github/openNDS
1
1
Fork 0
mirror of https://github.com/openNDS/openNDS.git synced 2026-05-04 03:01:32 -04:00
Code Issues Packages Projects Releases Wiki Activity
2,177 Commits 45 Branches 32 Tags
master
Commit Graph

927 Commits

Author SHA1 Message Date
Rob White
32a33cb291 Fix - failure to parse custom variables and custom images from config lists 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-05-26 20:18:01 +01:00
Rob White
55bacca796 Fix - error adding nft rule when fasremotefqdn not set 
Fixes issue #591

Signed-off-by: Rob White <rob@blue-wave.net>
 2024-05-07 06:31:14 +01:00
Rob White
7fff74b7e6 Fix - change error message to debug message when legacy ipset not present 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-05-07 06:31:14 +01:00
Rob White
26496b4f76 Fix - Remove default value for faskey 
Credit to @billz for discovering the issue

Signed-off-by: Rob White <rob@blue-wave.net>
 2024-05-05 18:48:17 +01:00
Rob White
862126afcb Fix - some memory leaks - credit @LuMingYinDetect 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-03-26 20:10:29 +00:00
Rob White
99b95176cc Merge pull request #572 from openNDS/v10.2.1beta 
V10.2.1beta
 2024-02-28 08:52:00 +00:00
Rob White
210c5da18e Fix - use after free - we now delete the client instead of changing state 
Credit @LuMingYinDetect

Signed-off-by: Rob White <rob@blue-wave.net>
 2024-02-28 08:36:44 +00:00
Mike Gabriel
486fb73686 src/{main,auth,fw_iptables}.c: Evaluate system() calls' return values. 
This avoids these build warnings:

  src/fw_iptables.c: In function ‘iptables_fw_init’:
  src/fw_iptables.c:412:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    412 |         system(dnscmd);
        |         ^~~~~~~~~~~~~~
  src/auth.c: In function ‘fw_refresh_client_list’:
  src/auth.c:306:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    306 |         system(dnscmd);
        |         ^~~~~~~~~~~~~~
  src/auth.c:312:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    312 |         system(dnscmd);
        |         ^~~~~~~~~~~~~~
  src/auth.c:696:17: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    696 |                 system(pmaccmd);
        |                 ^~~~~~~~~~~~~~~
  src/main.c: In function ‘termination_handler’:
  src/main.c:210:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    210 |         system(dnscmd);
        |         ^~~~~~~~~~~~~~
  src/main.c: In function ‘main_loop’:
  src/main.c:930:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    930 |         system(cmd);
        |         ^~~~~~~~~~~
  src/main.c: In function ‘setup_from_config’:
  src/main.c:519:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    519 |         system(dnscmd);
        |         ^~~~~~~~~~~~~~
  src/main.c:722:17: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    722 |                 system(fasssl);
        |                 ^~~~~~~~~~~~~~
  src/main.c:754:25: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    754 |                         system(fasssl);
        |                         ^~~~~~~~~~~~~~
  src/main.c:882:9: warning: ignoring return value of ‘system’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
    882 |         system(dnscmd);
        |         ^~~~~~~~~~~~~~
 2024-01-21 09:17:08 +01:00
Rob White
2868c6eaac Fix - enable iteration counter for all nft error codes 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-01-03 12:14:29 +00:00
Rob White
e74cc80a93 Fix - use dnsmasq reload instead of restart, fixes issue #556 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-01-03 10:05:22 +00:00
Rob White
761c5a9f55 Fix - remove unneeded memory allocation 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-01-03 10:01:24 +00:00
Rob White
ca9b3dba98 Fix - ensure all client memory is freed when removing client 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-01-03 10:00:13 +00:00
Rob White
f9ba5b3e2a Fix - remove unneeded memory allocations and free some strdup allocations 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-01-03 08:26:09 +00:00
Rob White
fea92cc51a Fix - race condition when dnsmasq takes too long to restart 
Signed-off-by: Rob White <rob@blue-wave.net>
 2024-01-02 16:18:02 +00:00
Rob White
ea9510faac Bump to v10.2.1beta 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-28 14:12:15 +00:00
Rob White
81c4079b4d Add - Page 202 HTTP_ACCEPTED for future use 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-22 16:37:35 +00:00
Rob White
55eb920a9b Fix - remove redundant workaround for old MHD versions 
This is no longer required.
In addition his could potentially have caused a memory leak on some compilers.

Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-21 07:34:13 +00:00
Rob White
a3d797588f Fix - remove unnecessary debug messages 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-18 12:35:06 +00:00
Rob White
f7507ca4bf Fix - prevent unnecessary shutdown 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-18 12:27:15 +00:00
Rob White
465277dd8b Add - allow dynamic update of flowtable rules 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-14 16:19:11 +00:00
Rob White
37c2801099 Fix - use Themespec in place of deprecated preauth in ndectl status 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-14 16:16:58 +00:00
Rob White
462b799aa2 Fix - remove some unused variables 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-09 09:45:54 +00:00
Rob White
3852e60403 Add - support for nftables blocklists 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-11-09 09:30:12 +00:00
Rob White
fae8598514 Add - Set default authenticated policy to accept 
This allows block rules to be added without overriding the ruleset.

Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-31 08:53:58 +00:00
Rob White
acc6121289 Updates - for release 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-31 08:53:58 +00:00
Rob White
2dbb09c5c4 Fix - duplicate users_to_router rules 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-31 08:53:58 +00:00
Rob White
ce02fc4c65 Add - Automatic dns resolution of fas_remotefqdn in nftables rules 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-27 14:58:26 +01:00
Rob White
b74a800e00 Add - flowtables rules 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-27 14:58:26 +01:00
Rob White
205c3d927f Add - dynamic flowtable support allowing multiple upstream connections 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-27 14:58:26 +01:00
Rob White
4625c0979e Fix - indentation 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-27 14:58:26 +01:00
Rob White
a2fd72bb22 Add - Dynamic refresh of configured preemptive macs 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-16 19:46:38 +01:00
Rob White
8361b227fb Add - level 4 fas-hid-https 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-09 21:13:09 +01:00
Rob White
9c2911c9e4 Add - support for fas_secure_enabled = 4 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-09 21:11:18 +01:00
Rob White
6ace934201 Add - wget_request support to authmon 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-10-07 08:24:05 +01:00
Rob White
4114399a46 Add - Quota based Fair Usage Policy, sets throttled rate when quota exceeded 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-09-20 22:11:11 +01:00
Rob White
31dbf4aa06 Fix - memory leak when deleting client from client list 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-09-16 11:51:21 +01:00
Rob White
1a4f797271 Add - Store RFC8910 request string in client data 
This can be used to pass custom query strings to opennds, themespec and fas

Signed-off-by: Rob White <rob@blue-wave.net>
 2023-09-13 19:42:20 +01:00
Rob White
63aa62f552 Bump to v10.2.0beta 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-09-13 19:38:11 +01:00
Rob White
fff6cf64fc Bump to v10.1.3 for release 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
a3a87796a5 Fix - missing free in show_preauth_page if MHD does not respond 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
6bf3d0a1fc Fix - more safe_asprintf memory leaks 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
f4e41f8263 Fix - missing free for mark_auth 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
2a8f4f7f80 Fix - memory leak after starting authmon daemon 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
2cb0c1be73 Fix - memory leak in encode_and_redirect_to_splashpage 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
44c2c11dbd Fix - Memory leaks due to passing allocated buffer into safe_asprintf() - CVE-2023-41102 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
c294cf30e0 Fix - Buffer overflow causing segfault - CVE-2023-41101 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
5e04ea1f4a Add - set default fas remote fqdn to disabled 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-28 10:29:18 +01:00
Rob White
9895e27da3 Bump to 10.1.3beta 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-08-01 19:48:30 +01:00
Rob White
66170872a1 Update changelog etc and bump to release v10.1.2 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-07-29 11:50:27 +01:00
Rob White
7327c3cfa8 Fix - Generate unique sha256 faskey if not set in config 
Signed-off-by: Rob White <rob@blue-wave.net>
 2023-07-29 11:50:27 +01:00