0256180043b9f55b606b523b775e8b23b1b12f83 |
|
07-Nov-2017 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
login-common: Change process title to show different connection types
Separate pre-login connections, proxy connections and post-login TLS
proxies. |
009217abb57a24a4076092e8e4e165545747839e |
|
29-Aug-2015 |
Stephan Bosch <stephan@rename-it.nl> |
Changed type of internet port values to in_port_t everywhere.
Created special SET_IN_PORT setting type for internet port values.
Created net_str2port() for parsing internet port values.
Removed several atoi() invocations in the process. |
d694a52bce62c52080c3f87a56dcf77030fd2712 |
|
16-Jun-2014 |
Timo Sirainen <tss@iki.fi> |
login proxy: If passdb returns "source_ip" extra field, use it for outgoing connections. |
bdd36cfdba3ff66d25570a9ff568d69e1eb543cf |
|
03-Oct-2012 |
Timo Sirainen <tss@iki.fi> |
Renamed network.[ch] to net.[ch].
The function prefixes already started with net_ instead of network_.
And icecap wants to use network.h for other purpose. :) |
e7dd5065d21c569e5e6ddd713bd345dadd1cf51d |
|
25-Apr-2012 |
Timo Sirainen <tss@iki.fi> |
SSL proxying: Remote's host never matched cert, because auth process changed it to IP.
Now the "host" parameter isn't changed, but a new optional "hostip"
parameter contains the IP address where to connect to. |
ddbdc644a15f56f4b43596f1b8c0fc196c101445 |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
imap/pop3/lmtp proxy: Implemented detection of proxy loops with TTL.
If proxying tries to continue after 5 forward connections, it fails. The
limit of 5 is hard coded currently. |
38c92ae79cebe87c2da6f8e29e1dcc4f5b5c88da |
|
25-Feb-2012 |
Timo Sirainen <tss@iki.fi> |
login proxy: Removed host DNS lookup code, since auth does it now. |
6303191abcb37164f435ccdc56e9dbddf1288851 |
|
19-May-2010 |
Timo Sirainen <tss@iki.fi> |
login proxy: If passdb returns proxy_refresh=<secs>, send username to proxy-notify fifo every n secs.
--HG--
branch : HEAD |
2ef0e8ee48c9683f7bd6698798efa3328e4322d1 |
|
31-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login: Proxying supports now doing DNS lookups for host names.
--HG--
branch : HEAD |
95e032c13b65f3b4c95e12d2d9494f4a0c87dd89 |
|
31-Jan-2010 |
Timo Sirainen <tss@iki.fi> |
login: Proxy code API cleanup.
--HG--
branch : HEAD |
86791365b10f45982c88e70f2eb94fd6c3fea151 |
|
23-Oct-2009 |
Timo Sirainen <tss@iki.fi> |
Handle shutdown_clients globally for all services.
Delay shutting down processes until it's convenient for them, but if they're
not gone in 30 seconds forcibly stop. And if that doesn't help, master will
start killing them in 60 seconds.
--HG--
branch : HEAD |
ec23e16ed879e289d12c6e1a5f9745dd3979004a |
|
11-Sep-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Fixes to SSL/login proxy connection counting.
--HG--
branch : HEAD |
e0a049aa308a2e66044af3ef8e0fb70ce909ad41 |
|
13-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
login-proxy: If proxy destination is known to be down, fail immediately.
We'll use simple rules:
1. If connection to destination server failed more recently than it
succeeded AND there is currently at least one client trying to connect to
it, fail immediately without even trying to connect.
2. Whenever a connection to destination server fails because of timeout or
some connect failure AND last successful connection to server was before our
connect() started, update the "last failed" timestamp.
With these rules there are no unnecessary connect() attempts or waits to
servers that are down. When the server does come back up, it's noticed
immediately.
--HG--
branch : HEAD |
2598b2f36365b52d9754b9348a5be29569293e46 |
|
13-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
login proxy: Added client_proxy passdb extra field to specify proxy's connect timeout.
--HG--
branch : HEAD |
e248fe370c4047cee921a91b48edc37944ab0526 |
|
10-Aug-2009 |
Timo Sirainen <tss@iki.fi> |
*-login: Moved most of the common code to login-common.
--HG--
branch : HEAD |
e95dba8921087afebb8a92c592af3b8ca22ae796 |
|
29-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
imap/pop3 proxy: Support SSL/TLS connections to remote servers.
passdb can return ssl=yes, ssl=any-cert and starttls options.
--HG--
branch : HEAD |
d176f84ce5ca2073f4dfbafb457b9c74f6bf0d76 |
|
24-Apr-2009 |
Timo Sirainen <tss@iki.fi> |
Initial commit for v2.0 master rewrite. Several features are still missing.
--HG--
branch : HEAD |
8372fc7efb6d64dff2e5f55fb4a3822c56869cfe |
|
21-Dec-2008 |
Timo Sirainen <tss@iki.fi> |
imap/pop3-login: Cleaned up proxying code. Don't disconnect client on proxy failures.
Log proxy failures as errors.
--HG--
branch : HEAD |
68a4946b12583b88fa802e52ebee45cd96056772 |
|
20-Jun-2008 |
Timo Sirainen <tss@iki.fi> |
Added more consts, ATTR_CONSTs and ATTR_PUREs.
--HG--
branch : HEAD |
cf8fbfe121e7b09d4ca9088ea3b32eec5dc48dd6 |
|
22-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
If proxy points to the same host/port/user combination as we currently have,
don't create an infinite connection loop.
--HG--
branch : HEAD |
c25356d5978632df6203437e1953bcb29e0c736f |
|
16-Sep-2007 |
Timo Sirainen <tss@iki.fi> |
Changed .h ifdef/defines to use <NAME>_H format.
--HG--
branch : HEAD |
392db407ff9058a6a61959785cd67168c7581bce |
|
20-Jan-2007 |
Timo Sirainen <tss@iki.fi> |
Forgot to commit for the "log proxy destination" change.
--HG--
branch : HEAD |
00efa7d99981e18e286c02b18c1163dde18ee521 |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Type safe callbacks weren't as easy as I thought. Only callback(void
*context) can be handled generically. Others can be handled specially, but
only if all the parameters are pointers, otherwise eg. int parameter can be
replaced with long without compiler giving any warnings.
--HG--
branch : HEAD |
59151b71059df1190acd75d8717ed04a7920c862 |
|
15-Dec-2006 |
Timo Sirainen <tss@iki.fi> |
Added context parameter type safety checks for most callback APIs.
--HG--
branch : HEAD |
61e87c7e1e53a1fdd3680c7b1addd187282e1327 |
|
06-Aug-2006 |
Timo Sirainen <tss@iki.fi> |
Fixes to login process handling, especially with
login_process_per_connection=no. Removed login_max_logging_users setting
since it was somewhat weird in how it worked. Added login_max_connections to
replace it with login_process_per_connection=no, and with =yes its
functionality is now within login_max_processes_count.
--HG--
branch : HEAD |
f30577ff7cf29858f1878abe963b4f40a436434f |
|
19-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
More smart IMAP and POP3 proxies. Now if remote login fails, it just
destroys the proxy and allows trying another username which can go elsewhere.
Also now replies with the same old "Authentication failed" error message
instead of showing remote server's failure message.
--HG--
branch : HEAD |
ba90e657bc68a72ab3b3021e2f4a874fac9965ba |
|
18-Oct-2004 |
Timo Sirainen <tss@iki.fi> |
Added IMAP and POP3 proxying support.
--HG--
branch : HEAD |