openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File dante.changes of Package dante (Revision 3f43eb0b35a5a255fd35b5316a958d5f)

Currently displaying revision 3f43eb0b35a5a255fd35b5316a958d5f , Show latest

-------------------------------------------------------------------
Mon Dec 31 19:21:03 UTC 2012 - idonmez@suse.com

- Add dante-glibc-2.17.patch to use getauxval() function instead
  of private __libc_enable_secure.

-------------------------------------------------------------------
Thu Jan 12 16:54:58 UTC 2012 - tabraham@novell.com

- fixed 64bit-portability-issue
- fixed some man page format problems

- update to 1.3.2
  * Part of possible resource optimization indicated in section 4.4
    of the Dante 1.3.1 performance evaluation report
    (http://www.inet.no/dante/doc/1.3.x/dante_performance_1.3.1.pdf)
    has been implemented: scheduling new clients to the Dante process
    with fewest free slots available.
  * If the proxy server (socks, http, or upnp) is configured via
    environment variables, don't attempt to also parse any socks.conf
    files
  * The "HTTP_PROXY" environment variable has been renamed to 
    "HTTP_CONNECT_PROXY" to avoid conflict with HTTP proxies that do
    not support the HTTP CONNECT request
  * Fixed an unintended change to ACL semantics regarding bind requests
    in Dante 1.2.3 noted by Ralf Wenk 
    <Ralf.Wenk@hs-karlsruhe.de.example.com> many thanks
  * Fixed a bug regarding handling of cases where the ulimit for max
    number of files is unlimited. Reported and analyzed by Ralf Wenk
    <Ralf.Wenk@hs-karlsruhe.de.example.com>

- changes in 1.3.1
  * Fixed a bug regarding handling of socks clients that do not fillow
    the spec and start sending traffic data before request has been
    granted.
  * Fixed an error related to ACL on UDP-packets. If a given SOCKS
    client was allowed to send some UDP packets, in some cases
    packets from the same SOCKS client that should have been blocked
    were allowed.

-------------------------------------------------------------------
Mon Oct 10 15:23:02 UTC 2011 - jengelh@medozas.de

- Implement shlib policy (libsocks0)
- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build

-------------------------------------------------------------------
Fri Sep 30 20:07:53 UTC 2011 - coolo@suse.com

- add libtool as buildrequire to make the spec file more reliable

-------------------------------------------------------------------
Tue Jun 14 23:28:49 UTC 2011 - pascal.bleser@opensuse.org

- verbose build
- fix most rpmlint warnings

- update to 1.3.0:
  * resource requirements have been significantly reduced
  * performance has also been improved
  * several new features and bug fixes were made

-------------------------------------------------------------------
Wed Oct 20 12:44:04 CEST 2010 - ro@suse.de

- FIXME: could add upnp support if we had a miniupnp package from
  http://miniupnp.free.fr

- update to 1.2.2
  o Fix PAM bug introduced in v1.2.0 that would leak resources when
    using PAM.  Also relax the code handling PAM concerning
    unknown msg_styles.
  o Set PAM_RUSER so that rhosts-based PAM authentication can work.
  o Wrapper for calling getsockopt(2) with SO_ERROR added.
 
- update to 1.2.1
  o GSSAPI support is no longer disabled on heimdal versions older than
    0.8.0, which have no wrap/unwrap support for aes256-cts-hmac-sha1-96.
    The following krb5.conf configuration might be needed to ensure that
    AES-256 is not used:
     default_etypes = arcfour-hmac-md5 des3-cbc-sha1 des-cbc-crc des-cbc-md5
     default_etypes_des = des-cbc-crc des-cbc-md5
  o Code for shutting down idle sockd processes put back and can be
    enabled again, if desired.  It is not recommended for busy servers
    however as performance may be slightly degraded.
  o Fix bug related to clients using MSG_PEEK and GSSAPI on Linux.
  o Don't print warning if accept(2) fails when started with the -N<k> option.
    When started with the -N option, it is expected that accept(2) will
    fail in 1/k of the cases.  Instead just log a debug message about it.
  o The fflush() wrapper function did not handle a NULL argument.
  o Fix libsocks upnpcleanup() linking problem when compiled without
    libminiupnpc.
  o Assert failure related to message passing on some 64-bit architectures
    fixed.
  o The capi/socks.h file was not correctly installed.
  o Compilation fixes for OpenSuse 11.1.
  o Compilation fix for config_parse.y compilation without YYDEBUG.

- update to 1.2.0
  o Improvements to client thread compatibility.  The client
    library should now be mostly threadsafe.
  o Make support for the socks 5 version described in draft-5.05 be
    configurable.  Before this was always enabled, but it breaks clients
    based on NEC socks code in some cases as they use the same bit to
    mean something completely different.
    A new option has been added to sockd.conf to enable it:
    "compatibility: draft-5.05".  Unless explicitly enabled, the Dante
    server will not use the socks 5.05 draft specification.
  o Don't leak username/passwords provided to us for local authentication
    to upstream proxy server when server-chaining.
  o Fixed a bug/oversight that imposed an artificial limit on the number
    of sockd processes that could be created, even when the load required
    more.
  o Slight improvement of configuration parsing in an attempt to avoid
    confusing non-qualified hostnames with NIC interfacenames.
  o The default connect-timeout/negotiate-timeout has been reduced from
    120 seconds to 30 seconds.  The "connecttimeout" name has also been
    deprecated in favour of "timeout.negotiate".
  o Separate iotimeouts can be set for udp and tcp clients.  The "iotimeout"
    object has also been deprecated in favour of "timeout.io".
  o New configure option: "--disable-drt-fallback".
    Used to disable the attempted automatic fallback to a direct route
    if there are no usable proxy routes.  Default is, as before,
    automatic fallback.
  o Added a new option: "udp.connectdst".  Controls whether the server
    should connect udp sockets to the destination.
    The default for this release is yes, which improves performance,
    but _may_ be incompatible with some udp-based application protocols.
    Please let us know if you experience problems with some applications
    no longer working.
  o support for GSSAPI encryption/authentication (RFC 1961) to both the socks
    server and socks client.
  o limit the range of udp-ports used between the socks-client
    and the Dante server.
  o By default, try to auto-add direct routes for all addresses on the LAN.
    To disable it, set SOCKS_AUTOADD_LANROUTES to "no".
  o Fix bug that caused problems with certain combinations of
    bind(2)/accept(2)/close(2).
  o Fix bug that erroneously blocked the bind request from some clients.
  o Add support for environment variables SOCKS4_SERVER, SOCKS5_SERVER,
    HTTP_PROXY, and UPNP_IGD.
    If set, they specify the socks v4, socks v5 server, http proxy,
    or UPNP-enabled ID to use, without the need for a socks.conf.
    This should make it possible to run socksify with reasonable results
    even without a socks.conf, as long as one of these new environment
    variables are set correctly.
  o Auto-add direct routes for all gateways.  Should make the client
    a little more user-friendly by not having to specify "direct" routes
    for the proxyserver any longer.
  o More finegrained marking of when to mark a proxy route as "bad" so that
    it will not be used again by the same client.
    Also add a new variable to config.h, MAX_ROUTE_FAILS, determining
    how many times a route can fail before being blacklisted.  Default
    is one (same semantics as before there was a variable to control this).
  o Fix bug that could prevent password authentication from working
    on some systems.
  o Add configure option --without-glibc-secure, which disables check for
    the glibc variable __libc_enable_secure. Creates undesired dependencies
    for packaging.
  o New getifaddrs() compatibility function, taken from heimdal-1.2.1.
  o Support for interfacenames in sockd rules, and in the destination
    address for socks routes.
    Should make it easier to set up direct routes for local lan in
    the client (specify all local interfacenames in route statements),
    and block connections to e.g. loopback addresses (specify the the
    loopback interfacename in a block rule) in the server.
  o UPnP support in the client, using the miniupnp library by
    Thomas Bernard (http://miniupnp.free.fr/).
    UPnP is a protocol implemented by many home/small-business routers
    and adsl-modems.  It allows you to dynamically open up ports on
    the router for accepting incoming connections, as well as figuring
    out what the external ipaddress of the router is.
    Dante uses this to make socksify of ftp/bittorent/etc programs
    work via the UPnP router.
    Note that only the miniupnp library with releasedate 2009/09/21
    or later is expected to work with Dante.
  o Be less strict about bind in the client.  The standards says
    it is expected that the client first performs a connect via
    the socks server, but it seems some/many socks servers support
    the client requesting a bind without a previous connect, so we
    assume that is the case in the client from now on.
  o Changed the magic bytes that indicate the client is requesting
    use of the Dante-specific bind extension from 0x00000000 to
    0xffffffff, as part of the process to become less strict about
    the bind command requiring a previous connection.
  o Don't zero password in client if we read it from environment, or
    it will not work the next time the same clientprocess tries to
    authenticate to the server.
  o Add support for "group:" syntax to rules, similar to "user:" statement.
  o Close connection to PAM server each time we get an error-reply from
    it, fixing a bug.
  o Incorrect assert fixed.
  o Log close of client-rule with correct command.

-------------------------------------------------------------------
Wed Apr  1 16:29:11 CEST 2009 - crrodriguez@suse.de

- remove static libraries and "la" files

-------------------------------------------------------------------
Thu Aug 28 01:25:51 CEST 2008 - ro@suse.de

- fix init-script: add $network to Required-Stop

-------------------------------------------------------------------
Wed Jan 30 03:03:54 CET 2008 - ro@suse.de

- don't package same docs in all three subpackages

-------------------------------------------------------------------
Tue Aug 29 01:14:11 CEST 2006 - ro@suse.de

- m4 gets picky about files ending with comments,
  add a blank line to acinclude.m4

-------------------------------------------------------------------
Mon Mar 13 16:27:25 CET 2006 - mge@suse.de

- update to 1.1.19

-------------------------------------------------------------------
Wed Jan 25 21:35:19 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Mon Jan 16 15:35:15 CET 2006 - mge@suse.de

- update to 1.1.18

-------------------------------------------------------------------
Thu Jul  1 17:13:34 CEST 2004 - mge@suse.de

- fixes #42644 - /usr/bin/socksify uses /lib/libdl.so.2

-------------------------------------------------------------------
Mon Mar 22 14:44:29 CET 2004 - mge@suse.de

- corrected wrong file attributes introduced with "%defattr"
  fixes bug #36333: "dante packaging error"

-------------------------------------------------------------------
Fri Jan 16 13:20:48 CET 2004 - kukuk@suse.de

- Add pam-devel to neededforbuild

-------------------------------------------------------------------
Sat Jan 10 22:01:36 CET 2004 - adrian@suse.de

- add %defattr and %run_ldconfig

-------------------------------------------------------------------
Thu Aug 21 16:52:58 CEST 2003 - ro@suse.de

- fix build for beta distros

-------------------------------------------------------------------
Mon Jul 28 17:57:19 CEST 2003 - mge@suse.de

- update to 1.1.14

-------------------------------------------------------------------
Mon Jul 28 12:24:22 CEST 2003 - mge@suse.de

- fix bug #23141 error trying to socksify ssh

-------------------------------------------------------------------
Tue May 27 12:14:10 CEST 2003 - ro@suse.de

- add libdsocks.a to devel file list

-------------------------------------------------------------------
Mon Aug 19 19:19:46 CEST 2002 - mmj@suse.de

- Correct PreReq

-------------------------------------------------------------------
Fri Aug 16 13:20:37 CEST 2002 - mge@suse.de

- fix building on 64bit

-------------------------------------------------------------------
Thu Aug 15 16:27:07 CEST 2002 - mge@suse.de

- update to 1.1.13

-------------------------------------------------------------------
Wed Jul 10 22:32:41 CEST 2002 - olh@suse.de

- hack ltconfig for ppc64 to build shared libs

-------------------------------------------------------------------
Mon Apr 29 13:03:14 CEST 2002 - sf@suse.de

- added %{_libdir} to build on bilib achrs
- added %{suse_update_config} to build on x86_64

-------------------------------------------------------------------
Tue Feb 19 00:40:21 CET 2002 - ro@suse.de

- fixed init script (exit fixed, force-reload-added) (#13325)

-------------------------------------------------------------------
Mon Jan 14 12:37:01 CET 2002 - ro@suse.de

- removed START_SOCKD

-------------------------------------------------------------------
Tue Oct 30 23:29:15 CET 2001 - bjacke@suse.de

- make /etc/sock{s,d} (noreplace)
- use libdir macro

-------------------------------------------------------------------
Sun Aug 26 02:28:00 MET 2001 - mge@suse.de

- updated to 1.1.10: let client-rules have their own global
  methodline, "clientmethod", default value set to "none".
  The global "method" is only used for socks-rules now.
- added include files			  (bug #7745)
- fixed /etc/init.d/sockd status-handling (bug #9415)

-------------------------------------------------------------------
Fri Mar 30 20:50:18 MEST 2001 - mge@suse.de

- update to 1.1.9

-------------------------------------------------------------------
Mon Dec  4 13:43:56 MET 2000 - mge@suse.de

- update to 1.1.6, new /etc/init.d handling, long RPM names

-------------------------------------------------------------------
Wed Nov 22 14:23:13 CET 2000 - uli@suse.de

- fixed to build

-------------------------------------------------------------------
Thu Jul 13 19:26:44 MEST 2000 - mge@suse.de

- added symlinks to /etc/rc.d/rc2.d /etc/rc.d/rc3.d

-------------------------------------------------------------------
Fri Jul  7 23:13:54 MEST 2000 - mge@suse.de

- updated sockd.init

-------------------------------------------------------------------
Wed Jul  5 10:13:53 CEST 2000 - mge@suse.de

- initial SuSE package

Places

File dante.changes of Package dante (Revision 3f43eb0b35a5a255fd35b5316a958d5f)

Places