Tobias Brunner
5cab5672e7
Define plugin version in all existing plugins
2025-08-22 15:32:39 +02:00
Tobias Brunner
17f2188756
forecast: Ignore per-CPU CHILD_SAs
...
Not sure if this combination does make sense as the plugin itself would
be a major bottleneck.
Similar to the connmark plugin, PREROUTING rules list SPIs or UDP ports,
which would be necessary for all SAs while the OUTPUT rules would only be
required once.
2025-05-28 16:35:26 +02:00
Tobias Brunner
6dee8587f0
Remove obvious empty statements (i.e. stray semicolons)
2024-02-29 15:30:40 +01:00
Tobias Brunner
86aa454c88
forecast: Fix build with DEBUG_LEVEL < 2
2023-05-08 17:32:17 +02:00
Tobias Brunner
36d16e5b24
forecast: Fix incompatible function types warning
2022-07-18 12:42:24 +02:00
Tobias Brunner
19ef2aec15
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
Noel Kuntze
e9a55abce4
forecast: Restrict strncpy() call
...
Closes strongswan/strongswan#331 .
2021-05-04 14:48:53 +02:00
Tobias Brunner
08a3ee0cce
bus: Change ike_update() signature and only call it once
...
This avoids multiple events when both addresses change (e.g. switching
address families).
2021-01-18 11:34:40 +01:00
Josh Soref
b3ab7a48cc
Spelling fixes
...
* accumulating
* acquire
* alignment
* appropriate
* argument
* assign
* attribute
* authenticate
* authentication
* authenticator
* authority
* auxiliary
* brackets
* callback
* camellia
* can't
* cancelability
* certificate
* choinyambuu
* chunk
* collector
* collision
* communicating
* compares
* compatibility
* compressed
* confidentiality
* configuration
* connection
* consistency
* constraint
* construction
* constructor
* database
* decapsulated
* declaration
* decrypt
* derivative
* destination
* destroyed
* details
* devised
* dynamic
* ecapsulation
* encoded
* encoding
* encrypted
* enforcing
* enumerator
* establishment
* excluded
* exclusively
* exited
* expecting
* expire
* extension
* filter
* firewall
* foundation
* fulfillment
* gateways
* hashing
* hashtable
* heartbeats
* identifier
* identifiers
* identities
* identity
* implementers
* indicating
* initialize
* initiate
* initiation
* initiator
* inner
* instantiate
* legitimate
* libraries
* libstrongswan
* logger
* malloc
* manager
* manually
* measurement
* mechanism
* message
* network
* nonexistent
* object
* occurrence
* optional
* outgoing
* packages
* packets
* padding
* particular
* passphrase
* payload
* periodically
* policies
* possible
* previously
* priority
* proposal
* protocol
* provide
* provider
* pseudo
* pseudonym
* public
* qualifier
* quantum
* quintuplets
* reached
* reading
* recommendation to
* recommendation
* recursive
* reestablish
* referencing
* registered
* rekeying
* reliable
* replacing
* representing
* represents
* request
* request
* resolver
* result
* resulting
* resynchronization
* retriable
* revocation
* right
* rollback
* rule
* rules
* runtime
* scenario
* scheduled
* security
* segment
* service
* setting
* signature
* specific
* specified
* speed
* started
* steffen
* strongswan
* subjectaltname
* supported
* threadsafe
* traffic
* tremendously
* treshold
* unique
* uniqueness
* unknown
* until
* upper
* using
* validator
* verification
* version
* version
* warrior
Closes strongswan/strongswan#164 .
2020-02-11 18:23:07 +01:00
Tobias Brunner
83674787d5
forecast: Only reinject packets that are marked or from the configured interface
...
This seems to avoid broadcast loops (i.e. processing and reinjecting the
same broadcast packet over and over again) as the packets we send via
AF_PACKET socket are neither marked nor from that interface.
2019-03-14 11:56:20 +01:00
Tobias Brunner
1b67166921
Unify format of HSR copyright statements
2018-05-23 16:32:53 +02:00
Tobias Brunner
525cc46cab
Change interface for enumerator_create_filter() callback
...
This avoids the unportable 5 pointer hack, but requires enumerating in
the callback.
2017-05-26 13:56:44 +02:00
James Laird-Wah
094a4d15cf
forecast: Mark correct port in UDP NAT-T rule
...
Closes strongswan/strongswan#62 .
2017-02-08 09:54:02 +01:00
Andreas Steffen
b12c53ce77
Use standard unsigned integer types
2016-03-24 18:52:48 +01:00
Tobias Brunner
7d22a75b12
forecast: Compare the complete rules when deleting them
...
Same as the change in the connmark plugin.
References #1229 .
2016-03-10 17:26:38 +01:00
Tobias Brunner
28649f6d91
libhydra: Remove empty unused library
2016-03-03 17:36:11 +01:00
Tobias Brunner
8394ea2a42
libhydra: Move kernel interface to libcharon
...
This moves hydra->kernel_interface to charon->kernel.
2016-03-03 17:36:11 +01:00
Tobias Brunner
444565325a
forecast: Fix alignment when adding rules
...
Basically the same issue as with the connmark plugin.
Fixes #1212 .
2016-03-03 17:20:37 +01:00
Tobias Brunner
a2ec3b0546
Fixed some typos, courtesy of codespell
2015-03-25 12:00:20 +01:00
Tobias Brunner
98632af672
forecast: Explicitly cast sockaddr to fix compiler warning
...
On Travis we compile with -Werror.
2015-02-23 12:35:50 +01:00
Tobias Brunner
89b60e9fd7
configure: Use pkg-config to detect libiptc used by connmark/forecast
...
This ensures the library is available. On Debian/Ubuntu it is a dynamic
library provided by the iptables-dev package.
2015-02-23 12:35:28 +01:00
Martin Willi
e5ad2e6614
forecast: Add the broadcast/multicast forwarding plugin called forecast
2015-02-20 16:34:55 +01:00
Tobias Brunner