Dear DeleGate users, I inform you of the new release of DeleGate available as follows: -------------------------------------------------------------------------- DeleGate/9.0.3 -- added Skype brocker, encrypted config., extended CHARSET conv., etc. In this release, the SSL-tunnel on a HTTP proxy has become safer by disconnecting when non-SSL packets are detected, configuration data has become safer by getting encrypted, and a lot of minor bugs were fixed. - introduced encrypted configuration <URL:http://www.delegate.org/delegate/Manual.htm?EncryptedConf> - introduced selecting DNS server based on domain <URL:http://www.delegate.org/delegate/Manual.htm?RESOLV> - modified to disconnect SSLtunnel when non-SSL packets are detected - introduced HTTP redirection/substition of error response message - introduced default "/favicon.ico" when acting as origin/proxy server - modified WebDAV methods to be permitted by default - enabled relaying OOB on Telnet,tcprelay,SOCKS,SockMux - fix for freezing on Win32 -------------------------------------------------------------------------- SITE: ftp://ftp.delegate.org/pub/DeleGate/alpha/ FILE: delegate9.0.3.tar.{gz,bz2} DATE: Jul 26 07:25 JST 2005 TAR-SIZE: 5038080 bytes TAR-MD5: bd2f1f7f9f927e407571cd4b91c64e1f PUBLIC-KEY: http://www.delegate.org/rsa-pubkey.pem TAR-MD5-SIGN: 0RKo4d3VdajErxPlxHDDdil9Cxfme2OK7BX7D3VYUsQQbY7v1IB61Nip2xHK7TUYDRiJB0Gp bcDgMiJ9qfnKw0HW8QOF6MLKLClOplT9PaZ/EdkZBUfjoTGExesG3u0fPJPPdYa+adwsUIH4 ndWeyByHNNPBWeguxcQe3SNTAsk= [NEW] * HTTP: introduced "onerror" MountOption to redirect/substitute error resp. * crypt: added encrypted script as +=encrypted.cdh + crypt: added special users "sslway" and "config" into "-dgauth@admin" + crypt: added getting passphrase by DGAuth user "sslway" + Resolvy: added RESOLV=dns:x.x.x.x:{192.*,*.local} + genreral: retrieve env. ver. param. DG_ADMIN in prior to ADMIN + CHARSET: added conversion from 2bytes UTF-8 + CHARSET: added conversion to/from JISX0212 in 7bits with "ESC$(D" + CHARSET: added JISX0212 conv. among {Shift_JIS,EUC-JP and utf-8} + CHARSET: added conversion of {SJIS,EUC} HALF WIDTH KANA to UTF-8 + CHARSET: improved guessing of non-JP codes + CHARSET: introduced -dC option for debugging character conversion * CHARSET/HTTP: introduced "DeleGate-Control-SVCC" cookie + CHARSET/HTTP: added hinting CCX's in-charset by Content-Type:charset + CHARSET/HTTP: added rewriting charset=xxx for application/x-javascript + CHARSET_HTTP: added treat <?XML ... encoding=charset> as HTTP-EQUIV + HTTP: supported HTTPCONF=add-rhead for origin data (gateway) + MOUNT: enabled MOUNT="//* //xxx.*" + MOUNT: extended the size of URICONV set tag/attributes to 64bits + MOUNT/HTTP: introduced "expires=T" MountOption + IMAP: enabled AUTHORIZER for IMAP, for AUTHENTICATE/LOGIN + auth: enabled AUTHORIZER="-list{u1,u2,...}" without password + auth: introduced AUTHORIZER=auth"(mappedUser)" like "-none(anon)" + FTP: added FEAT response {MDTM,SIZE,EPSV,EPORT} + SOCKS: enabled access restriction before peeking request + SockMux: introduced "CONNECT+DATA" and "CONNECTED+DATA" packet + SockMux: supported relaying OOB over SockMux on BSD + Telnet: added OOB detection on OS without poll() (like MacOSX) + Telnet: supported relaying OOB over tcprelay and Telnet + NNTP/HTTP: introduced MHGWCONF=hide:From:from1,from2,... + NNTP/HTTP: introduced hiding info./message for "anonymous" user + MOUNT/HTTP: enabled "builtin:icons/ysato/..." as rURL in MOUNT + VStr: added dumping the conent of the buffer which caused overflow [CHANGE] * SSLtunnel: introduced disconnection when non-SSL packet is detected * HTTP: added WevDAV methods to default HTTPCONF=methods * HTTP: added MOUNT="/favicon.ico builtin:... onerror" by default + HTTP: modified min. leng. of warning for long request line 256->1024 + HTTP: modified to automatic downloading codemap for CHARSET={Japanese} + HTTP: modified not to convert 304 to 200 for image,video + HTTP: modified to copy charset in HTTP-EQUIV to Content-Type head with guess + general: enlarged the size of buffer for printed -Pports + general: modified the truncation of too long client name (>70) + general: modified to put the copy of Notify-Mail into LOGFILE + Resolvy: modified to use cached "unknown" when acting as a DNS proxy + Resolvy: modified not to retry unknown name as a DNS proxy + MOUNT/HTTP: modified not to put port-number for rURL "///x moved" + Telnet: modified to force relay Timing-Mark before Data-Mark * Telnet: modified to relay by a single process & single thread [FIX] + SSLway: fixed using SSLway both in FSV and FCL at a time (9.0.1) + Resolvy: fixed not to search SRV record without RESOLV=dns (9.0.0) + Resolvy: fixed gatewaying hosts.Dom to DNS for DNSCONF=domain:Dom (9.0.0) + Resolvy: fixed SEGV on relaying empty SOA name (9.0.0) + general: fixed SEGV on strchr(NULL,) in SRCIF=*:N:tcpbound (9.0.0) + auth: fixed to enable Digest authentication without SERVER=dguath (8.8.1) + general: enabled REJECT for proxy-Telnet,etc. before login (8.4.0) + general: fixed SEGV on +=http://server/... (8.0.5) + HTTP/CFI: fixed not to make broken response by gzip+FTOCL MountOption + general: fixed recursive Finish/signal processing during Finish + SSLway: fixed to enable STLS="fcl,{sslway -cert X:path}" + porting/SSLway: fixed dynamic linking of SSL on FreeBSD * porting/Win32: fixed not to wait3 child on select error (not to freeze) + porting/Win32: fixed to try receive pid from child only once + porting/Win32: coped with CFI+external-filter for HTTP on Win32 + porting/SunOS: coped with complation errors on Solaris2.X + porting/IPv6: fixed judgement of IPv6 address with "%scope" on BSD + porting/IPv6: fixed IPv6 address respresentation for little endien + porting/NNTP: fixed spool for non-standard port NNTP on Win32 + porting/FTP: fixed FTP EPSV/EPRT port number on little endian + porting/Telnet: fixed disconnection on OOB over Telnet/SockMux on BSD + CHARSET: fixed EUC / Shift_JIS distinguish for "Matsui" + CHARSET: fixed UTF-8 to UTF-8 conversion + CHARSET: fixed UTF-8 to Shift_JIS conversion + CHARSET: fixed to distinguish unknown charset from abbrev. JIS code name * CHARSET/HTTP: fixed not to rewrite charset= if no conversion is done + CHARSET/HTTP: fixed not to remove charset in HTTP-EQUIV with CHARSET=guess + IPv6: fixed address matching for both IPv4+IPv6 client + SSLtunnel: fixed not to break SSLtunnel by non-half-dup on SSL ALERT + MOUNT/SWF: fixed stopping in Compressed SWF (with URICONV=where:any) + HTTP: fixed IMG anchor in the CONNECT method error message + HTTP: fixed to do URL-encode reserved char. in multi-byte char. + HTTP: fixed suffix matching + auth: fixed to recognize AUTHORIZER="{a1,a2}" as MOUNT option + NNTP/HTTP: fixed "$N" as an article number (Nth before the last) + NNTP/HTTP fixed to put error on unknown-Mssage-ID or auth. error + IMAP: fixed not to disconnect server on LOGIN failure Cheers, Yutaka -- D G Yutaka Sato <pfqcabdyi.ml@delegate.org> http://delegate.org/y.sato/ ( - ) National Institute of Advanced Industrial Science and Technology _< >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan Do the more with the less -- B. Fuller