root/fwknop/tags/fwknop-1.8.2-pre8/CREDITS

Revision 734, 5.1 kB (checked in by mbr, 1 year ago)

Bugfix to enforce a maximum of 20 tries to read a password from stdin.

  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
Line 
1 David Jacobs
2     - Suggested IP/network lists in SOURCE definitions
3     - Wording fixes in fwknop(8) manpage.
4
5 Brian Snipes
6     - Wrote a graphical front-end for fwknop called "fwknopFE":
7         http://www.snipes.org/index.php?page=fwknopFE
8     - Found bug with legacy fingerprinting file "posf".
9
10 Joel Loudermilk
11     - Submitted patch to optionally disable email alerting.  The end result
12       was the addition of the REPORT_METHOD keyword in fwknop.conf.
13
14 Blair Zajac
15     - Submitted patch to not install perl modules in /usr/lib/fwknop/ that
16       are already installed in the system perl lib tree.
17     - Submitted patch to use getpwuid() instead of just getlogin().
18     - Submitted patch to fix bug in install.pl and how the ~/lib directory
19       is created in client install mode.
20     - Found bug with perl module file paths and naming convention (this bug
21       resulted in some modules being needlessly installed).
22     - Suggested that fwknop handle rotated log files (even pcap logs get
23       rotated on some systems).
24     - Suggested that modules only required in server mode are not use at
25       runtime when running fwknop in client mode.
26     - Suggested -O optimization in Makefile.
27     - Found bug where log rotation detection would break under the size
28       change detection method.  The result was the inode check in 0.9.6.
29     - Found bug where some Linux distributions have /var/run as type tmpfs,
30       and this caused fwknopd to die because it couldn't write to its PID
31       file.
32     - Suggested command path update code in install.pl so that the user does
33       not always have to edit the fwknop.conf and knopwatchd.conf files if
34       the system does not have commands in the default locations.
35
36 Will McCracken
37     - Reported bug on OS X where getlogin() does not return the correct
38       data.  This permitted fwknop to be updated to fall back to ENV{'USER'}
39       var.
40
41 Omar A. Herrera
42     - Submitted a patch to fix a timeout bug in knoptm that caused newly
43       created rules to be deleted too quickly.
44
45 Werner Wiethege
46     - Submitted a patch to fix a bug in knoptm where inappropriate hash
47       keys were being deleted and so previous timeouts would apply to the
48       current interval.
49
50 Ronald Bister
51     - Submitted a fix for not being able to parse ifconfig output correctly
52       when languages besides English are used.
53
54 Hank Leininger
55     - Suggested privilege separation to minimize code that executes as root.
56     - Suggested NULL password GPG keys.
57     - Suggested integration with ssh-agent and gpg-agent.
58
59 Dwayne Rightler
60     - Submitted patch to fix bug where whatismyip.com altered their return
61       data format and this broke the -w command line switch.
62
63 Sebastien J.
64     - Contributed more rigorous regular expression for matching an IP address.
65     - Suggested allowing symmetric keys to exceed 256 bits.
66     - Suggested using Crypt::Random for random number generation.
67     - Suggested the integration of time synchronization as an additional
68       measure for the fwknopd daemon to validate incoming SPA packets (this
69       will probably be enabled by default).
70     - Suggested a new method of interacting with iptables to redirect
71       connections to one port to another port on the same system.
72     - Suggested making the --Spoof-user argument useable by non-root users.
73     - Suggested the ability to randomize a spoofed IP address.
74     - Suggested building in compatibility with external IP resolution sites
75       such as http://www.whatismyip.com/
76
77 Mate Wierdl
78     - Contributed patch (originally for the psad project) for building the
79       RPM on x86_64 platforms.
80
81 Raul Siles
82     - Bug report to allow OPEN_PORTS to be omitted in access.conf in favor of
83       having only PERMIT_CLIENT_PORTS enabled.
84
85 Leland Weathers
86     - Submitted patch to allow the GPG_REMOTE_ID variable to have the value
87       "ANY" to allow arbitrary gpg signing keys to match the SOURCE block.
88
89 Juuso Alasuutar
90     - Suggested that the install.pl script offer a mode where the user is not
91       prompted at all in order to make it easier to integrate fwknop with
92       the Source Mage Linux distribution. The result is the --Defaults option
93       to the install.pl script.
94     - Suggested the ability to use gpg keys without passwords.
95
96 Neal Baer
97     - Tested the fwknop-1.8 release for Windows systems (running Cygwin).
98     - Tested the cd_rpmbuilder script on SuSE systems.
99
100 Graham Clark
101     - Suggested man page documentation bug fixes.
102
103 Roy Segovia
104     - Submitted patch to fix print statement bug in command mode where the
105       command was inappropriately prepended with the source IP address.
106     - Reported bug with running fwknop under Cygwin on Windows 2003 Server,
107       which reports 'Gygwin' under the 'uname -o' output.
108
109 Mark Van De Vyver
110     - Reported a bug where the iptables command path was not being properly
111       discovered if it did not reside at the default location specified in the
112       fwknop.conf file.
113     - Submitted various documentation issues with the fwknop man pages. The -D
114       option in fwknop-1.8.2 resulted from this feedback.
115     - Reported a bug where the .xsession.errors file would fill with output
116       logged by fwknop when null passwords were read from stdin.
Note: See TracBrowser for help on using the browser.