summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* all: fix #includes for strict complianceTimo Teräs2013-12-193-2/+4
|
* auth-snmp: use ifIndex as ifName if that MIB entry is not supportTimo Teräs2013-02-261-13/+43
| | | | E.g. HP ProCurve 1800 does not seem to support ifName.
* auth-snmp: allow specifying management network prefixTimo Teräs2013-02-065-16/+101
| | | | | So we don't go and try querying untrusted LLDP capable devices in non-managed subnets.
* squark-filter: fix path component lookupTimo Teräs2012-11-121-2/+2
| | | | | | | Do not do string literal lookup unless the path parent matches. This avoids wrong string literal lookups when the path does not exist and refers actuall to an entry which is IPv4 encoded (parent == SQDB_PARENT_IPV4).
* filterdb: check section limits for literal stringsTimo Teräs2012-11-121-1/+7
|
* authdb: fix authdb entry locationKolar Uros2012-07-161-1/+1
| | | | | Commit 5a28c352a2f6de525 forgot to update the byte used for hash offset index. Fix that.
* authdb: ipv4 is in network order; not host orderTimo Teräs2012-04-121-2/+2
|
* auth-snmp: fix a crashTimo Teräs2012-02-141-9/+14
| | | | | Can't call blob_push_formatted_username unless authentication is successfully completed.
* filter: fix lookup of urls with path componentsv0.4.1Timo Teräs2012-01-251-1/+14
|
* build: fix lua module building, and disable -WerrorTimo Teräs2012-01-251-2/+4
|
* auth-snmp: commit login only if credentials are not validTimo Teräs2012-01-101-12/+19
| | | | | | This makes sure the other session things are not reset when the squid helper cache needs revalidation. Fixes premature reset of override timestamp amongst other issues.
* auth-ip, filter: refresh configurationTimo Teräs2012-01-102-0/+2
|
* authdb: fix config file modification detectionTimo Teräs2012-01-041-2/+2
|
* lua, filter: fix 64-bit issuesv0.4Timo Teräs2011-10-072-2/+2
|
* filter: fix previous commitLuke Stuart2011-09-281-3/+2
| | | | it was hard-blocking everything incorrectly.
* filter: use different block page if category is forbiddenDuane Hughes2011-09-151-2/+4
| | | | fixes #719
* auth-snmp: fix q-bridge-mib vlan queriesv0.3Timo Teräs2011-09-051-11/+35
| | | | | | The queries use Q-BRIDGE-MIB's qVlanId which is switch specific mapping. Exception seems to be 1810G's which use the real VLAN index.
* filter: option to allow automatic anonymous loginTimo Teräs2011-09-015-2/+33
| | | | | | so no captive portal, snmp or squid authentication is required. fixes #737.
* auth-snmp: implement Q-BRIDGE-MIB FIB queriesTimo Teräs2011-07-191-26/+49
| | | | | | | | Certain switches seem to export FIB of tagged VLANs only in the Q-BRIDGE-MIB only. Detect if switch support Q-BRIDGE-MIB during information discovery, and prefer it over the older BRIDGE-MIB. Q-BRIDGE-MIB should be used anyway, since it's the only reliable way to trace MAC properly when it appears in multiple VLANs.
* filter: honor squid authenticationv0.2Timo Teräs2011-06-141-0/+5
| | | | | | Instead of having separate modes (which would likely need to be configurable on per-subnet or per-user, anyway), honour just the squid reported username.
* Revert "filter: support filter-only and track-only modes"Timo Teräs2011-06-141-61/+9
| | | | This reverts commit a1277ab45a9d2bab9ca28baf05f978bf8066d928.
* Revert "filter: rename modes to something that makes more sense"Timo Teräs2011-06-141-29/+25
| | | | This reverts commit a4180db79a80882f81bc8c880ec1e2db5ee9bf6d.
* filter: rename modes to something that makes more senseTimo Teräs2011-06-141-25/+29
| | | | | Also, make sure the categorize mode is not touching authdb datastructures as they are invalid in that mode.
* filter: support filter-only and track-only modesTimo Teräs2011-06-141-9/+61
|
* filter: return categorization and blocked/overridden statusTimo Teräs2010-11-181-3/+11
| | | | | return the analysis back to squid as urlgroup. it can be then used in squid config acl's and logging (with patch). ref #447.
* auth-snmp: option to syslog authentication requestsTimo Teräs2010-11-091-3/+51
| | | | Including some information where it fails.
* blob, config.[ch]: add missing files and includesTimo Teräs2010-11-083-0/+24
|
* authdb, auth-ip: make logout_timeout configurableTimo Teräs2010-11-074-15/+32
| | | | | | | | * authdb: change to use squark.conf instead of filter.conf * authdb: config option logout_timeout added (defaults to 15mins) * auth-ip: add -r parameter to refresh login time fixes #452
* all: check error for sqdb_open and adb_openTimo Teräs2010-11-074-15/+61
| | | | | so we don't crash on startup if essential files are missing. fixes #454
* build: use build system from apk-tools/opennhrpTimo Teräs2010-11-075-28/+28
|
* squark: reorganize sources to src directoryTimo Teräs2010-11-0714-0/+3746