Bump version to 0.12.3-1~wheezy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian-wheezy

Bump version to 0.12.3

Merge branch 'develop'

Change logging to be more informative

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Update release in docs

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add debug section in docs

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Fixes in docs/conf.py to comply with synnefo

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Bump version to 0.12.2-1~wheezy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian-wheezy

Bump version to 0.12.2

Merge branch 'develop'

Print eui64 too while printing clients

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

ra: Set O=1 in periodic RA too

..so that rs responses (RA) and periodic ra are identical. Otherwise
some OSes seem to lose already obtained DNS configuration after
receiving an RA with O flag unset.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

dhcp6: return if no IPv6 network attached to tap

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add doc section

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Bump version to 0.12.1-1~wheezy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian-wheezy

Bump version to 0.12.1

Merge branch 'develop'

Provide DNS Search List in DHCH6_Reply

In case of an IPv6 only VM we have to serve a Domain Search List
so that Windows VM can find the kms server by issuing:

nslookup -type=srv _vlmcs._tcp

An extra config option in ipv6 section is added; domains
This is a list of search domains included in DHCP6_Reply.
Since we validate it with force_list() there is no need for a
trailing comma.

This info could be passed in RAs but DNSSL options is not currently
supported by scapy's inet6.py.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Bump version to 0.12.0-1~wheezy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian-wheezy

Bump version to 0.12.0

Merge branch 'develop'

Introduce a helper script to analyze tcpdumps

1) # tcpdump -i tap10 -vvv -w tcpdump.pcap to save capture in a tmp file
2) # python analyze_pcap.py tcpdump.pcap to see on-liner logs
3) # python analyze_pcap.py tcpdump.pcap -n 14 to see a packet's details

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Support ra-stateless IPv6 configuration

This means that IPv6 will be auto-configured but DNS info
will be obtained via DHCPv6 requests.

With other words our router advertisements have the "O" flag set
and we add another handler that serves DHCPv6 requests by
passing DNS info.

Use a separate NFQUEUE to mangle the DHCPv6 traffic. Add another
ferm rule to achieve that.

This is done because Windows do not support RFC 6101:

http://tools.ietf.org/search/rfc6106
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5757980a-5983-4efc-a5f3-27687b90fe41/does-win7-or-w2k8-server-support-rfc-6106?forum=ipv6

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Bump version to 0.11.8-1~wheezy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian-wheezy

Bump version to 0.11.8

Merge branch 'develop'

Allow binding files without IP entry

This is needed for NIC that obtain only IPv6.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Bump version to 0.11.7-1~wheezy

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian-wheezy

Merge branch 'debian-develop' into debian-wheezy

Bump version to 0.11.7

Merge branch 'develop'

Conflicts:
version

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Change source format to quilt

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Require python-nfqueue > 0.4-3

This way will not install python-nfqueue from wheezy
but our custom 0.4+physindev-1 which support get_physindev.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Some pylint fixes

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Support nfqueue of squeeze and wheezy

Support both callback function signatures.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Bump version to 0.11.6next

Bump version to 0.11.6-1~wheezy

Signed-off-by: Christos Stavrakakis <cstavr@grnet.gr>

Merge branch 'master' into debian-wheezy

Bump version to 0.11.6

Use devflow

* add devflow.conf
* add base version file

Bump new upstream version

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'master' into debian

Move ferm to Suggests

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Use devflow

* add devflow.conf
* add base version file

Revert "Change nameservers in nfdhcpd.conf"

This reverts commit be1030abdbce3fb12eb9682c7260b55c31786fa2.

All IPv4 and IPv6 examples should use the documentation/test
ranges, see
https://tools.ietf.org/html/rfc5737 and
https://tools.ietf.org/html/rfc3849.

Conflicts:
nfdhcpd.conf

Signed-off-by: Vangelis Koukis <vkoukis@grnet.gr>

Merge branch 'snf-master' into snf-debian

One socket per client and few logging fixes

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

process_pending(num) depending on nfqueue

dhcp - process_pending(5000)
rs - process_pending(10)
ns - process_pending(10)

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Minor changes in logging and process_pending(10)

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add handler for SIGUSR1 to show current state

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add logrotate file

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Use start-stop-daemon istead of start_daemon

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add logrotate file

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Change RotatingFileHAndler to WatchedFileHandler

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Change id before becoming a daemon

This will create a logfile with proper permitions and the RotatingFileHandler
will not produce any error when bytes exceed maxBytes.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Fix init script, look for correct process title

Fix the init script to look for the daemon name inside
the process title instead of the python interpreter, now
that python-setproctitle is in use.

Merge branch 'master' into debian

Only set executable name with python-setproctitle

Cannot set individual values for arguments using python-setproctitle.
See https://code.google.com/p/py-setproctitle/issues/detail?id=23&can=1.

Merge branch 'master' into debian

Add python-setproctitle dependency

Change process title to simplify 'ps' display

Use python-setproctitle to change the process title
of the running daemon. Make it appear as a native executable
to simplify administration.

Bump version 0.11.2

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'snf-master' into snf-debian

Fix a bug related to capng_update()

We need to update CAP_NET_RAW, CAP_NET_ADMIN separetly.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Nice logging

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Fix two minor typos in debug messages

Fix bug that causes nfdhcpd to freeze

nfdhcpd opens a socket during init. socket.send() blocks in case
SO_SNDBUF is full. This might happen when packages are pushed to
buffer but never consumed (e.g. VM is shuting down).

To fix this we use non-blocking send with MSG_DONTWAIT and catch
the error when the resource is not available.

In order to empty the socket buffer we close the socket and re-open it.
To this end we need CAP_NET_RAW capability otherwise operation
(socket.socket()) is not permitted.

Add various logging messages (during client creation, opening a
socket, etc.)

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Merge branch 'snf-master' into snf-debian

Fix two more logs

Fix bug in log msg

Improve log msgs

Add umask inside daemon context

Merge branch 'snf-master' into snf-debian

Add try-except in DaemonContext.open()

It catches locking exceptions.

Signed-off-by: Dimitris Aragriorgs <dimara@grnet.gr>

Replace killproc with start-stop-daemon

killproc removes only the pidfile (not the lockfile). python daemon
implementation needs either no file or both a lock and a pidfile to be
present.

Signed-off-by: Dimitris Aragriorgs <dimara@grnet.gr>

Bump version 0.11

Signed-off-by: Dimitris Aragriorgs <dimara@grnet.gr>

Merge branch 'snf-master' into snf-debian

Remove rm -f pidfile

If exists a locking timeout it generated.

Signed-off-by: Dimitris Aragriorgs <dimara@grnet.gr>

Fix previous commit concerning pidfile

Signed-off-by: Dimitris Aragriorgs <dimara@grnet.gr>

Catch IPy exceptions for invalid networks/subnets

Signed-off-by: Stratos Psomadakis <psomas@grnet.gr>

Remove stale pid lock file

Signed-off-by: Dimitris Aragriorgs <dimara@grnet.gr>

In case of make_ll64 fails return

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add try: except: in places of possible exceptions

pkt.lladdr
ns.lladdr
sendp

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Refactor nfdhcpd to support get_physindev()

If get_physindev is supported in nfqueue then the clients are indexed
by their tap ifindex. If not then clients are indexed by their macs.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add nice debug messages for nfdhcpd clients

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add ferm dependency

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Remove iptables from init scripts

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Change ferm

Mangle packets comming from tap+ and prv+ devices

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Reapply option for serving domain

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Remove mac2eui64 and refactor debian dir

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Change debian/changelog

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add debug option

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

init.d changes

We manage mangle rules when starting/stoping nfdhcpd

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Change nfdhcpd.ferm to support bridged clients

Mangle packets comming from all interfaces and not only from taps

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>