Max Lv
3383501e7b
Disable fast_open when it's not supported
2016-12-29 11:26:32 +08:00
Max Lv
80565eece1
Refine the log of obfuscating
2016-12-28 15:01:17 +08:00
Max Lv
8cb4f81eba
Add HTTP/TLS obfuscating. [SIP001] ( #1009 )
...
Add experimental HTTP/TLS obfuscating as an **optional extension** of shadowsocks protocol.
More discussions can be found here: https://github.com/shadowsocks/shadowsocks-org/issues/26
As this feature is still a SIP (Shadowsocks Improvement Proposal), it's very unstable and experimental. So,
1. Don't enable it unless you know what it is.
2. Be very careful when using it in production environment.
2016-12-27 02:53:25 -06:00
Max Lv
32f52dabf9
Fix #1008
2016-12-27 15:02:13 +08:00
Max Lv
8e52029d31
Fix #1006
2016-12-23 18:17:25 +08:00
Syrone Wong
e6c0780435
memset zero before using
...
Signed-off-by: Syrone Wong <wong.syrone@gmail.com >
2016-12-10 21:37:56 -06:00
Syrone Wong
9db8c3abe8
zeroize some structs before using
...
Signed-off-by: Syrone Wong <wong.syrone@gmail.com >
2016-12-08 04:11:43 -06:00
Max Lv
25cc062e5d
Use cork_container_of instead
2016-12-08 15:06:42 +08:00
Max Lv
a63a33861f
Add container_of
2016-12-08 14:48:40 +08:00
Syrone Wong
baff29e970
Fix issues found by cppcheck
...
- GNU treats void* as char* when doing pointer arithmetic, so let's make it clear
- Fix memory leak, save copy from malloc() and pass the original pointer to free()
- minor type mismatches
Signed-off-by: Syrone Wong <wong.syrone@gmail.com >
2016-12-07 22:30:47 -06:00
Max Lv
fd388e0502
Fix #972
2016-11-26 13:34:41 +08:00
Rayson zhu
1c738323a7
Similar fix as #967
2016-11-25 02:11:16 -06:00
Rayson zhu
a8fdd77fbf
add user config option
2016-11-25 02:10:17 -06:00
tim-le
aca5f5ddb4
Fix #966 again ( #967 )
...
* SO_REUSEADDR for remote sockfd
avoid ERROR: bind_to_address: Address already in use
* set addr->sin_port to be 0
* Update server.c
* Update server.c
* Update server.c
* Update server.c
* Update server.c
* Update server.c
* Update server.c
2016-11-20 03:24:27 -06:00
Max Lv
dbc530ccb1
Fix #966
2016-11-20 15:39:07 +08:00
Max Lv
c0b26e380e
Fix #985
2016-11-20 15:36:21 +08:00
Max Lv
52e391962f
Add option for firewall rules
2016-11-17 15:18:46 +08:00
Max Lv
79a98a66d8
Refine geteuid()
2016-11-16 18:19:51 +08:00
Max Lv
2b7c487b09
Refine #954
2016-11-16 14:38:23 +08:00
Max Lv
6d9331a56d
Fix #954
2016-11-16 14:04:57 +08:00
Max Lv
12612c6395
Refine key string
2016-11-16 11:08:02 +08:00
Rayson Zhu
07d2b1a005
exit when running as a nonexistent user and warn when running as root
2016-11-14 21:14:06 +08:00
Rayson Zhu
d1765df9f9
support ipv6_first option in config file ( #946 )
2016-11-13 23:32:43 -06:00
Max Lv
5cd294879b
Add -6 option for #942
2016-11-12 11:01:05 +08:00
Max Lv
39436d7618
Refine set_linger
2016-11-11 18:35:44 +08:00
Max Lv
1ed725daf8
Refine APIs for auto-blocking
2016-11-11 16:38:13 +08:00
Max Lv
87b01a14d5
Fix #939
2016-11-10 17:22:03 +08:00
Max Lv
60c25dbace
Reduce the side effects
2016-11-07 17:39:55 +08:00
Max Lv
bac7ba79dd
Drop FIN packets to misbehaving clients ( #925 )
...
* Drop FIN if detecting bad clients
* Fix the command line
* Refine iptables rules
* Refine euid
2016-11-07 02:26:57 -06:00
Max Lv
869f3b7bc8
Refine error handling of ATYP
2016-10-31 16:05:03 +08:00
Max Lv
e2f8b9a34a
Refine error levels
2016-10-31 15:22:44 +08:00
Max Lv
aac4240e9f
Fix #909
2016-10-29 13:40:40 +08:00
Max Lv
4a760fd50b
Fix #907 #908
2016-10-29 13:38:07 +08:00
Max Lv
cfae8dcfcc
Refine outbound feature #905
2016-10-29 08:11:53 +08:00
Kim
a7f5359cab
New feature: ss-server outbound block ( #905 )
...
* New feature: server outbound block
* Update server_block_chn.acl
* Update server_block_chn.acl
Add Baidu-HK
* cleanup
2016-10-29 07:30:11 +08:00
Max Lv
8bb961c29a
Ignore IPs in white list. #899
2016-10-26 10:28:49 +08:00
Max Lv
85a5c86637
Refine LRU cache by clearing old objects
2016-10-26 08:53:21 +08:00
Kim
31e30e35ba
Update server.c ( #898 )
...
Friendlize init message while listen on an IPv6 address.
2016-10-25 20:19:30 +08:00
Max Lv
7029cfca3a
Refine event handling
2016-10-14 09:10:36 +08:00
Max Lv
435401bf7c
Refine auto blocking
2016-10-10 16:36:21 +08:00
Max Lv
3c6bec8d6a
Fix a typo
2016-10-10 12:00:30 +08:00
Max Lv
2dd96d3036
Refine the ACL behavior
2016-10-10 09:06:52 +08:00
Max Lv
c4880e6cf4
Refine ACL for malicious request
2016-10-10 08:25:57 +08:00
Max Lv
efafb59647
Fix #863
2016-10-02 13:37:45 +08:00
Max Lv
c29099df3f
Enable block list by default
2016-10-01 07:32:40 +08:00
Max Lv
7ee9290657
Block address in block list
2016-10-01 07:15:13 +08:00
Max Lv
34fe1a71a6
Refine error levels
2016-09-27 12:11:37 +08:00
Max Lv
3e5816bb0b
fix hostname validation
2016-09-23 10:48:18 +08:00
Max Lv
bd1601f847
Bump version
2016-09-21 20:39:44 +08:00
Max Lv
a5c9bcfb58
Refine auto block mechanism
2016-09-19 13:10:06 +08:00