:44 +00:00
|
|
|
Needs TUN/TAP driver http://www.whiteboard.ne.jp/~admin2/tuntap/
|
|
|
|
|
Still needs more code in tun.c for opening/closing the device
|
|
|
|
|
- Added option in server (-c) to disable IP/port checking on packets,
|
2008-07-12 22:39:29 +00:00
|
|
|
will hopefully help when server is behind NAT
|
2008-08-05 14:56:11 +00:00
|
|
|
- Fixed bug #21, now only IP address part of each packet is checked.
|
|
|
|
|
Should remove the need for the -c option and also work with
|
|
|
|
|
bugfixed DNS servers worldwide.
|
2008-09-14 13:37:44 +00:00
|
|
|
- Added -D option on server to enable debugging. Debug level 1 now
|
|
|
|
|
prints info about each RX/TX datagram.
|
2008-07-12 11:50:42 +00:00
|
|
|
|
2007-11-30 22:02:21 +00:00
|
|
|
2007-11-30: 0.4.1 "Tea Online"
|
2007-06-24 10:34:10 +00:00
|
|
|
- Introduced encoding API
|
|
|
|
|
- Switched to new Base32 implementation
|
2007-11-27 20:11:55 +00:00
|
|
|
- Added Base64 implementation that only uses 63 chars (not used yet)
|
|
|
|
|
- Refined 'install' make target and use $(MAKE) for recursive calls
|
2007-07-11 22:16:55 +00:00
|
|
|
- All received error messages (RCODE field) are echoed
|
2007-07-12 08:31:29 +00:00
|
|
|
- Top domain limited to 128 chars
|
|
|
|
|
- Case preservation check sent after login to decide codec
|
2007-07-12 08:38:00 +00:00
|
|
|
- Fixed crash on incoming NULL query in server with bad top domain
|
2007-07-12 13:01:18 +00:00
|
|
|
- /etc/resolv.conf is consulted if no nameserver is given on commandline
|
2007-11-27 20:11:55 +00:00
|
|
|
- Applied patch from Matthew W. S. Bell (Detach before chroot/dropping priv)
|
2007-06-24 10:34:10 +00:00
|
|
|
|
2007-03-25 12:41:20 +00:00
|
|
|
2007-03-25: 0.4.0 "Run Home"
|
2007-03-01 21:07:33 +00:00
|
|
|
- Added multiuser support (up to 8 users simultaneously)
|
2006-11-18 16:08:47 +00:00
|
|
|
- Added authentication (password entered as argument or on stdin)
|
2007-03-01 21:07:33 +00:00
|
|
|
- Added manpage
|
|
|
|
|
- Added install/uninstall make target
|
|
|
|
|
- Cleanup of dns code, more test cases, use check library
|
2006-11-18 16:08:47 +00:00
|
|
|
- Changed directory structure
|
|
|
|
|
|
2006-11-08 21:45:28 +00:00
|
|
|
2006-11-08: 0.3.4
|
|
|
|
|
- Fixed handshake() buffer overflow
|
|
|
|
|
(Found by poplix, Secunia: SA22674 / FrSIRT/ADV-2006-4333)
|
|
|
|
|
- Added more tests
|
2006-11-07 23:12:02 +00:00
|
|
|
- More name parsing enhancements
|
|
|
|
|
- Now runs on Linux/AMD64
|
|
|
|
|
- Added setting to change server port
|
|
|
|
|
|
2006-11-05 13:18:57 +00:00
|
|
|
2006-11-05: 0.3.3
|
2006-11-05 11:47:40 +00:00
|
|
|
- Fixed possible buffer overflow
|
2006-11-07 23:12:02 +00:00
|
|
|
(Found by poplix, Bugtraq ID: 20883)
|
2006-11-05 11:47:40 +00:00
|
|
|
- Reworked dns hostname encoding
|
|
|
|
|
|
2006-09-11 19:12:20 +00:00
|
|
|
2006-09-11: 0.3.2
|
2006-08-25 15:34:20 +00:00
|
|
|
- Support for NetBSD
|
2006-09-11 19:12:20 +00:00
|
|
|
- Fixed potential security problems
|
2006-08-25 15:34:20 +00:00
|
|
|
- Name parsing routines rewritten, added regression tests
|
2006-08-13 19:18:35 +00:00
|
|
|
- New encoding, 25% more peak upstream throughput
|
|
|
|
|
- New -l option to set local ip to listen to on server
|
|
|
|
|
|
2006-07-11 08:54:28 +00:00
|
|
|
2006-07-11: 0.3.1
|
|
|
|
|
- Add Mac OSX support
|
|
|
|
|
- Add setting device name
|
|
|
|
|
- Use compression of domain name in reply (should allow setting MTU
|
|
|
|
|
approx 200 bytes higher)
|
|
|
|
|
|
|
|
|
|
2006-06-24: 0.3.0
|
|
|
|
|
- First public release
|
|
|
|
|
- Support for Linux, FreeBSD, OpenBSD
|
