{"push_id":1400278598,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"9223336a88bc065348d0ce37621bbf2b1087ba0e","before":"dd6714ae0a47a9401898ccc0dd7079f58ba29901","commits":[{"sha":"fc30dc5f20d455242ed8489fb1a99446287ba9cb","author":{"name":"Selva Nair","email":"3db6b7b9bb3f0bee60ffce6d0096279e226737fa@gmail.com"},"message":"Support --block-outside-dns on multiple tunnels\n\nv2: Simplify the \"add sublayer\" code.\n\nCurrently each instance of openvpn adds WFP filters into an independent\nsublayer. As a block in one sublayer can over-ride a permit in another,\nthis causes all DNS traffic to block when --block-outside-dns is used\nin multiple tunnels.\n\nFix using a common sublayer for adding firewall rules (filters) from all\ninstances of openvpn and interactive service.\n- The sublayer is added in a persistent session so that it could be\n  accessed from multiple sessions.\n- The sublayer is identified by a fixed UUID defined in block_dns.c\n  shared between openvpn.exe and openvpnserv.exe.\n- Permit filters for tun/tap interfaces are added with higher priority\n  than filters that block all DNS traffic. This is not strictly\n  necessary as WFP assigns higher priority to specific filters over generic\n  ones, but it may be safer not to rely on that feature.\n- All filters are added in dynamic sessions as before. They get\n  automatically removed when the process exits. The sublayer will,\n  however, persist until reboot.\n\nResolves Trac 718\nTested on Windows 7, 10 with/without interactive service\n\nSigned-off-by: Selva Nair <selva.nair@gmail.com>\nAcked-by: Gert Doering <gert@greenie.muc.de>\nMessage-Id: <1474085439-28766-1-git-send-email-selva.nair@gmail.com>\nURL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg12465.html\nSigned-off-by: Gert Doering <gert@greenie.muc.de>","distinct":true,"url":"https://api.github.com/repos/OpenVPN/openvpn/commits/fc30dc5f20d455242ed8489fb1a99446287ba9cb"},{"sha":"9223336a88bc065348d0ce37621bbf2b1087ba0e","author":{"name":"Steffan Karger","email":"d5576ac4f6f538cbcfd39f98b986aaae3ae1a040@karger.me"},"message":"Fix builds on compilers without anonymous union support\n\nThe \"Don't dereference type-punned pointers\" patch introduced an anonymous\nunion, which older compilers do not support (or refuse to support when\n-std=c99 is defined).  Add a configure check, and some wrapper defines to\nrepair builds on those compilers.\n\nSigned-off-by: Steffan Karger <steffan@karger.me>\nAcked-by: Gert Doering <gert@greenie.muc.de>\nMessage-Id: <1479060203-4472-1-git-send-email-steffan@karger.me>\nURL: http://www.mail-archive.com/search?l=mid&q=1479060203-4472-1-git-send-email-steffan@karger.me\nSigned-off-by: Gert Doering <gert@greenie.muc.de>","distinct":true,"url":"https://api.github.com/repos/OpenVPN/openvpn/commits/9223336a88bc065348d0ce37621bbf2b1087ba0e"}]}
{"actor":{"display_login":"cron2"}}