| 1 | |
|---|
| 2 | iodine - http://code.kryo.se/iodine |
|---|
| 3 | |
|---|
| 4 | *********************************** |
|---|
| 5 | |
|---|
| 6 | CHANGES: |
|---|
| 7 | |
|---|
| 8 | 20xx-xx-xx: x.y.z "Hotspotify" |
|---|
| 9 | - Fixed tunnel not working on Windows. |
|---|
| 10 | - Any device name is now supported on Windows, fixes #47. |
|---|
| 11 | - Multiple installed TAP32 interfaces are now supported, fixes #46. |
|---|
| 12 | - Return nonzero if tunnel fails to open, fixes #62. |
|---|
| 13 | - Support for setting a SELinux context, based on patch by |
|---|
| 14 | Sebastien Raveau. Sample context file in doc/iodine.te |
|---|
| 15 | - Allow listen port and DNS forward port to be the same if listen IP |
|---|
| 16 | does not include localhost. |
|---|
| 17 | - The client will now exit if configuring IP or MTU fails. |
|---|
| 18 | - The starting cache miss value is randomized at startup, fixes #65. |
|---|
| 19 | - Raw UDP mode added. If the iodined server is reachable directly, |
|---|
| 20 | packets can be sent to it without DNS encoding. Fixes #36. |
|---|
| 21 | - Do not overwrite users CC/CFLAGS/LDFLAGS, only add to them. |
|---|
| 22 | - Added -F option to write pidfile, based on patch from |
|---|
| 23 | misc at mandriva.org. Fixes #70. |
|---|
| 24 | - Allow password to be set via environment variable, fixes #77. |
|---|
| 25 | Based on patch by logix. |
|---|
| 26 | - Client now prints server tunnel IP, fixes #78. Patch by logix. |
|---|
| 27 | - Fix build error on Mac OS X 10.6, patch by G. Rischard. #79. |
|---|
| 28 | - Added support for CNAME/TXT/A/MX query types, fixes #75. |
|---|
| 29 | Patch by Anne Bezemer, merge help by logix. |
|---|
| 30 | - Merged low-latency patch from Anne Bezemer, fixes #76. |
|---|
| 31 | - Resolve client nameserver argument if given as hostname, fixes #82. |
|---|
| 32 | - Open log before chroot, fixes #86: logging on FreeBSD. |
|---|
| 33 | - Fix DNS tunneling bug caused by uninitialized variable, #94 |
|---|
| 34 | - Handle spaces when entering password interactively, fixes #93. |
|---|
| 35 | Patch by Hagar. |
|---|
| 36 | - Add -R option to set OpenBSD routing domain for the DNS socket. |
|---|
| 37 | Patch by laurent at gouloum fr, fixes #95. |
|---|
| 38 | - Add android patches and makefile, from Marcel Bokhorst, fixes #105. |
|---|
| 39 | - Added missing break in iodine.c, by Pavel Pergamenshchik, #108. |
|---|
| 40 | |
|---|
| 41 | 2009-06-01: 0.5.2 "WifiFree" |
|---|
| 42 | - Fixed client segfault on OS X, #57 |
|---|
| 43 | - Added check that nameserver lookup was successful |
|---|
| 44 | - Fixed ENOTSOCK error on OS X and FreeBSD, #58. |
|---|
| 45 | |
|---|
| 46 | 2009-03-21: 0.5.1 "Boringo" |
|---|
| 47 | - Added initial Windows support, fixes #43. |
|---|
| 48 | - Added length check of autoprobe responses |
|---|
| 49 | - Refactored and added unit tests |
|---|
| 50 | - Added syslog logging for iodined on version and login packets |
|---|
| 51 | - Fixed segfault when encoding just one block, fixes #51. |
|---|
| 52 | The normal code was never affected by this. |
|---|
| 53 | - Added win32 code to read DNS server from system, fixes #45. |
|---|
| 54 | - Disabled password echo on win32, fixes #44. |
|---|
| 55 | - Fix encoding error making all autoprobing > 1024 bytes fail, #52. |
|---|
| 56 | - Increase default interface MTU to 1200. |
|---|
| 57 | - Fix autoprobing error making every third probe fail, set IP flag |
|---|
| 58 | Dont-Fragment where supported. Fixes #54. |
|---|
| 59 | - Added TAP32 version 0901 as accepted (#53). |
|---|
| 60 | |
|---|
| 61 | 2009-01-23: 0.5.0 "iPassed" |
|---|
| 62 | - Fixed segfault in server when sending version reject. |
|---|
| 63 | - Applied patch to make iodine build on BeOS R5-BONE and Haiku, |
|---|
| 64 | from Francois Revol. Still work to do to get tun device working. |
|---|
| 65 | - Added capability to forward DNS queries outside tunnel domain to |
|---|
| 66 | a nameserver on localhost. Use -b port to enable, fixes #31. |
|---|
| 67 | - iodined now replies to NS request on its own domain, fixes issue #33. |
|---|
| 68 | The destination IP address is sent as reply. Use -n to specify |
|---|
| 69 | a specific IP address to return (if behind NAT etc). |
|---|
| 70 | - Upstream data is now Base64 encoded if relay server preserves case and |
|---|
| 71 | supports the plus (+) character in domain names, fixes #16. |
|---|
| 72 | - Fixed problem in client when DNS trans. ID has highest bit set (#37) |
|---|
| 73 | - IP addresses are now assigned within the netmask, so iodined can |
|---|
| 74 | use any address for itself, fixes #28. |
|---|
| 75 | - Netmask size is now adjustable. Setting a small net will reduce the |
|---|
| 76 | number of users. Use x.x.x.x/n notation on iodined tunnel ip. |
|---|
| 77 | This fixes #27. |
|---|
| 78 | - Downstream data is now fragmented, and the fragment size is auto- |
|---|
| 79 | probed after login. Fixes #7. It only took a few years :) |
|---|
| 80 | - Enhanced the checks that validates incoming packets |
|---|
| 81 | - Fixed endless loop in fragment size autodetection, #39. |
|---|
| 82 | - Fixed broken hostname dot placing with specific lengths, #40. |
|---|
| 83 | |
|---|
| 84 | 2008-08-06: 0.4.2 "Opened Zone" |
|---|
| 85 | - Applied a few small patches from Maxim Bourmistrov and Gregor Herrmann |
|---|
| 86 | - Applied a patch for not creating and configuring the tun interface, |
|---|
| 87 | Debian bug #477692 by Vincent Bernat, controlled by -s switch |
|---|
| 88 | - Applied a security patch from Andrew Griffiths, use setgroups() to |
|---|
| 89 | limit the groups of the user |
|---|
| 90 | - Applied a patch to make iodine build on (Open)Solaris, from Albert Lee |
|---|
| 91 | Needs TUN/TAP driver http://www.whiteboard.ne.jp/~admin2/tuntap/ |
|---|
| 92 | Still needs more code in tun.c for opening/closing the device |
|---|
| 93 | - Added option in server (-c) to disable IP/port checking on packets, |
|---|
| 94 | will hopefully help when server is behind NAT |
|---|
| 95 | - Fixed bug #21, now only IP address part of each packet is checked. |
|---|
| 96 | Should remove the need for the -c option and also work with |
|---|
| 97 | bugfixed DNS servers worldwide. |
|---|
| 98 | - Added -D option on server to enable debugging. Debug level 1 now |
|---|
| 99 | prints info about each RX/TX datagram. |
|---|
| 100 | |
|---|
| 101 | 2007-11-30: 0.4.1 "Tea Online" |
|---|
| 102 | - Introduced encoding API |
|---|
| 103 | - Switched to new Base32 implementation |
|---|
| 104 | - Added Base64 implementation that only uses 63 chars (not used yet) |
|---|
| 105 | - Refined 'install' make target and use $(MAKE) for recursive calls |
|---|
| 106 | - All received error messages (RCODE field) are echoed |
|---|
| 107 | - Top domain limited to 128 chars |
|---|
| 108 | - Case preservation check sent after login to decide codec |
|---|
| 109 | - Fixed crash on incoming NULL query in server with bad top domain |
|---|
| 110 | - /etc/resolv.conf is consulted if no nameserver is given on commandline |
|---|
| 111 | - Applied patch from Matthew W. S. Bell (Detach before chroot/dropping priv) |
|---|
| 112 | |
|---|
| 113 | 2007-03-25: 0.4.0 "Run Home" |
|---|
| 114 | - Added multiuser support (up to 8 users simultaneously) |
|---|
| 115 | - Added authentication (password entered as argument or on stdin) |
|---|
| 116 | - Added manpage |
|---|
| 117 | - Added install/uninstall make target |
|---|
| 118 | - Cleanup of dns code, more test cases, use check library |
|---|
| 119 | - Changed directory structure |
|---|
| 120 | |
|---|
| 121 | 2006-11-08: 0.3.4 |
|---|
| 122 | - Fixed handshake() buffer overflow |
|---|
| 123 | (Found by poplix, Secunia: SA22674 / FrSIRT/ADV-2006-4333) |
|---|
| 124 | - Added more tests |
|---|
| 125 | - More name parsing enhancements |
|---|
| 126 | - Now runs on Linux/AMD64 |
|---|
| 127 | - Added setting to change server port |
|---|
| 128 | |
|---|
| 129 | 2006-11-05: 0.3.3 |
|---|
| 130 | - Fixed possible buffer overflow |
|---|
| 131 | (Found by poplix, Bugtraq ID: 20883) |
|---|
| 132 | - Reworked dns hostname encoding |
|---|
| 133 | |
|---|
| 134 | 2006-09-11: 0.3.2 |
|---|
| 135 | - Support for NetBSD |
|---|
| 136 | - Fixed potential security problems |
|---|
| 137 | - Name parsing routines rewritten, added regression tests |
|---|
| 138 | - New encoding, 25% more peak upstream throughput |
|---|
| 139 | - New -l option to set local ip to listen to on server |
|---|
| 140 | |
|---|
| 141 | 2006-07-11: 0.3.1 |
|---|
| 142 | - Add Mac OSX support |
|---|
| 143 | - Add setting device name |
|---|
| 144 | - Use compression of domain name in reply (should allow setting MTU |
|---|
| 145 | approx 200 bytes higher) |
|---|
| 146 | |
|---|
| 147 | 2006-06-24: 0.3.0 |
|---|
| 148 | - First public release |
|---|
| 149 | - Support for Linux, FreeBSD, OpenBSD |
|---|
