$Id: CREDITS,v 1.31 2003/05/23 16:15:45 crowland Exp crowland $ Thanks to the following people who offered testing and bug fixes/suggestions. I apologize if I've forgotten anyone. (No particular order on this list either): Jeff Johnson - Initial tester. Recommended ipfwadm addition. Ted Serreyn - Initial tester and bug reports. Les Fenison - Reported problems with logging of ignored hosts. Dave Andersen - FreeBSD testing. ipfw syntax for configuration file. Anonymous - HPUX testing and compile flags. Superuser - Lots of suggestions and general discussions... Timothy Luoma - NeXT Step fixes/bug testing/various suggestions and a really nice NeXTStep software archive (ftp.peak.org)!! Marcus Butler - Sharing ideas, suggestions and testing. Forrest Aldrich - FreeBSD testing and comments. Drew Levandoski - HPUX testing and compile flags. Yaron Yanay - Additional UDP ports to exclude in advanced mode. Andrew Raphael - Binary and source RPMs. Samuli Karkkainen - Helped in debugging Advanced mode problem with SSH connection failures to Windows boxes. System Administrator - Slackware testing and confirmation. - Linux Alpha testing. Alex Petrov - Lots of comments concerning code clean-up and general efficiency recommendations. Dmitry Prokhorov - Patches to add $PORT$ token and fixes to install scripts. Rich Homolka - Reported problem with binding over port 61000 for advanced mode was due to ip masquerading feature in Linux kernels. Vesselin Atanasov - Patch to handle scan flooding attacks (not included in this version for other reasons, but I thank him for sending them in). Lukasz Zalubski - Mirrored tools to Europe. Matthias Lohmann - Solaris porting and testing. Don Bindner - Found typo in UDP attack logging that logged it as TCP attack. Jon Coyle - VERY helpful in testing for SCO. Also made up HTML pages and man pages. I should be paying him!! Brian D. Winters - Pointed out some compile errors on various Linux platforms and submitted fixes. Also made suggestions for areas of code cleanup. Jeremy T. Bouse - Made Debian packages of Sentry as well as Debain init scripts and install scripts (not included yet). Jeremy Hinegardner - Testing on SGI platforms. Densin Roy. - Suggested adding $PORT$ macro to command execution. - NetBSD testing. Dr. Stefan Demetrescu - Discussions concerning the smart-verify timeout (or lack thereof) and recommendations on future additions and fixes. Sean Amon - Solaris testing and fixes. Eric Hines - Solaris testing and fixes. David LaPorte - Alpha Linux testing. Sent in route drop command for new RedHat 6.0 systems (-reject flag). Joshua Chamas - Solaris testing. Tom Briglia - Solaris testing. Roger Books - Solaris testing and fixes. Steven Walker - RedHat init scripts and RPMs. Dominic J. Eidson - AIX testing. Christopher P. Lindsey - Patch to get version 0.90 and below to work in stealth modes on older Linux systems/systems with oddball tcpip.h files. Also helped in testing and debugging. Found bug in .ignore processing that wouldn't skip commented out lines. Contributed script to automatically setup ignore file on system startup by parsing ifconfig. Found bug in ignore functions that would sometimes mis-compare IP's (also lead me to find similar bug in isBlocked function). Adrian - Submitted bug report for 2.2.9 kernels with respect to possible UDP struct change (dest vs. u_dport). Thomas Molina - Made binary and source RPMs for 0.90 of PortSentry. Steve Marple - Reported bug in commenting out of .ignore file entries. Graham Allan - Sent in compile options for Digital OSF Unix. Sent in route flags for same. Ian Quick - Sent in a fix for the ipchains rule to insert blocks into filter list correctly. Reuven Gevaryahu - Found a nasty bug where if you setup to ignore either a tcp or a udp event an attacker could activate the detector, cause the blocked file to be written to and then activate the side you *wanted* the blocking to occur on and have Sentry ignore them. A big thanks for finding this! Jayakrishnan Krishnan - Reported the problem on the latest build not ignoring hosts in the .ignore file. Garth Brown - Also reported a problem with .blocked file mis-reading blocked hosts and submitted a fix. Morio Taneda - Submitted a *really cool* patch to use netlink with PortSentry. I'm sorry I didn't have time to implement this, but it is on my short list of fixes to put in after 1.0 is released. A big thanks for this!! Howard Arons - Suggested using LOCAL0 for possible syslog configuration in config.h file. Guido Guenther - Sent in bug fixes, Debian packages, comments, and many other contributions. Christophe Rolland - Wrote in to correct bug in .conf file where I watched first 1025 ports instead of first 1024. Now advanced modes will watch ports 1023 and below. Ralf Hildebrandt - Sent in route kill command for HPUX and fix for GCC under HPUX for Makefile. Graham Dunn - Sent in KILL_ROUTE string for ipf filters. Peter M. Allan - Found an increment error in the host state engine that could cause an error under certain configurations. Also contributed several fixes relating to function usage and cosmetics. Scott Catterton - Sent in new iptables support KILL_ROUTE command. Dino A Amato - Sent in Makefile strings for Irix Scott McCrory - Sent in common DDOS daemon ports Per Jönsson - Sent in changes to allow for ignoring networks/ports. Flower - Sent in request to disable DNS lookups. Paul T. Kooros - Sent in some code formatting issues that were resolved. Justin Pettit - Solaris fixes, proofreading, and lots of other stuff.