summaryrefslogtreecommitdiff
path: root/src (follow)
AgeCommit message (Collapse)AuthorFilesLines
2013-11-09[BB#81] allow listening on multiple families when no Listen is provided in ↵Michael Adam1-2/+9
config This is achieved by not stopping at the first result of getaddrinfo that we managed to listen on: Without "Listen" in the config, we call getraddrinfo with NULL address. With AI_PASSIVE, this gives results for both IPv4 and IPv6 wildcard addresses (if both are supported). This lets tinyproxy listen on both IPv4 and IPv6 wildcard if the system supports them. Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: add a starting debug message to listen_sock()Michael Adam1-0/+3
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: update introductory comment for listen_sock()Michael Adam1-1/+7
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: set IPV6_V6ONLY on the socket before binding an IPv6 addressMichael Adam1-0/+12
so that we can bind wildcard for both IPv4 and IPv6. Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: factor listening on one socket out of the gai-result-loop in listen_sock()Michael Adam1-48/+62
for clarity of the code Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: in listen_sock(), move variable for setsockopt() into scopeMichael Adam1-1/+1
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: log each result of getaddrinfo() in listen_sock()Michael Adam1-0/+14
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: in listen_sock(), add a log message for when bind() has failedMichael Adam1-0/+2
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: in listen_sock(), detect and log failure to call setsockopt()Michael Adam1-2/+10
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: in listen_sock(), add debug message when socket() call failed.Michael Adam1-1/+5
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: move listen() into the getaddrinfo result loop in listen_sock()Michael Adam1-22/+22
This also reverses the exit logic of the loop. It prepares listening on multiple addresses. Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09child: use a list of listen_fds instead of one single listenfd.Michael Adam3-7/+90
This prepares listenting on multiple sockets, which will be ussed to fix listening on the wildcard (listen on both ipv6 and ipv4) and help add the support for multiple Listen statements in the config Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09child: add addr argument to child_listening_sock().Michael Adam3-4/+4
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock: add addr argument to listen_sock()Michael Adam3-4/+4
instead of using config.ipAddr internally. This is in preparation to make it possible to call it for multiple addresses. Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09sock/child: remove global variable addrlen.Michael Adam3-13/+8
This changes listen_sock() to not return the addrlen of the used address from getaddrinfo call to the caller, stored in global addrlen in child.c. This was only used to be able to allocate enough space for the arguments to the later accept call depending on whether IPv4 or IPv6 is used. This removes the need to pass this info by always allocating sizeof(struct sockaddr_storage) instead, which is enough to carry both sockaddr_in and sockaddr_in6. Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09[BB#109] Fix crash (infinite loop) when writing to log file fails.Michael Adam1-2/+7
Fall back to syslog logging in that case. Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-09log: remove extra newline characters in log messages.Michael Adam1-2/+2
Signed-off-by: Michael Adam <obnox@samba.org>
2013-11-01[BB#115] Drop supplementary groupsGaudenz Steinlin1-0/+10
Supplementary groups are inherited from the calling process. Drop all supplementary groups if the "Group" configuration directive is set to change to a different user. Otherwise the process may have more rights than expected. Reviewed-by: Michael Adam <obnox@samba.org>
2012-01-23Update authorsMukund Sivaraman1-0/+2
2011-08-23Bug #103: Move files installed in /etc/ to /etc/tinyproxy/Mukund Sivaraman1-1/+3
2011-03-04[BB#90]: Fix bug in ACL netmask generationMukund Sivaraman1-4/+21
Thanks to John Horne who diagnosed this issue and found the problem.
2011-03-04Validate port number specified in Port directiveMukund Sivaraman1-1/+9
This was asked in bug #90 comment #8.
2011-02-28Update URLs of TinyproxyMukund Sivaraman2-2/+2
2011-02-07Surround IPv6 literals with [] in Host: headersMukund Sivaraman1-6/+18
2011-02-04Handle IPv6 literals in URLs correctlyMukund Sivaraman1-1/+14
2010-12-01[BB#95] remove two comments that have become wrong by the fix.Michael Adam1-6/+0
2010-12-01[BB#95] Fix FilterURLs with transparent proxy support.Daniel Egger3-12/+12
Pass a pointer to a char pointer to do_transparent_proxy so the reassembled URL will actually end up back in the caller where it is needed for filtering decisions. This fixes the problem that a tinyproxy configured with the transparent proxy functionality and "FilterURLs Yes" would filter on everything but the domain. Signed-off-by: daniel.egger@sphairon.com Signed-off-by: Michael Adam <obnox@samba.org>
2010-08-24[BB#91] Fix upstream proxy support.Michael Adam1-2/+2
Patch by Jordi Mallach.
2010-08-24upstream: clarify debug messagesMichael Adam1-2/+2
There are frequent questions "what does 'No proxy for ...' mean?" on the mailing list and IRC. Be more specific. (No upstream proxy ...) Correspondingly, log "Found upstream proxy ... for ..."
2010-06-02[BB#74] Create log and pid files after we drop privsMukund Sivaraman1-12/+14
2010-06-02Remove excessive codeMukund Sivaraman1-10/+5
2010-06-01Add authors to authors.xml and regenMukund Sivaraman1-0/+3
2010-06-01[BB#89] Don't recompile regular expressionsJohn van der Kamp3-2/+33
This is a modification of a patch originally written by John van der Kamp <john@kirika.demon.nl> at <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=579427#12> The modification was done by the committer.
2010-05-30Precompute network addresses for increased performanceMukund Sivaraman1-4/+9
2010-05-30Minor indent of codeMukund Sivaraman1-1/+2
2010-04-21Fix crash in send_stored_logs()Dmitry Semyonov1-2/+3
2010-04-21Revert "main: drop privileges right after reading the config"Mukund Sivaraman1-8/+7
This reverts commit 7a9abc2a04dd8ed1f113aa9c803af24adfb22773. It should fix the issue in bug #87.
2010-03-28Just fix the support URLsMukund Sivaraman1-1/+1
2010-03-28Revert "Update Tinyproxy website URLs"Mukund Sivaraman2-2/+2
This reverts commit b108162dfb408b4818a6ea8b2a148ddaf1506bbe.
2010-03-27Update Tinyproxy website URLsMukund Sivaraman2-2/+2
2010-03-09Revert "Revert "Pass address family when binding to outgoing socket""Mukund Sivaraman1-4/+7
This reverts commit 70885bf029a6f857684f99618f867b5c47767ae0. It looks like bug #69 needs this fix after all.
2010-03-03Use AI_PASSIVE flag to make tinyproxy listen on wildcard interfaceMukund Sivaraman1-0/+1
Signed-off-by: Michael Adam <obnox@samba.org>
2010-03-02change the default pid file location to ↵Michael Adam1-1/+1
"@LOCALSTATEDIR@/run/tinyproxy/tinyproxy.pid" I.e., add a tinyproxy subdirectory. This is meant to ease running tinyproxy as non-root user. The subdirectory can be used to give the tinyproxy user write permission. Michael
2010-03-02change the default log file location to ↵Michael Adam1-1/+1
"@LOCALSTATEDIR@/log/tinyproxy/tinyproxy.log" i.e. add a tinyproxy subdirectory. This is meant to ease running tinyproxy as non-root user the subdirectory can be used to give the tinyproxy user write permission. Michael
2010-03-02main: some tabs->spacesMichael Adam1-2/+2
2010-03-02main: move a log message.Michael Adam1-2/+2
2010-03-02main: drop privileges right after reading the configMichael Adam1-7/+8
This is the second part of fixing bug #74. I lets tinyproxy create its log and pid files as the user as which it is running, so that later on at SIGHUP, the log file can successfully be reopened. Michael
2010-03-02main: separate loading of config and setup_logging at startupMichael Adam1-1/+8
This is the first part of a fix for bug #74 (making reloading of config work if running as non-privileged user) Michael
2010-02-19Use format string when logging messagesMukund Sivaraman1-1/+1
2010-02-17Display upstream proxy support in usage messageMukund Sivaraman1-0/+5
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-15 19:15:14 +0000