d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

1. Add IPv6 portrange restriction code (-U flag) to passive().

Browse Source 
2. Add portrange restriction code (for both v4 and v6) to the EPSV
processing stuff.
This commit is contained in:
Nick Sayer 2000-05-25 19:30:18 +00:00
parent a68f8b580f
commit 2db39860cf
1 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
libexec/ftpd/ftpd.c
View File

@ -2345,6 +2345,16 @@ passive()
goto pasv_error;
}
#endif
#ifdef IPV6_PORTRANGE
if (ctrl_addr.su_family == AF_INET6) {
int on = restricted_data_ports ? IPV6_PORTRANGE_HIGH
: IPV6_PORTRANGE_DEFAULT;
if (setsockopt(pdata, IPPROTO_IPV6, IPV6_PORTRANGE,
(char *)&on, sizeof(on)) < 0)
goto pasv_error;
}
#endif
pasv_addr = ctrl_addr;
pasv_addr.su_port = 0;
@ -2438,6 +2448,27 @@ long_passive(cmd, pf)
pasv_addr.su_port = 0;
len = pasv_addr.su_len;
#ifdef IP_PORTRANGE
if (ctrl_addr.su_family == AF_INET) {
int on = restricted_data_ports ? IP_PORTRANGE_HIGH
: IP_PORTRANGE_DEFAULT;
if (setsockopt(pdata, IPPROTO_IP, IP_PORTRANGE,
(char *)&on, sizeof(on)) < 0)
goto pasv_error;
}
#endif
#ifdef IPV6_PORTRANGE
if (ctrl_addr.su_family == AF_INET6) {
int on = restricted_data_ports ? IPV6_PORTRANGE_HIGH
: IPV6_PORTRANGE_DEFAULT;
if (setsockopt(pdata, IPPROTO_IPV6, IPV6_PORTRANGE,
(char *)&on, sizeof(on)) < 0)
goto pasv_error;
}
#endif
if (bind(pdata, (struct sockaddr *)&pasv_addr, len) < 0)
goto pasv_error;