Changes since 1.3.5:
* Changed the ~/.gnapster_shared syntax, please rebuild your lists!
* Multiple chat channels and a more organized console tab
* Much cleaner build mp3 list dialog
* Bug fixes
CONFIGURE_ARGS. This is needed because the pkg system passes,
for example, "--host=i386--netbsd" to 'configure'. However,
'configure' looks for strings like i386-*-netbsd1.4[A-Z] and
i386-*-netbsd1.3* to turn off ipv6.
be most useful to advanced users working with IPv6 or DNSSEC.
BIND 9.0.0b1 is not functionally complete, and is not a release
candidate for BIND 9.0.0. The ISC anticipates a number of additional
beta releases between now and May, when BIND 9.0.0 is scheduled to
be released.
The ISC does not recommend using BIND 9.0.0b1 for "production"
services.
Changes since 1.3.4:
* MP3 sharing support
* Search sorting by line speed and bitrate now implemented
* Support for opennap's multiple media type features (only available
when connected to an opennap server)
* Specification of the opennap server (query server only!) in the
preferences dialog
* Big endian bug fixed dealing with the byte order of an IP address from the
server
* Lots of various bug fixes
Changes since 1.3.3:
* PPC support should be working properly (thanks drscholl ;)
* BSD connection problems fixed (occurred in 1.3.2 and 1.3.3)
Changes since 1.3.2:
* Minor fix in the search widget that caused NULL searches to occur
* New option to autostart queues when nothing is being downloaded
* Search list has full column sorting support
* Multiple selections allowed
* Queue timeouts added
* Fixed Segmentation Fault in queue code
* More language translation support
Changes since 1.3:
* Support for queued downloads
* Chat support
* Improved UI, more config options.
* PPC support not quite functional, I need someone to look at the code
and send a patch to jasta@gotlinux.org
* Now using a standard GNU autoconf/automake structure
* Tons of various bug fixes
by Eric Mumpower <nocturne@arepa.com> in pkg/9440.
Changes from 3.3.3 (from the webpage):
Xvnc
* Xvnc now uses a "deferred update" mechanism which enhances
performance in many cases. After any change to the framebuffer,
Xvnc waits for a time (default 40ms) before sending an update to
any waiting clients. This means that more changes tend to get
coalesced together in a single update. The time can be changed
with the -deferupdate option. Setting it to 0 results in the same
behaviour as previous versions of Xvnc.
* There are a couple of security enhancements. The -localhost option
now causes Xvnc to only listen on the loopback interface. This
means that it shouldn't be vulnerable to port scanning. Also a
"too many tries" feature on authentication failure is now
implemented. After five failed attempts, further attempts are
delayed by an exponentially increasing amount, starting at ten
seconds.
vncserver
* Uses SO_REUSEADDR when testing to see which ports are free.
vncviewer
* When given -owncmap in full screen mode, tries to install the
colormap. This works only when no window manager is running.
* The popup window now always uses the default colormap.
* The "backing store" attribute can now be set on the desktop window
via the "backingStore" resource. It defaults to "Always", meaning
the X server should keep the contents of the viewer window when it
gets obscured by other windows.
for each of the continuation lines, rather than using backslashes to
continue a single, long definition. This makes it much easier to spot
pre-requisite packages and other dependencies.
See <http://www.coda.cs.cmu.edu/news.html> for details.
Package no longer depends on gdbm. Added dewey depends for lwp>=1.1.
Removed ONLY_FOR_PLATFORM, as the list of supported platforms is now
quite long.
See <http://www.coda.cs.cmu.edu/news.html> for details. New feature:
set "mapprivate=1" in ${LOCALBASE}/etc/coda/venus.conf to mmap() RVM
data file. This uses significantly less memory on an idle system.
Venus now parses etc/coda/venus.conf, if it exists.
Package no longer depends on gdbm. Added dewey depends for lwp>=1.1.
Removed ONLY_FOR_PLATFORM, as the list of supported platforms is now
quite long.
* algorithmic improvements, bugfixes
* Solaris dosynctodr info update
* html/pic/* is *lots* smaller
* New drivers: Forum Graphic GPS, WWV/H
* Rewrite of the audio drivers
* Driver updates: CHU, DCF, GPS/VME, Oncore, PCF, Ulink, WWVB, burst
If you use the ONCORE driver with a HARDPPS kernel module, you *must*
have a properly specified: pps <filename> [assert/clear] [hardpps]
line in the /etc/ntp.conf file.
* PARSE cleanup
* PPS cleanup
* ntpd, ntpq, ntpdate cleanup and fixes
* NT port improvements
* AIX, BSDI, DEC OSF, FreeBSD, NetBSD, Reliant, SCO, Solaris port
improvements
(4.0.98)
* Solaris kernel FLL bug is fixed in 106541-07
* Bug/lint cleanup
* PPS cleanup
* ReliantUNIX patches
* NetInfo support
* Ultralink driver
* Trimble OEM Ace-II support
* DCF77 power choices
* Oncore improvements
- make -M and -r work in indexmaker
- hungarian translation
- NoSpaceChar option. Supresses SPACE normally inserted between local value
and PRE or APPEND value.
- new features for cfgmaker --iponly, --options, --workdir
- make RunAsDaemon work ...
- Daemon mode now forks into background after cfgcheck
- Remove locks after sig INT and TERM
- make indexmaker ignore default values
- added ThreshDesc config option. Its value is assigned to the env variable
THRESH_DESC before and of the Thresh-Action scripts are called.
- bugfix for big5 locale
- bugfix for norwegian.pmd
- it is RunAsDaemon and not RunAsDeamon
- update for rrdtool integration 14all.cgi to 0.16
- updated danish translation
- have cfgmaker put specific comments into the mrtg.cfg file
regarding the reason for droping a certain interface ..
- Added RunAsDeamon mode. Start mrtg only once. No Cron necessary.
- linux ip-filter integration in contrib
- version 2.2 of mrtgmk in contrib
- catalan locales
- rateup.c fix for kMG override bug
- allow to set ShortLegend to ''
- better parsing of PageTop with intexmakers -P option
- fix for spanish translation (uptime had some probmlems)
- contrib: switchmaker produces mrtg cfg files for Cisco Catylst 5XXX
- made sure -lm comes last when linking ...
- converted remaining gifs to png
- make sure AbsMax is not smaller than MaxBytes
- translation to icelandic
- added japanese translations for ISO-2022-JP and EUC-JP
- added turkish translation
- update for rrdtool integration 14all.cgi
- Added more modular translation system
- Added German Translation
- Chinese Translation
- cfgmaker_ip ... keep first address and not last ..
- Malayan translation
- restored mibhelp to its old glory ..
- added ability to index interfaces by physical address analog to
the existing IP stuff ... there is now also a cfgmaker_phys
- polish translation
- graphing fix for rateup ...
- cpuinfo contrib
- contrib cisco config tftp
- updates and bugfixes for mrtgmk v2.0
- fix for -F/-f in indexmaker
- fix for view type in indexmaker
- cisco accounting contrib
- added -lm to LIBS in configure.in
- patching system for languages ... check translate directory
- NSI (Network Status Imager for MRTG) contrib
- updates for mrtg-archiver
VTun provides the method for creating Virtual Tunnels over TCP/IP
networks and allows to shape, compress, encrypt traffic in that
tunnels.
Supported type of tunnels are: PPP, IP, Ethernet and most of other
serial protocols and programs. VTun is easily and highly configurable,
it can be used for various network task like VPN, Mobile IP, Shaped
Internet access, IP address saving, etc. It is completely user
space implementation and does not require modification to any kernel
parts.
---
GNU Zebra is not yet released, so this NEWS is about beta version.
* Changes in zebra-0.84b
* Changes in lib
** Fix bug of inet_pton return value handling
* Changes in bgpd
** Fix bug of BGP-4+ link-local address nexthop check for IBGP peer.
** Don't allocate whole buffer for displaying "show ip bgp". Now it
consume only one screen size memory.
* Changes in ripd
** Fix debug output string.
** Add RIP peer handling. RIP peer are shown by "show ip protocols".
Changes are:
* fixed a problem with pass rules not being applied properly
* fixed a #include ordering statement for Slackware 4.0 installs
* fixed banner output for the -V option
* Token Ring decoding is now fully functional
* Added packet buffer cleanup code to all protocol decoders
* fixed a problem with improper TCP option output
* Added a Snort man page
changes in 4.4M are:
- .ircquick support (loaded when client starts)
- new functions: hasvoice(), dcclist() and chatpeers()
- new variable: MAKE_NOTICE_MSG
- fixed long line sending in ICB mode: long lines are split
and send to the server separately
- new scripts based on my start up: default (suggested for
a .ircrc), times (to add time to most chat) and otherstatus
(to allow non-inverse status lines to be constructed)
- fix by in xecho
- make SHOW_CHANNEL_NAMES work in ICB mode.
- incorporate IPv6 support
additional fixes include:
- ipv6 support in configure.in was a bit broken
- /whois works in ICB mode
- group name changes are now handled in ICB mode
Changes include:
+general: set TIMEOUT=shutout:900s by default (was shutout:0)
+FTP: fixed SEGV on cascaded DeleGates (with MODE XDC)
+DNS: fixed non-recursive DNS resolution on little endians
wmpload is a variation of pload, displaying ppp network device
usage in a 64x64 pixel square.
Wmpload was designed to be docked into the Window Maker dock but
can be used with any window manager.
(issue in ucd-snmp side - submitted diff to ucd-snmp-coders@ucdavis)
depend on devel/autoconf, to simplify the build.
ELF breakage reported from: "Michael L. Hitch" <mhitch@lightning.msu.montana.edu>
Rick Jones' <raj@cup.hp.com> network performance benchmarking package
(IPv6-ready when USE_INET6 - will be revisited when we change USE_INET6 to
something else)
- make printcap parsing understand comments.
- pass missing argument to function.
XXX: mental note: ppd files are \r not \n separated. We need to fix the
parsing so we don't have to convert them to unix files before they work.
using patented IDEA algorithm. Uses two new make variables which may be
defined in mk.conf:
USE_CRYPTO: YES, NO
USE_IDEA: YES, NO
Defaults to building with crypto but without IDEA.
From the Readme:
Version 1.5 adds major new functionality! Detection and preprocessing plugins,
session logging, rules file variables and includes, five new network layer
decoders including ISDN and Token Ring support, new detection functionality,
and a bunch of other cool stuff.
Overview of changes in Ethereal 0.8.1:
* Fix mulitiple-selection bug in packet list (Gilbert)
* Check for libtool and libtool version (Guy)
* Toshiba file reader handles relative dates (Gilbert)
* File|Open dialogue box directory hack (Gilbert)
* Modify appearance of lines and expanders in GUI proto tree (Gilbert)
* Make code ANSI-C compliant and other build fixes (Guy)
* Fix side effects of using GtkCTree and GTK_SELECTION_BROWSE (Guy)
* Abstract out some of the menu code from the GUI routines (Guy)
* Re-arrange some GUI code (Guy)
* "Default" button for resetting plugin filter string (Olivier)
* Plugin status save/restore (Olivier)
* Add notes about sniffing VMware connections (Gilbert)
* Add focus for "Find Frame" and "Go to Frame" (Guy)
* Reconcile differences in integer size used for ports
in conversation code and packet_info code (Gilbert)
* Empty string capture filters for libpcap craziness (Gerald, Guy)
* Manpage updates (Guy)
* Print packets as multiple pages of PostScript (Guy)
* Fix "Follow TCP Stream" print function (Guy)
* Avoid segfault in SMB reported by
Aaron Bush <abush@microcenter.com> (Gilbert)
* L2TP support (John Thomes)
* Allow printing during capturing
"libirc is a C-library for the IRC protocol. It simplifies the task of
writing a bot or client. A very simple example comes with the
package, demonstrating how it is used.
Perfect for those who wish to write bots, irc clients (especially if
you want to integrate IRC with some other Internet software). The
programming language is C."
Note, however, that this package lacks any form of documentation.
Overview of changes in Ethereal 0.8.0:
* RPC and NFS updates, complete NFSv2 support (Uwe, Gilbert)
* Initial TNS support (Nathan)
* Documenatation and distribution updates (Gilbert, Guy, Itojun, Gerald)
* SMB fixes (Gilbert, Richard, Olivier, Greg Kilfoyle)
* Color preference fixes and updates (Guy)
* NetBIOS fixes (Guy)
* IPX fixes and updates (Guy, Nathan)
* Capture/file save facility updates (Guy)
* Add IPX stats to capture window (Gilbert)
* Appropriately enable/disable the "follow" menu item (Florian)
* ICQ fixes from Guy and Kojak (Guy)
* Add Christopher McAvaney's format_text() fix (Guy)
* Stream window color prefs (Gerald)
* Myriad GUI fixes and enhancements (Gilbert, Guy)
* RADIUS fixes thanks to Arni Raghu <arni@caip.rutgers.edu> (Gilbert)
* VLAN updates (Nathan)
* Byte view fixes (Nathan)
* Initial TACACS+/XTACACS support (Nathan)
* Multiple file format capability in wiretap and Ethereal (including Snoop,
Netmon 1.x, Sniffer, Netxray, and various flavors of libpcap)
(Guy, Olivier, Nathan)
* Added editcap to the distribution (Richard)
* Enhancements to wiretap's file output capabilities (Guy)
* Add our own SNMP PDU dissector; other SNMP fixes and updates (Guy)
* ASN.1 code added; used by SNMP dissector, and available for other use
by other dissectors (Guy)
* LLC/SNAP fixes and updates (Guy, Nathan)
* NTP fixes (Guy, Gerald)
* ISAKMP updates from Dave Chapeskie (Guy)
* Reduced dependency on "global.h" (Gilbert, Guy)
* HTTP updates from Jerry Talkington (Guy)
* Added IRC dissector (Nathan)
* DNS updates (Nathan)
* Added James Coe's patch(es) to add SRVLOC and NCP-over-IP support (Guy)
* CLI fixes and enhancements (Guy)
* ARP improvements (Nathan)
* Capture length fixes for IRIX (Guy)
* BGP updates from Greg Hankins, and other BGP fixes (Itojun)
* Added Philip Gladstone <philip@raptor.com>'s patch to check IP header
checksum (Gilbert)
* GRE updates, merged code from Jerry Talkington (Guy)
* AppleTalk updates, including NBP and RTMP dissectors (Nathan, Guy)
* Initial LDAP support (Nathan)
* X.25 updates (Olivier)
* Plugin support (Olivier)
* Fixes for packet-ip.c (Guy, Gilbert)
* Jerry Talkington's patch to move filter prefs to their own dialog (Guy)
* Fixes for RedHat's modified version of libpcap (Guy)
* WCCP dissector from Jerry Talkington (Guy)
* rwho/rwhod/ruptime support added (Gilbert)
* Added Bert Driehuis <driehuis@playbeing.org>'s I4B wiretap module
and V.120 decoder (Gilbert, Guy)
* RSVP fixes (Gilbert)
* NCP fixes and updates, other fixes from James Coe (Nathan, Guy)
* Q.931 updates from Bert Driehuis (Guy)
* ISDN4BSD updates (Guy)
* Support for ISIS thanks to Stuart Stanley (Guy)
* Support for Dearborn Group Technology's Gryphon as a plugin (Gilbert)
* Win32 port updates (Guy)
* LPD segfault fixes reported by Gregor Glomm (Gilbert)
* GUI page added to preferences (Gilbert)
* Libtool integrated with the distribution (Gerald, Guy, Itojun)
* OUI updates (Guy)
* Summary-dialog-on-empty-capture segfault bug squished (Guy)
it assumed that:
- bin/mirror is in cwd (so cwd must be ${PREFIX}/bin)
- generate logs into ./logs (so logs will be generated into ${PREFIX}/bin/logs)
but it is very annoying. let us invoke bin/mirror with full pathname.
add rcsid to patches/patch-a[de].
- added "dir" == "ls -l", "mget" == "get", "mput == "put"
- filenames with spaces should work now
- added ability to connect to a different port with -p. -P now
specifies remote path
- fixed problems with multiple opens and no intermediate close
- command line flags processed in open, so multiple opens with
different flags will work
Uses NetBSD's libedit instead of libreadline. (Why don't we have any
documentation on that, btw?!?)
Changes in 2.6.0:
o On sigpipe, always log a lost connection.
o Added a log message on attempts to download files marked unretrievable.
o The SITE NEWER feature has been disabled. A compile-time option has been
added to re-enable it. See config.h.noac for more information on this.
o With restricted-uid/gid, CWD to a non-existant directory would display the
full pathname rather than just relative to the user's home. Actually, the
fix catches most cases where this could occur, not just the CWD verb.
o Fixed a bug in the restricted-uid/gid feature which could allow access
outside the user's home directory in some cases.
o Bumped MAXHST (max. hosts allowed on a line) for ftphosts from 10 to 12.
Fixed a bug related to this which can cause the server to crash checking
host access.
o The internal ls (see below) was judged to be unready. It has been disabled
by default but can be enabled with a compile-time option for those who wish
to attempt to debug it (be warned, it has a lot of problems).
o Split the "bad shell or user not in ftpusers" syslog message into two
messages to prevent confusion.
o Filename globs for LIST, NLST and SITE EXEC, as well as a few internal
uses, are cleaned up before processing. For example: */./../* becomes
just *. This prevents certain memory starvation DoS attacks.
o Corrections for RFC compliance can break some clients. If possible, the
broken client should be updated, but a compile-time option has been
added. See the config.h.noac for more information on this.
o Created doc/HOWTO directory and moved VIRTUAL.FTP.SUPPORT and
upload.configuration.HOWTO there.
o Add a README.AUTOCONF file describing the autoconf build in detail.
o UC, Berkeley, has removed the requirement that all advertising material
must include credit to them. Removed the clause from the LICENSE and
the historical licenses in the COPYRIGHT file.
o Added the email-on-upload feature from BeroFTPD. See the ftpaccess man
page for defaults on these added ftpaccess clauses:
mailserver <hostname>
incmail <emailaddress>
mailfrom <emailaddress>
virtual <address> incmail <emailaddress>
virtual <address> mailfrom <emailaddress>
defaultserver incmail <emailaddress>
defaultserver mailfrom <emailaddress>
o Redhat added the -I option to disable RFC931 (AUTH/ident). Added to
the baseline so Redhat users don't see a loss of a feature. Setting
the timeout for rfc931 to zero will do the same thing in the ftpaccess
file.
o The test for whether restricted-uid/restricted-gid applied should have
been done before the chroot so it used the system /etc/passwd and
/etc/group files.
o CDUP when you were already at the home directory, would complain about
you being restricted (if you were). Instead it should give a positive
reply, and do nothing. This makes it behave more like CDUP when you're
not restricted to your home directory.
o deny-uid and deny-gid were being tested for anonymous users. Bad move,
it's too easy to forget to allow them. Use 'defaultserver private' to
keep anonymous users away.
o Correct the operation of the NLST command. Finally. mget should now
work as users expect it to.
o Prevent buffer overruns when processing message files.
o Correct a reference through a NULL pointer when doing S/Key
authentication and the user is not in the passwd file.
o Check the return code from select() when setting up a data connection.
Under some rare conditions it is possible that the select was called
for an fd_set which has no members, hanging the daemon.
o Ensure a pattern of "*" matches everything. The new path_compare (used
on upload and throughput clauses in the ftpaccess file) sets the option
FNM_PATHNAME, so:
* matches everything
/* matches everything
/*/* matches /dogs/toto and /dogs/toto/photos but not /dogs
o setproctitle() support added for UnixWare.
o Removed all FIXES files. Merged their contents into this CHANGES file
(the one you're reading now). The old doc/FIXES directory has been
tar'd and will be placed in the attic when 2.6.0 releases.
o Corrected an error in the MAPPING_CHDIR feature which could be used to
gain root privileges on the server.
o Added -V command-line option to View the copyright and exit.
o Added the privatepw command and documentation.
o Port for FreeBSD corrected.
o Adding the LICENSE file to the baseline.
o Added print_copyright function so our copyright is embedded in the
executables.
o WU-FTPD Development Group copyright headers added. Original Copyright
headers moved into the COPYRIGHT file.
o RCS Ids from 2.4.x removed and new templates added for wu-ftpd.org
usage.
o Make sure the signal context is restored when jumping out of signal
handlers. This was causing signal 11 on some systems.
o Cleaned up the how-to of setting up virtual hosting support.
o Corrected header file dependencies.
o Changed NLST to nlst, necessary as ftpcmd.c #defines NLST.
o Tidied up virtual variables.
o Changed so compiles cleanly on SCO OpenServer 5, UnixWare 2 and
UnixWare 7.
o Anonymous users could get in even though no class was defined for them.
o Support for non-ANSI/ISO compilers has been removed. You MUST have and
ANSI/ISO C compiler. This has been true for some time, all that has
changed is the (incomplete) support for older (K&R) compilers has been
removed.
o Added Kent Landfield's NEWVIRT scheme for extensive virutal hosting.
See the updated documentation on virtual hosting for details.
o ftprestart has been added to the base daemon kit.
o A buffer overrun in the ftpshut command has been corrected. Since, on
most sites, the ftpshut command is only usable by the superuser, this
is not considered a security issue. If you have installed ftpshut with
suid-root permissions (not the default), then there is the possibility
this overrun could be used to leverage root permissions.
o Several new ftpaccess clauses have been added. These allow control of
the various timeouts used within the daemon. The new clauses are:
timeout accept <seconds>
timeout connect <seconds>
timeout data <seconds>
timeout idle <seconds>
timeout maxidle <seconds>
timeout RFC931 <seconds>
o Myriad places where inactivity timeouts were not being properly
detected or handled have been corrected.
The built-in directory listings, both the original NLST and the
build-in LIST (ls), now detect inactivity. The original NLST did
not which could lead to hanging daemons.
C FILE handles for data connections are now always flushed, then
the socket is shutdown cleanly before being closed.
As a side effect, the daemon now more often properly detects
incomplete transfers. This can lead, though, to the xferlog
showing the correct byte count (meaning the daemon read or wrote
that many bytes over the data connection), but still log the
transfer as incomplete (meaning the socket did not properly
shutdown so the client probably missed some data).
o The daemon no longer attempts to replace the system's <arpa/ftp.h>
header when compiling. Instead, it uses its own local copy at all
times.
o The daemon will now wait for the transfer to complete before sending
'Transfer complete' or similar messages. This improves the daemon's
reliability for poorly written clients which take recipt of the message
as indication the transfer has completed rather than reading until the
connection closes.
o Guest and anonymous logout was not recorded on Linux. Removed call to
updwtmp and returned to old method of updating the lastlog.
o Script "vr.sh" is no longer needed. The Development Group will not be
releasing patches to upgrade; they can be obtained from CVS if needed.
o "realpath_on_steroids" is no longer needed. Removed.
o Use a custom version of fnmatch() which changes the rules for matching
file and directory names. The most visible result of this is
noretrieve and allow-retrieve are now much more flexible. See the
ftpaccess manpage for examples.
o Use the correct SPT_TYPE for FreeBSD 2.0 or later.
o Correct the class= logic on the allow-retrieve clause.
o Enhanced DNS extensions. This adds three ftpaccess clauses:
dns refuse_mismatch <filename> [override]
dns refuse_no_reverse <filename> [override]
dns resolveroptions [options]
o Corrected a reference in the manpage for ftpconversions to ftpd.
o The string 'path-filter' is now used in the system logs to describe
problems resulting from failing a path-filter check. The daemon used
to just say 'bad filename' which was misleading to some people.
o Added instruction on how to support PAM on Solaris. Right now this
means hand editing src/config/config.sol and
src/makefiles/Makefile.sol.
o Checking that all platforms use config.h, src/config/config.isc was
found to have forgotten to include the file.
o A security deficency on SunOS 4.1, not having a working getcwd()
function, has been corrected by using the provided function.
Compilation bugs in the portable getcwd() function have been corrected.
o The daemon will no longer hang attempting to close the RFC931 socket
when the remote end is firewalled and does not respond to traffic for
this protocol. This was determined to be inappropriate handling of
SIGALRM; handling for this signal has been cleaned up throughout the
daemon.
o The daemon may now be built using GNU autoconf. This is in the early
stages and not all platforms may be supported. The old build system
will be maintained for at least the 2.6.0 release; until the major
platforms are all known to be supported.
o Two new ftpaccess clauses have been added. These allows the site admin
to selectively allow PORT and PASV data connections where the remote IP
address does not match the remote IP address on the control connection.
The new clauses are:
port-allow <class> [<addrglob> ...]
pasv-allow <class> [<addrglob> ...]
o The daemon now includes an internal 'ls' command.
o Ported to Mac OS/X.
0 Added (limited) support for AFS and DCE user authentication. This is
only know to work on AIX, and needs porting to other platforms. For
now, this requires hand work to enable.
o Added an ftpaccess clause to enable TCP keepalives. This clause is:
keepalive <yes|no>
o You can now specify the xferlog filename for the default server just as
you can for the virtual hosts; in the ftpaccess file. The new clause
is:
xferlog <absolute path>
o ftpaccess manpage cleaned up. Many typos corrected, some techincal
changes. Indentation should now be correct.
o Apache's .indent.pro to the src and support directories. Ran all *.c
and *.h files through it. ftpcmd.y has been indented by hand. The
code is now a lot more readable!
o A bug in the parsing for the deny !nameserved ftpaccess clause has been
corrected.
o Technical corrections in the ftpd manpage.
o Add util/recompress.c as a more generic version of gzip2cmp.c
###########################################################################
Changes in 2.5.0:
o Change the handling of wtmp for GNU libc to use the Os-provided
function updwtmp().
o Prevent some buffer overruns.
o Fix permissions on some files installed by RPM, add the log rotation
control file.
o Change the seteuid() calls for fchown() and chown() for POSIXLY_CORRECT
systems.
o pid file locking in ftpcount (ftpwho) is now consistent with the way
the daemon locks these files.
o Cancel any pending alarm request to stop acl_remove() from being
interrupted then called again via the SIGALRM handler, this should fix
the flock on a bad file descriptor looping problem.
o Use %m in syslog format strings in place of %s and strerror(), this
simplifies #ifdefs.
o For SCO, link ftpcount with libsocket, necessary as it now calls
syslog().
o Added Redhat's RPM SPEC file for building RPMs.
o English corrections in ftpaccess manpage. Technical correction: the
noretrieve/allow-retrieve clauses do NOT support regular expressions.
o Move where ftpglob stuff is defined to avoid compilation errors on some
systems.
o Port to SGI Irix version 4 corrected.
o Overwrite behavior on uploads has been made consistent with shell
usage. The daemon does not change ownership or permissions on
overwrite.
o Corrected the PASV command to bind to the correct interface (local IP
address).
o Removed the OVERWRITE and UPLOAD defines from platform config files;
they are defined in the main config.h header.
o Issuing CWD without any parameters caused a signal 11, crashing the
daemon.
o Port to HP/UX corrected.
o Added ERRATA file to discuss problems with getcwd().
o Added a portable version of the getcwd() function for systems which do
not have it or imcorrectly implement it. NextStep 3 uses this new
function.
o OPIE support was being disabled even though the proper command-line
switches were being set. Corrected the use of opieverify().
o The fatal() function was not declared void; this was causing problems
with some compilers.
o Port to Hitachi HI-UX corrected.
o Some calls to fnmatch() were missing parameters.
o Corrected the 'restricted' user feature. It now works well with most
FTP clients.
o Correct usage of -d vs -e in the install Makefile for a number of
platforms.
o You can now use negated hostnames/addresses on the class ftpaccess
clause.
o Added an ftpaccess clause to specify random text for the initial
greeting:
greeting text <message>
o Corrected password encryption/checking for Digital Unix with C2
security (SECUREOSF).
o Merged the TODO file from the VR series with Stan's TODO file for the
Academ betas.
o Changed the various permission denial messages sent by the daemon to
the client to make it clear the message originated from the server.
o Ports to SCO, Solaris, uxw, ptx and isc corrected.
o Use the newer SEEK_ defines in place of the old BSD L_ defines and
removed the global definition of entry, each function should define it
locally.
o Removed an unnecessary lseek(L_SET) in ftpcount (ftpwho).
o Link ftpcount and ftpshut with ${XXLIBS}.
o Made strsep() definition consistent with BSD and Linux. Add strsep()
definition to conversions.c.
o Added #include <string.h> to ckconfig.c.
o Replaced the _PATH_DEVNULL define with a #include of "pathnames.h" in
popen.c.
o Support long group access passwords if SecureWare or HPUX_10_TRUSTED
are defined (using bigcrypt()).
o Fixed a memory leak in restrict.c.
o Digital Unix version 4 has a working getcwd(); use it instead of
getwd().
o Stop restrict_list_check() from walking off the end of name.
o Added -x command-line option to mean 'log syslog+xferlog'.
o Changed the log ftpaccess clause to allow logging transfers to both the
syslog and xferlog. The log ftpaccess clauses now include:
log syslog
log xferlog
log syslog+xferlog
o Formation of the WU-FTPD Development Group on 1 April, 1999.
2.4.2-VR17 chosen as initial baseline for the daemon.
###########################################################################
Changes in 2.4.2-VR17:
o Gregory A Lundberg resigns as the de-facto maintainer of WU-FTPD. "And
you thought I was joking."
o VIRTUAL is now the default for Solaris; all Solaris systems support
multiple interfaces (IP addresses).
o Fixed complaints involving virtual_len reported by several beta
testers.
o Some of the 'C' source code in ftpcmd.y depended upon a particular
behavior when ANSI/ISO does not define it. Corrected so all compilers
will properly interpret the code.
o Corrected the support for QUOTA on Solaris.
o The GNU EGCS 'C' compiler is broken. A quick check and we can avoid
the brokenness.
o Port to Ultrix corrected.
o The default shell on NextStep wants -d instead of -e. Changed to test
instead of [] since that's more portable; will probably do the same to
other systems in a future release.
o MNTMAXSTR was possibly undefined on Digital Unix 4.0 even when not
using QUOTA_DEVICE, causing compilation errors.
o Added daemonaddress to the ftpaccess manpage.
o Added a note from Chad Price <cprice@molbio.unmc.edu> in src/logwtmp.c
about the brokenness of Solaris' last command.
o It turns out that not all SunOS 4.1 boxes actually have a getcwd()
function.
o The labels unix and __unix__ are depricated on BSD, effecting the logic
for the reponse to the SYST command.
o Added an appnote about OPIE. See src/makefiles/Makefile.lnx for a way
to automatically have the daemon use OPIE. Send your Makefile if you
do something similar for your system.
o Added an appnote about a problem experienced with Trusted Solaris.
o Added doc/misc directory to start collecting interesting tidbits which
may help people get their servers going.
o The FIXES files were really cluttering up the base directory. Moved
them to a directory under doc.
o The 'log security' ftpaccess clause covered all but a few messages
about filesystem operations. It now covers the few it missed.
o Under some conditions _PATH_WTMP was not being set in pathnames.h
o QUOTA is now supported for Solaris.
o Trusted Solaris needed additional functionality in ftpcount (ftpwho).
o File locking in ftpcount (ftpwho) was never completed.
o Port to HP/UX corrected.
o 'make install' now accepts DESTDIR to install into a directory
structure other than the root file system. A number of other optional
parameters are available to override the default ownership of the
installed files. Missing directories are automatically created. File
permisssions were reduced to the minimum necessary.
o Dead code removed.
o The Makefile for Linux now automatically detects if PAM is installed
and compiles the daemon to use it.
o Fix an uninitialized variable in ftpshut which could effect the way the
command works with default values.
o Suppress trailing blanks from the output of a wide 'ps' in the ftpcount
(ftpwho) command. Just making things pretty.
o Updated upload.configuration.HOWTO to describe more of the
configuration having to do with class= rules and overwrite, delete and
rename clauses.
o Added vers.c and edit to 'make cleandir' in the src directory. These
files are automatically created during the build process.
o Added a restrict_check(".") in the LIST command for consistency with
the remainder of the code in ftpcmd.y.
o Corrected the 'restricted' users feature so it would play nicely with
web clients and the way some of them mis-interpret FTP URLs.
Changes from version 1.5.2:
* install feature for Xipdump.ad resources file.
* Add include <netinet/in.h> in xipnet.c
* Added specific support for local interface.
are included - sftp and sftpserv. When sftp is run and a host is
connected to (either by running 'sftp remotehost' or 'open remotehost'
from the sftp prompt), an ssh connection is initiated to the remote
host, and sftpserv is run. So, sftpserv must be in your path on
the remote host. Note that since sftpserv is run from ssh, no root
privileges are necessary.
Overview of changes in Ethereal 0.7.9:
* Compilation warning fix (Guy)
* Updates to Q.931 (Guy)
* Updates to Q.2931 (Guy)
* Display filter widget uses GtkCombo (Gerald)
* Added SNMP over Ethernet (Gilbert)
* Small changes to display filters from tcp follow and match selected (Gilbert)
* Fix problem and update SMB (Richard)
* Update portmap (Uwe)
* Update NFS (Uwe)
* Support for iptrace 1.0 files (Gilbert; thanks to
Florian Lohoff <flo@rfc822.org> for sample trace files)
* Update support for netmon 2.0 files (Guy)
* Updates to ATM (Guy)
* Updates to ARP (Guy)
* Updates to DNS (Guy)
* Support for both PPP and LAPB as WAN links in NG Sniffer files (Guy)
* Colorize TCP streams (Gerald)
* Make autoconf check for correct contents of libz library (Guy)
* Updates to About box (Guy, Gilbert)
installed. The configure script added $LOCALBASE/include to CFLAGS,
but that way the local includes get mixed up with ncruses includes.
Append $LOCALBASE/include after the local includes to includepath.
Changes include:
+ security: randomized stack base to prevent overflow attack
+ general: fixed some dangerous buffer overflows
+ MASTER: immediate rejection in MASTER mode for forbidden users
+ CFI: fixed direction of LOGFILE on -v,-vv not to socket but to LOGFILE
+ CFI: fixed not to pass "[execpath]command" to shell (since5.9.2)
+ HTTP: fixed SEGV on long (maybe non-) scheme name in URL
+ INETD: fixed SEGV when argument-list part in INETD parameter is empty
+ SocksV5: fixed dropping response data on BIND/ACCEPT
+ Socksv5: fixed (enabled) UDP/SocksV5 on little endians
+ SocksV4: return immediate error response to SocksV5 request
+ NNTP: removed duplicated X-Forwarded in NNTPCC
