Commit Graph
305 Commits
Author SHA1 Message Date
Max Lv 3383501e7b Disable fast_open when it's not supported 2016-12-29 11:26:32 +08:00
Max Lv 80565eece1 Refine the log of obfuscating 2016-12-28 15:01:17 +08:00
Max Lv 8cb4f81eba Add HTTP/TLS obfuscating. [SIP001] (#1009)
Add experimental HTTP/TLS obfuscating as an **optional extension** of shadowsocks protocol.

More discussions can be found here: https://github.com/shadowsocks/shadowsocks-org/issues/26

As this feature is still a SIP (Shadowsocks Improvement Proposal), it's very unstable and experimental. So, 

1. Don't enable it unless you know what it is.
2. Be very careful when using it in production environment.
2016-12-27 02:53:25 -06:00
Max Lv 32f52dabf9 Fix #1008 2016-12-27 15:02:13 +08:00
Max Lv 8e52029d31 Fix #1006 2016-12-23 18:17:25 +08:00
Syrone Wong e6c0780435 memset zero before using
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2016-12-10 21:37:56 -06:00
Syrone Wong 9db8c3abe8 zeroize some structs before using
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2016-12-08 04:11:43 -06:00
Max Lv 25cc062e5d Use cork_container_of instead 2016-12-08 15:06:42 +08:00
Max Lv a63a33861f Add container_of 2016-12-08 14:48:40 +08:00
Syrone Wong baff29e970 Fix issues found by cppcheck
- GNU treats void* as char* when doing pointer arithmetic, so let's make it clear
- Fix memory leak, save copy from malloc() and pass the original pointer to free()
- minor type mismatches

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
2016-12-07 22:30:47 -06:00
Max Lv fd388e0502 Fix #972 2016-11-26 13:34:41 +08:00
Rayson zhu 1c738323a7 Similar fix as #967 2016-11-25 02:11:16 -06:00
Rayson zhu a8fdd77fbf add user config option 2016-11-25 02:10:17 -06:00
tim-le aca5f5ddb4 Fix #966 again (#967)
* SO_REUSEADDR for remote sockfd

avoid  ERROR: bind_to_address: Address already in use

* set addr->sin_port to be 0

* Update server.c

* Update server.c

* Update server.c

* Update server.c

* Update server.c

* Update server.c

* Update server.c
2016-11-20 03:24:27 -06:00
Max Lv dbc530ccb1 Fix #966 2016-11-20 15:39:07 +08:00
Max Lv c0b26e380e Fix #985 2016-11-20 15:36:21 +08:00
Max Lv 52e391962f Add option for firewall rules 2016-11-17 15:18:46 +08:00
Max Lv 79a98a66d8 Refine geteuid() 2016-11-16 18:19:51 +08:00
Max Lv 2b7c487b09 Refine #954 2016-11-16 14:38:23 +08:00
Max Lv 6d9331a56d Fix #954 2016-11-16 14:04:57 +08:00
Max Lv 12612c6395 Refine key string 2016-11-16 11:08:02 +08:00
Rayson Zhu 07d2b1a005 exit when running as a nonexistent user and warn when running as root 2016-11-14 21:14:06 +08:00
Rayson Zhu d1765df9f9 support ipv6_first option in config file (#946) 2016-11-13 23:32:43 -06:00
Max Lv 5cd294879b Add -6 option for #942 2016-11-12 11:01:05 +08:00
Max Lv 39436d7618 Refine set_linger 2016-11-11 18:35:44 +08:00
Max Lv 1ed725daf8 Refine APIs for auto-blocking 2016-11-11 16:38:13 +08:00
Max Lv 87b01a14d5 Fix #939 2016-11-10 17:22:03 +08:00
Max Lv 60c25dbace Reduce the side effects 2016-11-07 17:39:55 +08:00
Max Lv bac7ba79dd Drop FIN packets to misbehaving clients (#925)
* Drop FIN if detecting bad clients

* Fix the command line

* Refine iptables rules

* Refine euid
2016-11-07 02:26:57 -06:00
Max Lv 869f3b7bc8 Refine error handling of ATYP 2016-10-31 16:05:03 +08:00
Max Lv e2f8b9a34a Refine error levels 2016-10-31 15:22:44 +08:00
Max Lv aac4240e9f Fix #909 2016-10-29 13:40:40 +08:00
Max Lv 4a760fd50b Fix #907 #908 2016-10-29 13:38:07 +08:00
Max Lv cfae8dcfcc Refine outbound feature #905 2016-10-29 08:11:53 +08:00
Kim a7f5359cab New feature: ss-server outbound block (#905)
* New feature: server outbound block

* Update server_block_chn.acl

* Update server_block_chn.acl

Add Baidu-HK

* cleanup
2016-10-29 07:30:11 +08:00
Max Lv 8bb961c29a Ignore IPs in white list. #899 2016-10-26 10:28:49 +08:00
Max Lv 85a5c86637 Refine LRU cache by clearing old objects 2016-10-26 08:53:21 +08:00
Kim 31e30e35ba Update server.c (#898)
Friendlize init message while listen on an IPv6 address.
2016-10-25 20:19:30 +08:00
Max Lv 7029cfca3a Refine event handling 2016-10-14 09:10:36 +08:00
Max Lv 435401bf7c Refine auto blocking 2016-10-10 16:36:21 +08:00
Max Lv 3c6bec8d6a Fix a typo 2016-10-10 12:00:30 +08:00
Max Lv 2dd96d3036 Refine the ACL behavior 2016-10-10 09:06:52 +08:00
Max Lv c4880e6cf4 Refine ACL for malicious request 2016-10-10 08:25:57 +08:00
Max Lv efafb59647 Fix #863 2016-10-02 13:37:45 +08:00
Max Lv c29099df3f Enable block list by default 2016-10-01 07:32:40 +08:00
Max Lv 7ee9290657 Block address in block list 2016-10-01 07:15:13 +08:00
Max Lv 34fe1a71a6 Refine error levels 2016-09-27 12:11:37 +08:00
Max Lv 3e5816bb0b fix hostname validation 2016-09-23 10:48:18 +08:00
Max Lv bd1601f847 Bump version 2016-09-21 20:39:44 +08:00
Max Lv a5c9bcfb58 Refine auto block mechanism 2016-09-19 13:10:06 +08:00