19 Commits (77942a7abbdecb0871dcbb4df9e128d23226fb27)

Author	SHA1	Message	Date
Daniel Roethlisberger	352b199166	Remove spurious space in netfilter output	10 years ago
Daniel Roethlisberger	6adaf00540	Fix pid_t removal for non-pf engines	10 years ago
Daniel Roethlisberger	c3922d9852	Refactor process lookup out of NAT engine code ... Local process lookup is independent of the NAT engine used, it depends only on the operating system's process enumeration API. Moving the code out of NAT lookup also makes it work for static and SNI proxyspecs.	10 years ago
Daniel Roethlisberger	18aca24a2c	Return 0 with pid -1 if no process matches	10 years ago
Daniel Roethlisberger	8c21170cd3	Break lines to 80 cols	10 years ago
Daniel Roethlisberger	d9d8674792	Fix memory leak in libproc lookup code	10 years ago
Landon Fuller	9204418c80	Thread pid lookup support through the NAT API. ... This exposes the pid lookup code as a standard attribute of NAT lookup -- if a matching process cannot be found, or if pid lookup isn't supported by the NAT backend, a pid of -1 is returned. This also adds the local_pid to the pxyconn context; this will be used to populate log strings.	10 years ago
Landon Fuller	bcc74385ab	Log the full process path, rather than the MAXCOMLEN-max process name.	10 years ago
Landon Fuller	55e8da7653	Wire up lookup of the local process/socket originating the proxied connection. ... This uses Mac OS X's libproc to find the first process that owns a matching socket. Currently, the results are simply logged; the next step will be exposing this generically via the NAT engine lookup API.	10 years ago
Landon Fuller	7a5147cddf	Add libproc to the build configuration.	10 years ago
Daniel Roethlisberger	a42db4d3fe	Also undefine rdport in Mac pf support hack	11 years ago
Daniel Roethlisberger	6643d832d9	Add experimental support for pf on Mac OS X ... Support pf rdr on Mac OS X 10.7, 10.8 and 10.9 by including the missing Apple headers in the source tree and enable private Apple code. Since we are using an interface marked private by Apple, this code is very experimental. Issue: #15 Reported by: Amit Chowdhary	11 years ago
Daniel Roethlisberger	ca923ee7f1	Update copyright notices to 2014	11 years ago
Daniel Roethlisberger	c972501063	Update copyright notices	12 years ago
Daniel Roethlisberger	6b4b121da2	Fix address family check in netfilter NAT lookup ... Use src_addr instead of the (yet to be set) dst_addr for determining the address family. Fixes issue #4.	12 years ago
Daniel Roethlisberger	6106940e0c	Omit nat_getsockname_lookup_cb() unless it is used	12 years ago
Daniel Roethlisberger	fda4f57aa7	Remove unused IPv6 code for netfilter NAT engine	12 years ago
Daniel Roethlisberger	f76077c00f	Undefine IPv6 compat defs to fix nat_version() ... For Linux netfilter, IPV6_ORIGINAL_DST and SOL_IPV6 are defined to SO_ORIGINAL_DST and SOL_IP respectively if they are not defined by the system headers (they aren't defined on vanilla kernels). Undefine these compatibility definitions after use, in order not to mess up the diagnostic output of nat_version().	13 years ago
Daniel Roethlisberger	4cfdef405a	Initial import of sslsplit-0.4.2	13 years ago