diff options
| author | james <james@e7ae566f-a301-0410-adde-c780ea21d3b5> | 2008-09-04 20:35:09 +0000 |
|---|---|---|
| committer | james <james@e7ae566f-a301-0410-adde-c780ea21d3b5> | 2008-09-04 20:35:09 +0000 |
| commit | 0a838de8adf3b06590e73cff6415275d9b1cd4fe (patch) | |
| tree | 17d8ef48307d970ad53efb4e9d7f61bf62a6e292 /socket.h | |
| parent | Fixed minor compile issue in ntlm.c (mid-block declaration). (diff) | |
| download | openvpn-0a838de8adf3b06590e73cff6415275d9b1cd4fe.tar.xz | |
Added --allow-pull-fqdn option which allows client to pull DNS names
from server (rather than only IP address) for --ifconfig, --route, and
--route-gateway. OpenVPN versions 2.1_rc7 and earlier allowed DNS names
for these options to be pulled and translated to IP addresses by default.
Now --allow-pull-fqdn will be explicitly required on the client to enable
DNS-name-to-IP-address translation of pulled options.
git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3307 e7ae566f-a301-0410-adde-c780ea21d3b5
Diffstat (limited to 'socket.h')
| -rw-r--r-- | socket.h | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -396,7 +396,10 @@ void link_socket_update_buffer_sizes (struct link_socket *ls, int rcvbuf, int sn #define OIA_IP 1 #define OIA_ERROR -1 int openvpn_inet_aton (const char *dotted_quad, struct in_addr *addr); + +/* integrity validation on pulled options */ bool ip_addr_dotted_quad_safe (const char *dotted_quad); +bool ip_or_dns_addr_safe (const char *dotted_quad, const bool allow_fqdn); socket_descriptor_t create_socket_tcp (void); |