07d2b1a005
exit when running as a nonexistent user and warn when running as root
8 years ago
d1765df9f9
support ipv6_first option in config file ( #946 )
8 years ago
5cd294879b
Add -6 option for #942
8 years ago
39436d7618
Refine set_linger
8 years ago
1ed725daf8
Refine APIs for auto-blocking
8 years ago
87b01a14d5
Fix #939
8 years ago
60c25dbace
Reduce the side effects
8 years ago
bac7ba79dd
Drop FIN packets to misbehaving clients ( #925 )
* Drop FIN if detecting bad clients
* Fix the command line
* Refine iptables rules
* Refine euid
8 years ago
869f3b7bc8
Refine error handling of ATYP
8 years ago
e2f8b9a34a
Refine error levels
8 years ago
aac4240e9f
Fix #909
8 years ago
4a760fd50b
Fix #907 #908
8 years ago
cfae8dcfcc
Refine outbound feature #905
8 years ago
a7f5359cab
New feature: ss-server outbound block ( #905 )
* New feature: server outbound block
* Update server_block_chn.acl
* Update server_block_chn.acl
Add Baidu-HK
* cleanup
8 years ago
8bb961c29a
Ignore IPs in white list. #899
8 years ago
85a5c86637
Refine LRU cache by clearing old objects
8 years ago
31e30e35ba
Update server.c ( #898 )
Friendlize init message while listen on an IPv6 address.
8 years ago
7029cfca3a
Refine event handling
8 years ago
435401bf7c
Refine auto blocking
8 years ago
3c6bec8d6a
Fix a typo
8 years ago
2dd96d3036
Refine the ACL behavior
8 years ago
c4880e6cf4
Refine ACL for malicious request
8 years ago
efafb59647
Fix #863
8 years ago
c29099df3f
Enable block list by default
8 years ago
7ee9290657
Block address in block list
8 years ago
34fe1a71a6
Refine error levels
8 years ago
3e5816bb0b
fix hostname validation
8 years ago
bd1601f847
Bump version
8 years ago
a5c9bcfb58
Refine auto block mechanism
8 years ago
9bff0298f1
Remove shutdown calls
8 years ago
b28638ab80
Clean up
8 years ago
42d9b68dcc
Remove white list option in CLI
8 years ago
64870a276b
Add HTTP/SNI parser ( #809 )
* WiP: add HTTP/SNI parser
* WiP: replace hostname with HTTP/SNI header
* WiP: add ACL
* Fix white list
* Replace free() with ss_free()
* Refine sockaddr handling
* Add HTTP/SNI support to redir
8 years ago
a3a51b8414
Refine hostname validation
8 years ago
bf194fef75
Add validation of domain name
8 years ago
7c76026791
Shutdown socket if failed to handshake
8 years ago
9a43cc6e6b
Fix #781
8 years ago
f73031df20
Fix #780
8 years ago
5812840b24
Fix typo
8 years ago
46afbdcfd6
Refine incomplete header handling
8 years ago
6c6f986576
Fix a typo
8 years ago
722d8d0c62
Fix build on Linux
8 years ago
d319c0300c
Add mptcp option, close #756
8 years ago
b1f5c68650
Fix typo (found by codespell) ( #753 )
Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
8 years ago
34b9036b5b
Add MTU option
8 years ago
3f71b2a914
Fix #746
8 years ago
ad17d91b42
fix bugs with when ss-server bind_address enabled ( #725 )
* SO_REUSEADDR for remote sockfd
avoid ERROR: bind_to_address: Address already in use
* set addr->sin_port to be 0
8 years ago
af69798355
New jconf parameters ( #695 )
* Add 'tunnel_address' support for json config parser
And allow ss-tunnel to use the newly introduced parser.
Signed-off-by: Adam Anonymous <anonymous_temp_user@yahoo.co.jp>
* Add "mode" support for jconf
Now jconf supports "mode" setting, allowed values are "tcp_only",
"tcp_and_udp" and "udp_only".
Signed-off-by: Adam Anonymous <anonymous_temp_mail@yahoo.co.jp>
* Use jconf "mode" for server/local/tunnel/manager
Signed-off-by: Adam Anonymous <anonymous_temp_mail@yahoo.co.jp>
* Add per-project vimrc to gitignore
As the coding style differs from kernel and other projects, so such
project vimrc should be helpful.
Signed-off-by: Adam Anonymous <anonymous_temp_mail@yahoo.co.jp>
9 years ago
658703a1bd
Fix #673
9 years ago
0cfae045e8
Fix #648
9 years ago
Rayson Zhu
Max Lv
Kim
Max Lv
Syrone Wong
tim-le
anonymous-contributor