To:
[email protected]
Date: 11 May 2014 17:00:00 +0900
Subject: DeleGate/9.9.8 (STABLE) -- fixes and extensions especially around FTP
From:
[email protected] (Yutaka Sato)
Reply-To:
[email protected]
Organization: The DeleGate Project
Message-Id: <
[email protected]>
References: <
[email protected]_> <
[email protected]_>
Dear DeleGate users,
I inform you of the new release of DeleGate available as follows:
--------------------------------------------------------------------------
DeleGate/9.9.8 (STABLE) -- fixes and extensions especially around FTP
This release includes many fixes and extensions especially around FTP.
New features:
FTP over HTTP -- tunneling FTP connection over (connectionless) HTTP
"FTPxHTTP" is a HTTP server which can be used for tunneling the FTP
protocol over HTTP by a (connectionless) sequence of usual HTTP requests
(not by CONNECT but by GET and POST). It can be relayed by another
HTTP proxy for forwarding, filtering or so.
See <URL:
http://www.delegate.org/delegate/Manual.htm#serv_FTPxHTTP>
FTP Bounce -- rejecting "FTP Bounce" attack by PORT connection
See <URL:
http://www.delegate.org/mail-lists/delegate-en/04896>
<URL:
http://www.delegate.org/delegate/Manual.htm#FTPCONF>
DYCONF -- Dynamic configuration of DeleGate.
"DYCONF specifies configuration parameters to be loaded dynamically
on the beginning of relaying application protocol after the acception
of a TCP connection from a client before starting a session over it. ..."
See <URL:
http://www.delegate.org/delegate/Manual.htm#DYCONF>
<URL:
http://www.delegate.org/mail-lists/delegate-en/04921>
Protocol Specific Fixes and Extensions
- FTPxHTTP: fixed the error on first command after CWD
- FTP: fixed data-connection error on first PASV after toggling from PORT
- FTP: fixed SEGV on upload (STOR) with cached file
- FTP: fixed STOR as an origin FTP server with client over SSL
- FTP: fixed STOR failure with STLS=fsv:ftp <URL:
http://www.delegate.org/mail-lists/delegate-ja/502>
- FTP: introduced FTPCONF=doeprt:sv to force using EPRT with server
- FTP: introduced FTPCONF=doeprt:sv tp force using EPRT with server
- FTP/SSL: enabled STLS=fsv:"ftps" as well as STLS=fsv:"ftp"
- FTP/SSL: enabled SERVER=ftps STLS=fcl:ftps STLS=fsv:ftp
- FTP/SSL: fixed slow upload (16sec.) by FTP/SSL with PORT
- FTP/SSL: introduced CMAP="/:FTPWD:ftp:*:*" suppressing PWD on the session start <URL:
http://www.delegate.org/mail-lists/delegate-ja/540>
- sftp/FTP: fixed login failure with -fv option <URL:
http://www.delegate.org/mail-lists/delegate-ja/426>
- sftp/FTP: fixed logging-in via sftp with multiple authentication methods
- sftp/FTP: fixed "Too many open files" <URL:
http://www.delegate.org/mail-lists/delegate-en/4825>
- sftp/FTP: introduced waitput=T MountOption to avoid truncation of uploaded data <URL:
http://www.delegate.org/mail-lists/delegate-en/4934>
- sftp/FTP: termination on disconnection from SFTP server <URL:
http://www.delegate.org/mail-lists/delegate-en/4933>
- SSL: showing corrent cipher description with TLSCONF=-vd <URL:
http://www.delegate.org/mail-lists/delegate-en/5000>
- SSL: revival of FSV="sslway -cert file" <URL:
http://www.delegate.org/mail-lists/delegate-en/04821>
- MITM/HTTP/SSL: fixed not to apply default URL rewriting for MITM
- HTTP: fixed SEGV by HTTPCONV="methos:+,a,b"
- HTTP: fixed MOUNT for a HTTPS server with "nvserv" <URL:
http://www.delegate.org/mail-lists/delegate-ja/515>
- HTTP: supported relaying POST body in chunked encoding
- HTTP: fixed suppressing Set-Cookie rewriting by URICONV <URL:
http://www.delegate.org/mail-lists/delegate-en/05024>
- HTTP: fixed broken binary response from CGI with CHARCODE=guess
- HTTP: detecting a URL in JavaScript as ({url:"..."
- HTTP: rewriting URL in (') escaped as "'"
- HTTP: fixed slow relay of large text
- HTTP: enabled rejecting CONNECT by MOUNT="HostPortPattern = forbidden" MountOption
- HTTP: immediate exit of response relaying with cache by HTTPCONF="takeover:0"
- HTTP: introduced HTTPCONF=bugs:thru-304 and HTTPCONF=bugs:gen-304 to enable 304 response with FTOCL <URL:
http://www.delegate.org/mail-lists/delegate-ja/449>
- SMTP: fixed not to repeat (reuse cached one) EHLO after STLS <URL:
http://www.delegate.org/mail-lists/delegate-en/04881>
- SMTPGATE: inheriting common configuration as SMTPGATE/admin/@common/conf
- IMAP: redirecting to a IMAP server hinted in ALERT
- POP: coped with STLS=fcl + SERVER=pop (not SERVER=pop://server)
- DNS: disabled unneccessary on-memory cache of RR record in DNS server
- UDPrelay: fixed SERVER=dns://host:port on BSD
- UDPrelay: fixed proxying DNS by UDPrelay with PERMIT <URL:
http://www.delegate.org/mail-lists/delegate/14418>
- Xflash: gateway for X11-client to Flash as a X server
- yysh/YYMUX: so many fixes
Platform Specific Fixes and Extensions:
- Windows: added hinting message on the failure of startup as a service
- Winwods: fixed server's pid in PIDFILE
- Windows: enabled -Fkill for foreground DeleGate server on Windows
- Windows: fixed detection of isatty() when DeleGate is used as a console command
- Windows: "win32-dg.exe" changed its default HTTP port from -Q80 to -Q2080
- Ubuntu: fixed linking DeleGate on Ubuntu
- Solaris: fixed compilation on SOlaris11 (with gcc 4.8.2)
Fixes and extensions in basic common:
- Resolver: fixed SEGV with searching 255.255.255.255.in-addr.arpa
- Resolver: fixed scanning search list separated by "," <URL:
http://www.delegate.org/mail-lists/delegate-ja/00473>
- Resolver: introduced NIS timout (3 seconds, can be defined with TIMEOUT=nis:T)
- Resolver: coped with a long host name longer than 70 characters (ex. on Windows Azure)
- Resolver: modified not to use SOCKS by FORWARD by no-circuit-level proxy
- Resolver: introduced (but seems incomplete) RES_EXPIRE=F/M/R to expire resover cache
- Resolver: modified to expire DNS-RR cache on memory by the TTL
- Resolver: enabled binding DNS resolver port with SRCIF=Host:Port:dns <URL:
http://www.delegate.org/mail-lists/delegate-en/04842>
- Screeing: rejecting clients lightly with SCREEN=reject <URL:
http://www.delegate.org/mail-lists/delegate/14443>
- Using DGROOT="${STARTDIR}/DGROOT" if the directory exists
- Defining timeout of connection cache with TIMEOUT=cc:T
- Suppressed "VStr overflow" message when invoked on a host with long long name
- Fixed SEGV on unexpected date format string
- Become multi-thread safer (MOUNT, fclose, Strdup)
- Closing /dev/null on restart by HUP
- Closing the file descriptor for localtime() on restart by HUP
- Disabling multiple incomming ports as -Q80/off,-Q443/off ...
--------------------------------------------------------------------------
SITE: <URL:
ftp://ftp.delegate.org/pub/DeleGate/>
FILE: delegate9.9.8.tar.gz
DATE: May 12 14:44 JST 2014
TAR-SIZE: 8591360 bytes
TAR-MD5: 106d8dac767dd0840689e58b50aa101c
PUBLIC-KEY:
http://www.delegate.org/rsa-pubkey.pem
SRCSIGN=9.9.8:20140512144458+0900:cf698c21f61a8af3
TAR-MD5-SIGN:
HA8YLifvJsnAAtg0qjHgo5sHakysPiY1LdxL+uHB4pigFjW+vWQuIhZddYy2gjBVRXIw64Zj
DwQoQ3jTQnQjFlgk7xz/MOdF/8ucp4QTpsLg86/og7JNYfsTSU60NA6UkSTr4UDNYXyhDyh+
MdJXdGXyAEDZYzDbTWHS8HiyT98=
Cheers,
Yutaka
--
9 9 Yutaka Sato <
[email protected]>
http://delegate.org/y.sato/
( ~ ) National Institute of Advanced Industrial Science and Technology
_< >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller