From 0a838de8adf3b06590e73cff6415275d9b1cd4fe Mon Sep 17 00:00:00 2001 From: james Date: Thu, 4 Sep 2008 20:35:09 +0000 Subject: Added --allow-pull-fqdn option which allows client to pull DNS names from server (rather than only IP address) for --ifconfig, --route, and --route-gateway. OpenVPN versions 2.1_rc7 and earlier allowed DNS names for these options to be pulled and translated to IP addresses by default. Now --allow-pull-fqdn will be explicitly required on the client to enable DNS-name-to-IP-address translation of pulled options. git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@3307 e7ae566f-a301-0410-adde-c780ea21d3b5 --- socket.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'socket.h') diff --git a/socket.h b/socket.h index 8eb768d..b111764 100644 --- a/socket.h +++ b/socket.h @@ -396,7 +396,10 @@ void link_socket_update_buffer_sizes (struct link_socket *ls, int rcvbuf, int sn #define OIA_IP 1 #define OIA_ERROR -1 int openvpn_inet_aton (const char *dotted_quad, struct in_addr *addr); + +/* integrity validation on pulled options */ bool ip_addr_dotted_quad_safe (const char *dotted_quad); +bool ip_or_dns_addr_safe (const char *dotted_quad, const bool allow_fqdn); socket_descriptor_t create_socket_tcp (void); -- cgit