icanserve #5

prx · 2022-10-08T12:21:35Z

prx commented

2022-10-08 12:21:35 +00:00

Sorry for the huge commit, I forgot to do it while adding the changes.

prx added 2 commits 2022-10-08 12:21:35 +00:00

92e8239a50 iblock is now its own server. inetd is no longer required.

Some minor changes too:
* doas is called with flag "-n", this avoid blocking iblock if doas ismisconfigured.
* pfctl calls are run in separate fork process
* iblock listening port is now the better 2507 instead of already used by other softwares 666.
* Added a rc script to start iblock as daemon.

6b6bab5400 add mandatory message

prx commented

2022-10-08 12:24:22 +00:00

Poster

I'd like a review about zombie process if someone know how to check for such things, please.

prx added 1 commit 2022-10-08 19:16:39 +00:00

29a5701dee use signal to reap zombies, still WIP

prx commented

2022-10-08 19:19:16 +00:00

Poster

I added a signal handler to catch child process.
It seems to be called.
However, "pgrep iblock" still find new process at each loop.
Need someone better than me here to explain this behaviour.

I added a signal handler to catch child process. It seems to be called. However, "pgrep iblock" still find new process at each loop. Need someone better than me here to explain this behaviour.

prx added 1 commit 2022-10-08 19:40:38 +00:00

0662ac5bfa fix duplicate processes

prx commented

2022-10-08 19:42:31 +00:00

Poster

My bad, that weren't zombies. Just duplicated listening sockets remaining. My bad.
This should be ok now.

My bad, that weren't zombies. Just duplicated listening sockets remaining. My bad. This should be ok now.

prx added 1 commit 2022-10-08 19:48:39 +00:00

36e0e01553 rc done

prx commented

2022-10-09 12:00:07 +00:00

Poster

Currently, only ipv4 or ipv6 is supported, but not both at the same time.
WIP...

Currently, only ipv4 or ipv6 is supported, but not both at the same time. WIP...

prx added 2 commits 2022-10-12 19:43:51 +00:00

306c003b1b update rc : no reload

e364ce9780 listen on localhost, both ipv4 and ipv6 if available. Use kqueue to handle many connections

prx added 1 commit 2022-10-12 20:01:41 +00:00

0265627230 make sure table arg is considered

prx commented

2022-10-12 20:03:49 +00:00

Poster

That's it, I think I have finished to turn iblock to a server.
I'm curious how it handle stress of many attempts.
Please test :)

That's it, I think I have finished to turn iblock to a server. I'm curious how it handle stress of many attempts. Please test :)

prx added 1 commit 2023-05-12 10:10:45 +00:00

ba85c1dc9b change to avoid zombies

solene commented

2023-06-07 08:50:45 +00:00

I'd like to have a flag to choose the port on which iblock is listening.

Also, main() is very long, isn't it possible to split it into smaller functions?

I'd like to have a flag to choose the port on which iblock is listening. Also, `main()` is very long, isn't it possible to split it into smaller functions?

prx added 1 commit 2023-06-13 08:36:03 +00:00

493dac653d add -t and -p flags to specify table name and port

prx added 1 commit 2023-09-02 13:59:35 +00:00

fe6a3a32ae factorize \#1: server setup

prx added 5 commits 2023-09-03 13:45:34 +00:00

fc07398e49 factorize #2 : watch event + fix bug listening a bad file descriptor

b452300021 less verbose logs

3642040f5c factorize #3:ban + simpler runcmd

179f891484 update manpage for new flags availables

6cf21a6125 initial manpage. unfinished, I suck at manpages

prx commented

2023-09-03 17:27:07 +00:00