| 1 | |
|---|
| 2 | iodine - http://code.kryo.se/iodine |
|---|
| 3 | |
|---|
| 4 | *********************************** |
|---|
| 5 | |
|---|
| 6 | CHANGES: |
|---|
| 7 | |
|---|
| 8 | 20xx-xx-xx: x.y.z |
|---|
| 9 | - Fixed tunnel not working on Windows. |
|---|
| 10 | - Any device name is now supported on Windows, fixes #47. |
|---|
| 11 | - Multiple installed TAP32 interfaces are now supported, fixes #46. |
|---|
| 12 | |
|---|
| 13 | 2009-06-01: 0.5.2 "WifiFree" |
|---|
| 14 | - Fixed client segfault on OS X, #57 |
|---|
| 15 | - Added check that nameserver lookup was successful |
|---|
| 16 | - Fixed ENOTSOCK error on OS X and FreeBSD, #58. |
|---|
| 17 | |
|---|
| 18 | 2009-03-21: 0.5.1 "Boringo" |
|---|
| 19 | - Added initial Windows support, fixes #43. |
|---|
| 20 | - Added length check of autoprobe responses |
|---|
| 21 | - Refactored and added unit tests |
|---|
| 22 | - Added syslog logging for iodined on version and login packets |
|---|
| 23 | - Fixed segfault when encoding just one block, fixes #51. |
|---|
| 24 | The normal code was never affected by this. |
|---|
| 25 | - Added win32 code to read DNS server from system, fixes #45. |
|---|
| 26 | - Disabled password echo on win32, fixes #44. |
|---|
| 27 | - Fix encoding error making all autoprobing > 1024 bytes fail, #52. |
|---|
| 28 | - Increase default interface MTU to 1200. |
|---|
| 29 | - Fix autoprobing error making every third probe fail, set IP flag |
|---|
| 30 | Dont-Fragment where supported. Fixes #54. |
|---|
| 31 | - Added TAP32 version 0901 as accepted (#53). |
|---|
| 32 | |
|---|
| 33 | 2009-01-23: 0.5.0 "iPassed" |
|---|
| 34 | - Fixed segfault in server when sending version reject. |
|---|
| 35 | - Applied patch to make iodine build on BeOS R5-BONE and Haiku, |
|---|
| 36 | from Francois Revol. Still work to do to get tun device working. |
|---|
| 37 | - Added capability to forward DNS queries outside tunnel domain to |
|---|
| 38 | a nameserver on localhost. Use -b port to enable, fixes #31. |
|---|
| 39 | - iodined now replies to NS request on its own domain, fixes issue #33. |
|---|
| 40 | The destination IP address is sent as reply. Use -n to specify |
|---|
| 41 | a specific IP address to return (if behind NAT etc). |
|---|
| 42 | - Upstream data is now Base64 encoded if relay server preserves case and |
|---|
| 43 | supports the plus (+) character in domain names, fixes #16. |
|---|
| 44 | - Fixed problem in client when DNS trans. ID has highest bit set (#37) |
|---|
| 45 | - IP addresses are now assigned within the netmask, so iodined can |
|---|
| 46 | use any address for itself, fixes #28. |
|---|
| 47 | - Netmask size is now adjustable. Setting a small net will reduce the |
|---|
| 48 | number of users. Use x.x.x.x/n notation on iodined tunnel ip. |
|---|
| 49 | This fixes #27. |
|---|
| 50 | - Downstream data is now fragmented, and the fragment size is auto- |
|---|
| 51 | probed after login. Fixes #7. It only took a few years :) |
|---|
| 52 | - Enhanced the checks that validates incoming packets |
|---|
| 53 | - Fixed endless loop in fragment size autodetection, #39. |
|---|
| 54 | - Fixed broken hostname dot placing with specific lengths, #40. |
|---|
| 55 | |
|---|
| 56 | 2008-08-06: 0.4.2 "Opened Zone" |
|---|
| 57 | - Applied a few small patches from Maxim Bourmistrov and Gregor Herrmann |
|---|
| 58 | - Applied a patch for not creating and configuring the tun interface, |
|---|
| 59 | Debian bug #477692 by Vincent Bernat, controlled by -s switch |
|---|
| 60 | - Applied a security patch from Andrew Griffiths, use setgroups() to |
|---|
| 61 | limit the groups of the user |
|---|
| 62 | - Applied a patch to make iodine build on (Open)Solaris, from Albert Lee |
|---|
| 63 | Needs TUN/TAP driver http://www.whiteboard.ne.jp/~admin2/tuntap/ |
|---|
| 64 | Still needs more code in tun.c for opening/closing the device |
|---|
| 65 | - Added option in server (-c) to disable IP/port checking on packets, |
|---|
| 66 | will hopefully help when server is behind NAT |
|---|
| 67 | - Fixed bug #21, now only IP address part of each packet is checked. |
|---|
| 68 | Should remove the need for the -c option and also work with |
|---|
| 69 | bugfixed DNS servers worldwide. |
|---|
| 70 | - Added -D option on server to enable debugging. Debug level 1 now |
|---|
| 71 | prints info about each RX/TX datagram. |
|---|
| 72 | |
|---|
| 73 | 2007-11-30: 0.4.1 "Tea Online" |
|---|
| 74 | - Introduced encoding API |
|---|
| 75 | - Switched to new Base32 implementation |
|---|
| 76 | - Added Base64 implementation that only uses 63 chars (not used yet) |
|---|
| 77 | - Refined 'install' make target and use $(MAKE) for recursive calls |
|---|
| 78 | - All received error messages (RCODE field) are echoed |
|---|
| 79 | - Top domain limited to 128 chars |
|---|
| 80 | - Case preservation check sent after login to decide codec |
|---|
| 81 | - Fixed crash on incoming NULL query in server with bad top domain |
|---|
| 82 | - /etc/resolv.conf is consulted if no nameserver is given on commandline |
|---|
| 83 | - Applied patch from Matthew W. S. Bell (Detach before chroot/dropping priv) |
|---|
| 84 | |
|---|
| 85 | 2007-03-25: 0.4.0 "Run Home" |
|---|
| 86 | - Added multiuser support (up to 8 users simultaneously) |
|---|
| 87 | - Added authentication (password entered as argument or on stdin) |
|---|
| 88 | - Added manpage |
|---|
| 89 | - Added install/uninstall make target |
|---|
| 90 | - Cleanup of dns code, more test cases, use check library |
|---|
| 91 | - Changed directory structure |
|---|
| 92 | |
|---|
| 93 | 2006-11-08: 0.3.4 |
|---|
| 94 | - Fixed handshake() buffer overflow |
|---|
| 95 | (Found by poplix, Secunia: SA22674 / FrSIRT/ADV-2006-4333) |
|---|
| 96 | - Added more tests |
|---|
| 97 | - More name parsing enhancements |
|---|
| 98 | - Now runs on Linux/AMD64 |
|---|
| 99 | - Added setting to change server port |
|---|
| 100 | |
|---|
| 101 | 2006-11-05: 0.3.3 |
|---|
| 102 | - Fixed possible buffer overflow |
|---|
| 103 | (Found by poplix, Bugtraq ID: 20883) |
|---|
| 104 | - Reworked dns hostname encoding |
|---|
| 105 | |
|---|
| 106 | 2006-09-11: 0.3.2 |
|---|
| 107 | - Support for NetBSD |
|---|
| 108 | - Fixed potential security problems |
|---|
| 109 | - Name parsing routines rewritten, added regression tests |
|---|
| 110 | - New encoding, 25% more peak upstream throughput |
|---|
| 111 | - New -l option to set local ip to listen to on server |
|---|
| 112 | |
|---|
| 113 | 2006-07-11: 0.3.1 |
|---|
| 114 | - Add Mac OSX support |
|---|
| 115 | - Add setting device name |
|---|
| 116 | - Use compression of domain name in reply (should allow setting MTU |
|---|
| 117 | approx 200 bytes higher) |
|---|
| 118 | |
|---|
| 119 | 2006-06-24: 0.3.0 |
|---|
| 120 | - First public release |
|---|
| 121 | - Support for Linux, FreeBSD, OpenBSD |
|---|
