vlmcsd-svn977-2016-07-13-Hotbird64

GNUmakefile

@@ -34,7 +34,7 @@ ifneq (,$(findstring darwin,$(TARGETPLATFORM)))
   UNIX := 1
 endif
 
-ifneq (,$(findstring androideabi,$(TARGETPLATFORM)))
+ifneq (,$(findstring android,$(TARGETPLATFORM)))
   ANDROID := 1
   UNIX := 1
   ELF := 1
@@ -139,6 +139,12 @@ ifeq ($(NOLIBS),1)
   NOLPTHREAD=1
 endif
 
+ifneq ($(NOLIBS),1)
+  ifeq ($(MINGW),1)
+    BASELDFLAGS += -lws2_32 -liphlpapi
+  endif
+endif 
+
 ifneq ($(NO_DNS),1)
   ifneq ($(ANDROID),1)
   ifneq ($(NOLRESOLV),1)
@@ -198,7 +204,7 @@ else
   STRIPFLAGS += -s
 endif
 
-LIBRARY_CFLAGS = -DSIMPLE_SOCKETS -DNO_TIMEOUT -DNO_SIGHUP -DNO_CL_PIDS -DNO_EXTENDED_PRODUCT_LIST -DNO_BASIC_PRODUCT_LIST -DNO_LOG -DNO_RANDOM_EPID -DNO_INI_FILE -DNO_INI_FILE -DNO_HELP -DNO_CUSTOM_INTERVALS -DNO_PID_FILE -DNO_USER_SWITCH -DNO_VERBOSE_LOG -DNO_LIMIT -DNO_VERSION_INFORMATION
+LIBRARY_CFLAGS = -DSIMPLE_SOCKETS -DNO_TIMEOUT -DNO_SIGHUP -DNO_CL_PIDS -DNO_EXTENDED_PRODUCT_LIST -DNO_BASIC_PRODUCT_LIST -DNO_LOG -DNO_RANDOM_EPID -DNO_INI_FILE -DNO_INI_FILE -DNO_HELP -DNO_CUSTOM_INTERVALS -DNO_PID_FILE -DNO_USER_SWITCH -DNO_VERBOSE_LOG -DNO_LIMIT -DNO_VERSION_INFORMATION -DNO_PRIVATE_IP_DETECT
 
 ifeq ($(FEATURES), embedded)
   BASECFLAGS += -DNO_HELP -DNO_USER_SWITCH -DNO_BASIC_PRODUCT_LIST -DNO_CUSTOM_INTERVALS -DNO_PID_FILE -DNO_VERBOSE_LOG -DNO_VERSION_INFORMATION
@@ -218,6 +224,10 @@ ifdef INI
   BASECFLAGS += -DINI_FILE=\"$(INI)\"
 endif
 
+ifeq ($(NO_GETIFADDRS), 1)
+  BASECFLAGS += -DNO_GETIFADDRS
+endif
+
 ifeq ($(THREADS), 1)
   BASECFLAGS += -DUSE_THREADS
 endif
@@ -278,9 +288,9 @@ $(MULTI_NAME): BASECFLAGS += -DMULTI_CALL_BINARY=1
 
 all: $(CLIENT_NAME) $(PROGRAM_NAME)
 
-ifdef CAT
+#ifdef CAT
   allmulti: $(CLIENT_NAME) $(PROGRAM_NAME) $(MULTI_NAME)
-endif
+#endif
 
 ifneq ($(strip $(VLMCSD_VERSION)),)
   BASECFLAGS += -DVERSION=\"$(VLMCSD_VERSION),\ built\ $(shell date -u '+%Y-%m-%d %H:%M:%S' | sed -e 's/ /\\ /g')\ UTC\" 
@@ -301,12 +311,12 @@ VLMCS_SRCS = vlmcs.c $(SRCS)
 VLMCS_OBJS = $(VLMCS_SRCS:.c=.o)
 
 MULTI_SRCS = vlmcsd.c vlmcs.c vlmcsdmulti.c $(SRCS)
-MULTI_OBJS = $(MULTI_SRCS:.c=.o)
+MULTI_OBJS = $(SRCS:.c=.o) vlmcsd-m.o vlmcs-m.o vlmcsdmulti-m.o
 
 DLL_SRCS = libkms.c $(SRCS)
 DLL_OBJS = $(DLL_SRCS:.c=.o)
 
-PDFDOCS = vlmcs.1.pdf vlmcsd.7.pdf vlmcsd.8.pdf vlmcsdmulti.1.pdf vlmcsd.ini.5.pdf
+PDFDOCS = vlmcs.1.pdf vlmcsd.7.pdf vlmcsd.8.pdf vlmcsdmulti.1.pdf vlmcsd.ini.5.pdf vlmcsd-floppy.7.pdf
 HTMLDOCS = $(PDFDOCS:.pdf=.html)
 UNIXDOCS = $(PDFDOCS:.pdf=.unix.txt)
 DOSDOCS = $(PDFDOCS:.pdf=.dos.txt)
@@ -315,11 +325,13 @@ ifneq ($(NO_DNS),1)
 
   VLMCS_SRCS += dns_srv.c
   MULTI_SRCS += dns_srv.c
+  MULTI_OBJS += dns_srv.o
 
 ifeq ($(DNS_PARSER),internal)
 ifneq ($(MINGW),1)
   VLMCS_SRCS += ns_parse.c ns_name.c
   MULTI_SRCS += ns_parse.c ns_name.c
+  MULTI_OBJS += ns_parse.o ns_name.o
   BASECFLAGS += "-DDNS_PARSER_INTERNAL"
 endif
 endif
@@ -330,6 +342,7 @@ ifeq ($(MSRPC),1)
   VLMCSD_SRCS += msrpc-server.c
   VLMCS_SRCS += msrpc-client.c
   MULTI_SRCS += msrpc-server.c msrpc-client.c
+  MULTI_OBJS += msrpc-server-m.o msrpc-client-m.o
   DLL_SRCS += msrpc-server.c
   BASECFLAGS += -DUSE_MSRPC -Wno-unknown-pragmas
   BASELDFLAGS += -lrpcrt4
@@ -337,9 +350,30 @@ else
   SRCS += network.c rpc.c  
 endif
 
+ifeq ($(GETIFADDRS),musl)
+ifneq ($(NO_GETIFADDRS),1)
+  BASECFLAGS += -DGETIFADDRS_MUSL
+  VLMCSD_SRCS += getifaddrs-musl.c
+  MULTI_SRCS += getifaddrs-musl.c
+  VLMCS_SRCS += getifaddrs-musl.c
+  DLL_SRCS += getifaddrs-musl.c
+  MULTI_OBJS += getifaddrs-musl.o
+endif
+endif
+
+ifeq ($(ANDROID),1)
+ifneq ($(NO_GETIFADDRS),1)
+  VLMCSD_SRCS += ifaddrs-android.c
+  MULTI_SRCS += ifaddrs-android.c
+  DLL_SRCS += ifaddrs-android.c
+  MULTI_OBJS += ifaddrs-android.o
+endif
+endif
+
 ifeq "$(WIN)" "1"
 	VLMCSD_SRCS += ntservice.c
 	MULTI_SRCS += ntservice.c
+	MULTI_OBJS += ntservice.o
 endif
 
 ifeq ($(CRYPTO), openssl_with_aes)
@@ -402,11 +436,27 @@ endif
 	@echo "$(COMPILER)	CC	$@ <- $<"
 	@$(CC) -x$(COMPILER_LANGUAGE) $(PLATFORMFLAGS) $(BASECFLAGS) $(CFLAGS) $(PLATFORMFLAGS) -c $<
   ifeq ($(DEPENDENCIES),1)
-	@echo "$(COMPILER)	DEP     $*.d <- $<"
+	@echo "$(COMPILER)	DEP	$*.d <- $<"
 	@$(CC) -x$(COMPILER_LANGUAGE) $(PLATFORMFLAGS) $(BASECFLAGS) $(CFLAGS) $(PLATFORMFLAGS) -MM -MF $*.d $<
   endif
   endif
 
+%-m.o: %.c
+  ifeq ($(VERBOSE),1)
+	$(CC) -x$(COMPILER_LANGUAGE) $(PLATFORMFLAGS) $(BASECFLAGS) $(CFLAGS) $(PLATFORMFLAGS) -o $@ -c $<
+  ifeq ($(DEPENDENCIES),1)
+	$(CC) -x$(COMPILER_LANGUAGE) $(PLATFORMFLAGS) $(BASECFLAGS) $(CFLAGS) $(PLATFORMFLAGS) -MM -MF $*.d $<
+  endif
+  else
+	@echo "$(COMPILER)	CC	$@ <- $<"
+	@$(CC) -x$(COMPILER_LANGUAGE) $(PLATFORMFLAGS) $(BASECFLAGS) $(CFLAGS) $(PLATFORMFLAGS) -o $@ -c $<
+  ifeq ($(DEPENDENCIES),1)
+	@echo "$(COMPILER)	DEP	$*.d <- $<"
+	@$(CC) -x$(COMPILER_LANGUAGE) $(PLATFORMFLAGS) $(BASECFLAGS) $(CFLAGS) $(PLATFORMFLAGS) -MM -MF $*.d $<
+  endif
+  endif
+
+
 ifdef CAT
   BUILDCOMMAND = cat $^ | $(CC) -x$(COMPILER_LANGUAGE) -o $@ -
   VLMCSD_PREREQUISITES = $(VLMCSD_SRCS)
@@ -516,6 +566,9 @@ alldocs : $(UNIXDOCS) $(HTMLDOCS) $(PDFDOCS) $(DOSDOCS)
 clean:
 	rm -f *.o *.d *_all.c libkms_all_*.c $(PROGRAM_NAME) $(MULTI_NAME) $(DLL_NAME) $(CLIENT_NAME) $(PDFDOCS) $(DOSDOCS) $(UNIXDOCS) $(HTMLDOCS) $(OBJ_NAME) $(A_NAME) *.a
 
+dnsclean:
+	rm -f dns_srv.o
+
 help:
 	@echo "Type"
 	@echo "    ${MAKE}          - to build $(PROGRAM_NAME) and $(CLIENT_NAME)"
@@ -591,7 +644,7 @@ help:
 	@echo "    -DNO_LIMIT                   Don't support limiting concurrent clients in $(PROGRAM_NAME)."
 	@echo "    -DNO_SIGHUP                  Don't support SIGHUP handling in $(PROGRAM_NAME)."
 	@echo "    -DNO_VERSION_INFORMATION     Don't support displaying version information in $(PROGRAM_NAME) and $(CLIENT_NAME). Removes -V option."
-	@echo "    -DENABLE_DEPRECATED_OPTIONS  Enable command line options that provide compatibility with previous versions of $(PROGRAM_NAME)."
+	@echo "    -DNO_PRIVATE_IP_DETECT       Don't support protection against clients with public IP addresses in $(PROGRAM_NAME)"	
 	@echo ""
 	@echo "Troubleshooting options"
 	@echo "    CAT=1                        Combine all sources in a single in-memory file and compile directly to target."
@@ -604,6 +657,8 @@ help:
 	@echo "    NO_TIMEOUT=1                 Do not set timeouts for sockets (for systems that don't support it)."
 	@echo "    CHILD_HANDLER=1              Install a handler for SIGCHLD (for systems that don't support SA_NOCLDWAIT)."
 	@echo "    NO_DNS=1                     Compile $(CLIENT_NAME) without support for detecting KMS servers via DNS."
+	@echo "    NO_GETIFADDRS=1              Compile $(PROGRAM_NAME) without using getifaddrs()."
+	@echo "    GETIFADDRS=musl              Compile $(PROGRAM_NAME) with its own implementation of getifaddrs() based on musl."
 	@echo "    DNS_PARSER=internal          Use $(CLIENT_NAME) internal DNS parsing routines. No effect on MingW (native Windows)."
 	@echo ""
 	@echo "Other useful CFLAGS"

config.h

@@ -82,26 +82,6 @@
 
 
 
-/*
- * -------------------------------
- * Backward compatibility
- * -------------------------------
- */
-
-
-#if !defined(ENABLE_DEPRECATED_OPTIONS)
-/*
- * comment out the following line if you want vlmcsd no to support command line options
- * that have been present in previous versions of vlmcsd and are now obsolete
- */
-
-//#define ENABLE_DEPRECATED_OPTIONS
-
-#endif // ENABLE_DEPRECATED_OPTIONS
-
-
-
-
 /*
  * ----------------------------------------------------------------------------------------
  * Troubleshooting options. Please note that disabling features may also help troubleshooting.
@@ -556,6 +536,19 @@
 
 
 
+#ifndef NO_PRIVATE_IP_DETECT
+/*
+ * Disables the ability to protect vlmcsd against KMS requests from public IP addresses.
+ * Removes -o from the command line.
+ */
+
+//#define NO_PRIVATE_IP_DETECT
+
+#endif // NO_PRIVATE_IP_DETECT
+
+
+
+
 #ifndef NO_SOCKETS
 /*
  * Disables standalone startup of vlmcsd. If you use this config directive, you must start vlmcsd from an internet
@@ -634,7 +627,6 @@
 
 
 
-
 /* Don't change anything BELOW this line */
 
 

floppy/.config-uClibc-ng

@@ -0,0 +1,254 @@
+#
+# Automatically generated file; DO NOT EDIT.
+# uClibc-ng 1.0.15 C Library Configuration
+#
+# TARGET_alpha is not set
+# TARGET_arc is not set
+# TARGET_arm is not set
+# TARGET_avr32 is not set
+# TARGET_bfin is not set
+# TARGET_c6x is not set
+# TARGET_cris is not set
+# TARGET_frv is not set
+# TARGET_h8300 is not set
+# TARGET_hppa is not set
+TARGET_i386=y
+# TARGET_ia64 is not set
+# TARGET_lm32 is not set
+# TARGET_m68k is not set
+# TARGET_metag is not set
+# TARGET_microblaze is not set
+# TARGET_mips is not set
+# TARGET_nios2 is not set
+# TARGET_or1k is not set
+# TARGET_powerpc is not set
+# TARGET_sh is not set
+# TARGET_sparc is not set
+# TARGET_x86_64 is not set
+# TARGET_xtensa is not set
+
+#
+# Target Architecture Features and Options
+#
+TARGET_ARCH="i386"
+FORCE_OPTIONS_FOR_ARCH=y
+# CONFIG_386 is not set
+CONFIG_486=y
+# CONFIG_586 is not set
+# CONFIG_686 is not set
+TARGET_SUBARCH="i486"
+
+#
+# Using ELF file format
+#
+ARCH_HAS_DEPRECATED_SYSCALLS=y
+ARCH_LITTLE_ENDIAN=y
+
+#
+# Using Little Endian
+#
+ARCH_HAS_MMU=y
+ARCH_USE_MMU=y
+UCLIBC_HAS_FLOATS=y
+UCLIBC_HAS_FPU=y
+DO_C99_MATH=y
+DO_XSI_MATH=y
+# UCLIBC_HAS_FENV is not set
+# UCLIBC_HAS_LONG_DOUBLE_MATH is not set
+KERNEL_HEADERS="/root/openadk/target_generic-x86_uclibc-ng/usr/include"
+HAVE_DOT_CONFIG=y
+
+#
+# General Library Settings
+#
+DOPIC=y
+ARCH_HAS_UCONTEXT=y
+HAVE_SHARED=y
+# FORCE_SHAREABLE_TEXT_SEGMENTS is not set
+LDSO_LDD_SUPPORT=y
+LDSO_CACHE_SUPPORT=y
+# LDSO_PRELOAD_ENV_SUPPORT is not set
+# LDSO_PRELOAD_FILE_SUPPORT is not set
+LDSO_BASE_FILENAME="ld.so"
+# LDSO_STANDALONE_SUPPORT is not set
+# LDSO_PRELINK_SUPPORT is not set
+# UCLIBC_STATIC_LDCONFIG is not set
+LDSO_RUNPATH=y
+LDSO_RUNPATH_OF_EXECUTABLE=y
+LDSO_SAFE_RUNPATH=y
+LDSO_SEARCH_INTERP_PATH=y
+LDSO_LD_LIBRARY_PATH=y
+LDSO_NO_CLEANUP=y
+UCLIBC_CTOR_DTOR=y
+# LDSO_GNU_HASH_SUPPORT is not set
+# HAS_NO_THREADS is not set
+UCLIBC_HAS_THREADS_NATIVE=y
+UCLIBC_HAS_THREADS=y
+UCLIBC_HAS_TLS=y
+PTHREADS_DEBUG_SUPPORT=y
+UCLIBC_HAS_SYSLOG=y
+UCLIBC_HAS_LFS=y
+MALLOC=y
+# MALLOC_SIMPLE is not set
+# MALLOC_STANDARD is not set
+MALLOC_GLIBC_COMPAT=y
+# UCLIBC_HAS_OBSTACK is not set
+UCLIBC_DYNAMIC_ATEXIT=y
+COMPAT_ATEXIT=y
+UCLIBC_HAS_UTMPX=y
+UCLIBC_HAS_UTMP=y
+UCLIBC_SUSV2_LEGACY=y
+UCLIBC_SUSV3_LEGACY=y
+UCLIBC_HAS_CONTEXT_FUNCS=y
+# UCLIBC_SUSV3_LEGACY_MACROS is not set
+UCLIBC_SUSV4_LEGACY=y
+# UCLIBC_STRICT_HEADERS is not set
+# UCLIBC_HAS_STUBS is not set
+UCLIBC_HAS_SHADOW=y
+UCLIBC_HAS_PROGRAM_INVOCATION_NAME=y
+UCLIBC_HAS___PROGNAME=y
+UCLIBC_HAS_PTY=y
+ASSUME_DEVPTS=y
+UNIX98PTY_ONLY=y
+UCLIBC_HAS_GETPT=y
+UCLIBC_HAS_LIBUTIL=y
+UCLIBC_HAS_TM_EXTENSIONS=y
+UCLIBC_HAS_TZ_CACHING=y
+UCLIBC_HAS_TZ_FILE=y
+UCLIBC_HAS_TZ_FILE_READ_MANY=y
+UCLIBC_TZ_FILE_PATH="/etc/TZ"
+UCLIBC_FALLBACK_TO_ETC_LOCALTIME=y
+
+#
+# Advanced Library Settings
+#
+UCLIBC_PWD_BUFFER_SIZE=256
+UCLIBC_GRP_BUFFER_SIZE=256
+
+#
+# Support various families of functions
+#
+UCLIBC_LINUX_MODULE_26=y
+# UCLIBC_LINUX_MODULE_24 is not set
+UCLIBC_LINUX_SPECIFIC=y
+UCLIBC_HAS_GNU_ERROR=y
+UCLIBC_BSD_SPECIFIC=y
+UCLIBC_HAS_BSD_ERR=y
+UCLIBC_HAS_OBSOLETE_BSD_SIGNAL=y
+# UCLIBC_HAS_OBSOLETE_SYSV_SIGNAL is not set
+# UCLIBC_NTP_LEGACY is not set
+UCLIBC_SV4_DEPRECATED=y
+UCLIBC_HAS_REALTIME=y
+UCLIBC_HAS_ADVANCED_REALTIME=y
+UCLIBC_HAS_EPOLL=y
+UCLIBC_HAS_XATTR=y
+# UCLIBC_HAS_PROFILING is not set
+UCLIBC_HAS_CRYPT_IMPL=y
+UCLIBC_HAS_SHA256_CRYPT_IMPL=y
+# UCLIBC_HAS_SHA512_CRYPT_IMPL is not set
+UCLIBC_HAS_CRYPT=y
+UCLIBC_HAS_NETWORK_SUPPORT=y
+UCLIBC_HAS_SOCKET=y
+UCLIBC_HAS_IPV4=y
+UCLIBC_HAS_IPV6=y
+# UCLIBC_HAS_RPC is not set
+UCLIBC_USE_NETLINK=y
+UCLIBC_SUPPORT_AI_ADDRCONFIG=y
+UCLIBC_HAS_BSD_RES_CLOSE=y
+UCLIBC_HAS_COMPAT_RES_STATE=y
+# UCLIBC_HAS_EXTRA_COMPAT_RES_STATE is not set
+UCLIBC_HAS_RESOLVER_SUPPORT=y
+UCLIBC_HAS_LIBRESOLV_STUB=y
+UCLIBC_HAS_LIBNSL_STUB=y
+
+#
+# String and Stdio Support
+#
+UCLIBC_HAS_STRING_GENERIC_OPT=y
+UCLIBC_HAS_STRING_ARCH_OPT=y
+UCLIBC_HAS_STDIO_FUTEXES=y
+UCLIBC_HAS_CTYPE_TABLES=y
+UCLIBC_HAS_CTYPE_SIGNED=y
+# UCLIBC_HAS_CTYPE_UNSAFE is not set
+UCLIBC_HAS_CTYPE_CHECKED=y
+# UCLIBC_HAS_CTYPE_ENFORCED is not set
+UCLIBC_HAS_WCHAR=y
+# UCLIBC_HAS_LOCALE is not set
+UCLIBC_HAS_HEXADECIMAL_FLOATS=y
+UCLIBC_HAS_GLIBC_CUSTOM_PRINTF=y
+UCLIBC_PRINTF_SCANF_POSITIONAL_ARGS=9
+# UCLIBC_HAS_STDIO_BUFSIZ_256 is not set
+# UCLIBC_HAS_STDIO_BUFSIZ_512 is not set
+# UCLIBC_HAS_STDIO_BUFSIZ_1024 is not set
+# UCLIBC_HAS_STDIO_BUFSIZ_2048 is not set
+UCLIBC_HAS_STDIO_BUFSIZ_4096=y
+# UCLIBC_HAS_STDIO_BUFSIZ_8192 is not set
+UCLIBC_HAS_STDIO_BUILTIN_BUFFER_NONE=y
+# UCLIBC_HAS_STDIO_BUILTIN_BUFFER_4 is not set
+# UCLIBC_HAS_STDIO_BUILTIN_BUFFER_8 is not set
+# UCLIBC_HAS_STDIO_SHUTDOWN_ON_ABORT is not set
+UCLIBC_HAS_STDIO_GETC_MACRO=y
+UCLIBC_HAS_STDIO_PUTC_MACRO=y
+UCLIBC_HAS_STDIO_AUTO_RW_TRANSITION=y
+# UCLIBC_HAS_FOPEN_LARGEFILE_MODE is not set
+UCLIBC_HAS_FOPEN_EXCLUSIVE_MODE=y
+# UCLIBC_HAS_FOPEN_CLOSEEXEC_MODE is not set
+UCLIBC_HAS_GLIBC_CUSTOM_STREAMS=y
+UCLIBC_HAS_PRINTF_M_SPEC=y
+UCLIBC_HAS_ERRNO_MESSAGES=y
+# UCLIBC_HAS_SYS_ERRLIST is not set
+UCLIBC_HAS_SIGNUM_MESSAGES=y
+# UCLIBC_HAS_SYS_SIGLIST is not set
+UCLIBC_HAS_GNU_GETOPT=y
+UCLIBC_HAS_GETOPT_LONG=y
+UCLIBC_HAS_GNU_GETSUBOPT=y
+UCLIBC_HAS_ARGP=y
+
+#
+# Big and Tall
+#
+UCLIBC_HAS_REGEX=y
+# UCLIBC_HAS_REGEX_OLD is not set
+UCLIBC_HAS_FNMATCH=y
+# UCLIBC_HAS_FNMATCH_OLD is not set
+UCLIBC_HAS_WORDEXP=y
+UCLIBC_HAS_NFTW=y
+UCLIBC_HAS_FTW=y
+UCLIBC_HAS_FTS=y
+UCLIBC_HAS_GLOB=y
+UCLIBC_HAS_GNU_GLOB=y
+
+#
+# Library Installation Options
+#
+RUNTIME_PREFIX="/"
+DEVEL_PREFIX="/usr/"
+MULTILIB_DIR="lib"
+HARDWIRED_ABSPATH=y
+
+#
+# Security options
+#
+# UCLIBC_BUILD_PIE is not set
+UCLIBC_HAS_ARC4RANDOM=y
+# ARC4RANDOM_USES_NODEV is not set
+# UCLIBC_HAS_SSP is not set
+UCLIBC_BUILD_RELRO=y
+UCLIBC_BUILD_NOW=y
+UCLIBC_BUILD_NOEXECSTACK=y
+
+#
+# Development/debugging options
+#
+CROSS_COMPILER_PREFIX=""
+UCLIBC_EXTRA_CFLAGS=""
+# DODEBUG is not set
+# DOSTRIP is not set
+# DOASSERTS is not set
+# SUPPORT_LD_DEBUG is not set
+# SUPPORT_LD_DEBUG_EARLY is not set
+# UCLIBC_MALLOC_DEBUGGING is not set
+# UCLIBC_HAS_BACKTRACE is not set
+WARNINGS="-Wall"
+# EXTRA_WARNINGS is not set
+# DOMULTI is not set

getifaddrs-musl.c

@@ -0,0 +1,263 @@
+#define _GNU_SOURCE
+#include <errno.h>
+#include <string.h>
+#include <stdlib.h>
+#include <unistd.h>
+#include "ifaddrs-musl.h"
+//#include <syscall.h>
+#include <net/if.h>
+#include <netinet/in.h>
+#include "netlink-musl.h"
+
+#define IFADDRS_HASH_SIZE 64
+
+/* getifaddrs() reports hardware addresses with PF_PACKET that implies
+ * struct sockaddr_ll.  But e.g. Infiniband socket address length is
+ * longer than sockaddr_ll.ssl_addr[8] can hold. Use this hack struct
+ * to extend ssl_addr - callers should be able to still use it. */
+struct sockaddr_ll_hack {
+	unsigned short sll_family, sll_protocol;
+	int sll_ifindex;
+	unsigned short sll_hatype;
+	unsigned char sll_pkttype, sll_halen;
+	unsigned char sll_addr[24];
+};
+
+union sockany {
+	struct sockaddr sa;
+	struct sockaddr_ll_hack ll;
+	struct sockaddr_in v4;
+	struct sockaddr_in6 v6;
+};
+
+struct ifaddrs_storage {
+	struct ifaddrs ifa;
+	struct ifaddrs_storage *hash_next;
+	union sockany addr, netmask, ifu;
+	unsigned int index;
+	char name[IFNAMSIZ+1];
+};
+
+struct ifaddrs_ctx {
+	struct ifaddrs_storage *first;
+	struct ifaddrs_storage *last;
+	struct ifaddrs_storage *hash[IFADDRS_HASH_SIZE];
+};
+
+void freeifaddrs(struct ifaddrs *ifp)
+{
+	struct ifaddrs *n;
+	while (ifp) {
+		n = ifp->ifa_next;
+		free(ifp);
+		ifp = n;
+	}
+}
+
+static int __netlink_enumerate(int fd, unsigned int seq, int type, int af,
+	int (*cb)(void *ctx, struct nlmsghdr *h), void *ctx)
+{
+	struct nlmsghdr *h;
+	union {
+		uint8_t buf[8192];
+		struct {
+			struct nlmsghdr nlh;
+			struct rtgenmsg g;
+		} req;
+		struct nlmsghdr reply;
+	} u;
+	int r, ret;
+
+	memset(&u.req, 0, sizeof(u.req));
+	u.req.nlh.nlmsg_len = sizeof(u.req);
+	u.req.nlh.nlmsg_type = type;
+	u.req.nlh.nlmsg_flags = NLM_F_DUMP | NLM_F_REQUEST;
+	u.req.nlh.nlmsg_seq = seq;
+	u.req.g.rtgen_family = af;
+	r = send(fd, &u.req, sizeof(u.req), 0);
+	if (r < 0) return r;
+
+	while (1) {
+		r = recv(fd, u.buf, sizeof(u.buf), MSG_DONTWAIT);
+		if (r <= 0) return -1;
+		for (h = &u.reply; NLMSG_OK(h, (void*)&u.buf[r]); h = NLMSG_NEXT(h)) {
+			if (h->nlmsg_type == NLMSG_DONE) return 0;
+			if (h->nlmsg_type == NLMSG_ERROR) return -1;
+			ret = cb(ctx, h);
+			if (ret) return ret;
+		}
+	}
+}
+
+int __rtnetlink_enumerate(int link_af, int addr_af, int (*cb)(void *ctx, struct nlmsghdr *h), void *ctx)
+{
+	int fd, r;
+
+	fd = socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
+	if (fd < 0) return -1;
+	r = __netlink_enumerate(fd, 1, RTM_GETLINK, link_af, cb, ctx);
+	if (!r) r = __netlink_enumerate(fd, 2, RTM_GETADDR, addr_af, cb, ctx);
+	close(fd);
+	return r;
+}
+
+static void copy_addr(struct sockaddr **r, int af, union sockany *sa, void *addr, size_t addrlen, int ifindex)
+{
+	uint8_t *dst;
+	int len;
+
+	switch (af) {
+	case AF_INET:
+		dst = (uint8_t*) &sa->v4.sin_addr;
+		len = 4;
+		break;
+	case AF_INET6:
+		dst = (uint8_t*) &sa->v6.sin6_addr;
+		len = 16;
+		if (IN6_IS_ADDR_LINKLOCAL(addr) || IN6_IS_ADDR_MC_LINKLOCAL(addr))
+			sa->v6.sin6_scope_id = ifindex;
+		break;
+	default:
+		return;
+	}
+	if (addrlen < len) return;
+	sa->sa.sa_family = af;
+	memcpy(dst, addr, len);
+	*r = &sa->sa;
+}
+
+static void gen_netmask(struct sockaddr **r, int af, union sockany *sa, int prefixlen)
+{
+	uint8_t addr[16] = {0};
+	int i;
+
+	if (prefixlen > 8*sizeof(addr)) prefixlen = 8*sizeof(addr);
+	i = prefixlen / 8;
+	memset(addr, 0xff, i);
+	if (i < sizeof(addr)) addr[i++] = 0xff << (8 - (prefixlen % 8));
+	copy_addr(r, af, sa, addr, sizeof(addr), 0);
+}
+
+static void copy_lladdr(struct sockaddr **r, union sockany *sa, void *addr, size_t addrlen, int ifindex, unsigned short hatype)
+{
+	if (addrlen > sizeof(sa->ll.sll_addr)) return;
+	sa->ll.sll_family = AF_PACKET;
+	sa->ll.sll_ifindex = ifindex;
+	sa->ll.sll_hatype = hatype;
+	sa->ll.sll_halen = addrlen;
+	memcpy(sa->ll.sll_addr, addr, addrlen);
+	*r = &sa->sa;
+}
+
+static int netlink_msg_to_ifaddr(void *pctx, struct nlmsghdr *h)
+{
+	struct ifaddrs_ctx *ctx = pctx;
+	struct ifaddrs_storage *ifs, *ifs0;
+	struct ifinfomsg *ifi = NLMSG_DATA(h);
+	struct ifaddrmsg *ifa = NLMSG_DATA(h);
+	struct rtattr *rta;
+	int stats_len = 0;
+
+	if (h->nlmsg_type == RTM_NEWLINK) {
+		for (rta = NLMSG_RTA(h, sizeof(*ifi)); NLMSG_RTAOK(rta, h); rta = RTA_NEXT(rta)) {
+			if (rta->rta_type != IFLA_STATS) continue;
+			stats_len = RTA_DATALEN(rta);
+			break;
+		}
+	} else {
+		for (ifs0 = ctx->hash[ifa->ifa_index % IFADDRS_HASH_SIZE]; ifs0; ifs0 = ifs0->hash_next)
+			if (ifs0->index == ifa->ifa_index)
+				break;
+		if (!ifs0) return 0;
+	}
+
+	ifs = calloc(1, sizeof(struct ifaddrs_storage) + stats_len);
+	if (ifs == 0) return -1;
+
+	if (h->nlmsg_type == RTM_NEWLINK) {
+		ifs->index = ifi->ifi_index;
+		ifs->ifa.ifa_flags = ifi->ifi_flags;
+
+		for (rta = NLMSG_RTA(h, sizeof(*ifi)); NLMSG_RTAOK(rta, h); rta = RTA_NEXT(rta)) {
+			switch (rta->rta_type) {
+			case IFLA_IFNAME:
+				if (RTA_DATALEN(rta) < sizeof(ifs->name)) {
+					memcpy(ifs->name, RTA_DATA(rta), RTA_DATALEN(rta));
+					ifs->ifa.ifa_name = ifs->name;
+				}
+				break;
+			case IFLA_ADDRESS:
+				copy_lladdr(&ifs->ifa.ifa_addr, &ifs->addr, RTA_DATA(rta), RTA_DATALEN(rta), ifi->ifi_index, ifi->ifi_type);
+				break;
+			case IFLA_BROADCAST:
+				copy_lladdr(&ifs->ifa.ifa_broadaddr, &ifs->ifu, RTA_DATA(rta), RTA_DATALEN(rta), ifi->ifi_index, ifi->ifi_type);
+				break;
+			case IFLA_STATS:
+				ifs->ifa.ifa_data = (void*)(ifs+1);
+				memcpy(ifs->ifa.ifa_data, RTA_DATA(rta), RTA_DATALEN(rta));
+				break;
+			}
+		}
+		if (ifs->ifa.ifa_name) {
+			unsigned int bucket = ifs->index % IFADDRS_HASH_SIZE;
+			ifs->hash_next = ctx->hash[bucket];
+			ctx->hash[bucket] = ifs;
+		}
+	} else {
+		ifs->ifa.ifa_name = ifs0->ifa.ifa_name;
+		ifs->ifa.ifa_flags = ifs0->ifa.ifa_flags;
+		for (rta = NLMSG_RTA(h, sizeof(*ifa)); NLMSG_RTAOK(rta, h); rta = RTA_NEXT(rta)) {
+			switch (rta->rta_type) {
+			case IFA_ADDRESS:
+				/* If ifa_addr is already set we, received an IFA_LOCAL before
+				 * so treat this as destination address */
+				if (ifs->ifa.ifa_addr)
+					copy_addr(&ifs->ifa.ifa_dstaddr, ifa->ifa_family, &ifs->ifu, RTA_DATA(rta), RTA_DATALEN(rta), ifa->ifa_index);
+				else
+					copy_addr(&ifs->ifa.ifa_addr, ifa->ifa_family, &ifs->addr, RTA_DATA(rta), RTA_DATALEN(rta), ifa->ifa_index);
+				break;
+			case IFA_BROADCAST:
+				copy_addr(&ifs->ifa.ifa_broadaddr, ifa->ifa_family, &ifs->ifu, RTA_DATA(rta), RTA_DATALEN(rta), ifa->ifa_index);
+				break;
+			case IFA_LOCAL:
+				/* If ifa_addr is set and we get IFA_LOCAL, assume we have
+				 * a point-to-point network. Move address to correct field. */
+				if (ifs->ifa.ifa_addr) {
+					ifs->ifu = ifs->addr;
+					ifs->ifa.ifa_dstaddr = &ifs->ifu.sa;
+					memset(&ifs->addr, 0, sizeof(ifs->addr));
+				}
+				copy_addr(&ifs->ifa.ifa_addr, ifa->ifa_family, &ifs->addr, RTA_DATA(rta), RTA_DATALEN(rta), ifa->ifa_index);
+				break;
+			case IFA_LABEL:
+				if (RTA_DATALEN(rta) < sizeof(ifs->name)) {
+					memcpy(ifs->name, RTA_DATA(rta), RTA_DATALEN(rta));
+					ifs->ifa.ifa_name = ifs->name;
+				}
+				break;
+			}
+		}
+		if (ifs->ifa.ifa_addr)
+			gen_netmask(&ifs->ifa.ifa_netmask, ifa->ifa_family, &ifs->netmask, ifa->ifa_prefixlen);
+	}
+
+	if (ifs->ifa.ifa_name) {
+		if (!ctx->first) ctx->first = ifs;
+		if (ctx->last) ctx->last->ifa.ifa_next = &ifs->ifa;
+		ctx->last = ifs;
+	} else {
+		free(ifs);
+	}
+	return 0;
+}
+
+int getifaddrs(struct ifaddrs **ifap)
+{
+	struct ifaddrs_ctx _ctx, *ctx = &_ctx;
+	int r;
+	memset(ctx, 0, sizeof *ctx);
+	r = __rtnetlink_enumerate(AF_UNSPEC, AF_UNSPEC, netlink_msg_to_ifaddr, ctx);
+	if (r == 0) *ifap = &ctx->first->ifa;
+	else freeifaddrs(&ctx->first->ifa);
+	return r;
+}

ifaddrs-android.c

@@ -0,0 +1,600 @@
+/*
+Copyright (c) 2013, Kenneth MacKay
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+ * Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+*/
+
+#include "ifaddrs-android.h"
+
+#include <string.h>
+#include <stdlib.h>
+#include <errno.h>
+#include <unistd.h>
+#include <sys/socket.h>
+#include <net/if_arp.h>
+#include <netinet/in.h>
+#include <linux/netlink.h>
+#include <linux/rtnetlink.h>
+
+typedef struct NetlinkList
+{
+    struct NetlinkList *m_next;
+    struct nlmsghdr *m_data;
+    unsigned int m_size;
+} NetlinkList;
+
+static int netlink_socket(void)
+{
+    int l_socket = socket(PF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
+    if(l_socket < 0)
+    {
+        return -1;
+    }
+    
+    struct sockaddr_nl l_addr;
+    memset(&l_addr, 0, sizeof(l_addr));
+    l_addr.nl_family = AF_NETLINK;
+    if(bind(l_socket, (struct sockaddr *)&l_addr, sizeof(l_addr)) < 0)
+    {
+        close(l_socket);
+        return -1;
+    }
+    
+    return l_socket;
+}
+
+static int netlink_send(int p_socket, int p_request)
+{
+    char l_buffer[NLMSG_ALIGN(sizeof(struct nlmsghdr)) + NLMSG_ALIGN(sizeof(struct rtgenmsg))];
+    memset(l_buffer, 0, sizeof(l_buffer));
+    struct nlmsghdr *l_hdr = (struct nlmsghdr *)l_buffer;
+    struct rtgenmsg *l_msg = (struct rtgenmsg *)NLMSG_DATA(l_hdr);
+    
+    l_hdr->nlmsg_len = NLMSG_LENGTH(sizeof(*l_msg));
+    l_hdr->nlmsg_type = p_request;
+    l_hdr->nlmsg_flags = NLM_F_ROOT | NLM_F_MATCH | NLM_F_REQUEST;
+    l_hdr->nlmsg_pid = 0;
+    l_hdr->nlmsg_seq = p_socket;
+    l_msg->rtgen_family = AF_UNSPEC;
+    
+    struct sockaddr_nl l_addr;
+    memset(&l_addr, 0, sizeof(l_addr));
+    l_addr.nl_family = AF_NETLINK;
+    return (sendto(p_socket, l_hdr, l_hdr->nlmsg_len, 0, (struct sockaddr *)&l_addr, sizeof(l_addr)));
+}
+
+static int netlink_recv(int p_socket, void *p_buffer, size_t p_len)
+{
+    struct msghdr l_msg;
+    struct iovec l_iov = { p_buffer, p_len };
+    struct sockaddr_nl l_addr;
+    //int l_result;
+
+    for(;;)
+    {
+        l_msg.msg_name = (void *)&l_addr;
+        l_msg.msg_namelen = sizeof(l_addr);
+        l_msg.msg_iov = &l_iov;
+        l_msg.msg_iovlen = 1;
+        l_msg.msg_control = NULL;
+        l_msg.msg_controllen = 0;
+        l_msg.msg_flags = 0;
+        int l_result = recvmsg(p_socket, &l_msg, 0);
+        
+        if(l_result < 0)
+        {
+            if(errno == EINTR)
+            {
+                continue;
+            }
+            return -2;
+        }
+        
+        if(l_msg.msg_flags & MSG_TRUNC)
+        { // buffer was too small
+            return -1;
+        }
+        return l_result;
+    }
+}
+
+static struct nlmsghdr *getNetlinkResponse(int p_socket, int *p_size, int *p_done)
+{
+    size_t l_size = 4096;
+    void *l_buffer = NULL;
+    
+    for(;;)
+    {
+        free(l_buffer);
+        l_buffer = malloc(l_size);
+        
+        int l_read = netlink_recv(p_socket, l_buffer, l_size);
+        *p_size = l_read;
+        if(l_read == -2)
+        {
+            free(l_buffer);
+            return NULL;
+        }
+        if(l_read >= 0)
+        {
+            pid_t l_pid = getpid();
+            struct nlmsghdr *l_hdr;
+            for(l_hdr = (struct nlmsghdr *)l_buffer; NLMSG_OK(l_hdr, (unsigned int)l_read); l_hdr = (struct nlmsghdr *)NLMSG_NEXT(l_hdr, l_read))
+            {
+                if((pid_t)l_hdr->nlmsg_pid != l_pid || (int)l_hdr->nlmsg_seq != p_socket)
+                {
+                    continue;
+                }
+                
+                if(l_hdr->nlmsg_type == NLMSG_DONE)
+                {
+                    *p_done = 1;
+                    break;
+                }
+                
+                if(l_hdr->nlmsg_type == NLMSG_ERROR)
+                {
+                    free(l_buffer);
+                    return NULL;
+                }
+            }
+            return l_buffer;
+        }
+        
+        l_size *= 2;
+    }
+}
+
+static NetlinkList *newListItem(struct nlmsghdr *p_data, unsigned int p_size)
+{
+    NetlinkList *l_item = malloc(sizeof(NetlinkList));
+    l_item->m_next = NULL;
+    l_item->m_data = p_data;
+    l_item->m_size = p_size;
+    return l_item;
+}
+
+static void freeResultList(NetlinkList *p_list)
+{
+    NetlinkList *l_cur;
+    while(p_list)
+    {
+        l_cur = p_list;
+        p_list = p_list->m_next;
+        free(l_cur->m_data);
+        free(l_cur);
+    }
+}
+
+static NetlinkList *getResultList(int p_socket, int p_request)
+{
+    if(netlink_send(p_socket, p_request) < 0)
+    {
+        return NULL;
+    }
+
+    NetlinkList *l_list = NULL;
+    NetlinkList *l_end = NULL;
+    int l_size;
+    int l_done = 0;
+    while(!l_done)
+    {
+        struct nlmsghdr *l_hdr = getNetlinkResponse(p_socket, &l_size, &l_done);
+        if(!l_hdr)
+        { // error
+            freeResultList(l_list);
+            return NULL;
+        }
+        
+        NetlinkList *l_item = newListItem(l_hdr, l_size);
+        if(!l_list)
+        {
+            l_list = l_item;
+        }
+        else
+        {
+            l_end->m_next = l_item;
+        }
+        l_end = l_item;
+    }
+    return l_list;
+}
+
+static size_t maxSize(size_t a, size_t b)
+{
+    return (a > b ? a : b);
+}
+
+static size_t calcAddrLen(sa_family_t p_family, int p_dataSize)
+{
+    switch(p_family)
+    {
+        case AF_INET:
+            return sizeof(struct sockaddr_in);
+        case AF_INET6:
+            return sizeof(struct sockaddr_in6);
+        case AF_PACKET:
+            return maxSize(sizeof(struct sockaddr_ll), offsetof(struct sockaddr_ll, sll_addr) + p_dataSize);
+        default:
+            return maxSize(sizeof(struct sockaddr), offsetof(struct sockaddr, sa_data) + p_dataSize);
+    }
+}
+
+static void makeSockaddr(sa_family_t p_family, struct sockaddr *p_dest, void *p_data, size_t p_size)
+{
+    switch(p_family)
+    {
+        case AF_INET:
+            memcpy(&((struct sockaddr_in*)p_dest)->sin_addr, p_data, p_size);
+            break;
+        case AF_INET6:
+            memcpy(&((struct sockaddr_in6*)p_dest)->sin6_addr, p_data, p_size);
+            break;
+        case AF_PACKET:
+            memcpy(((struct sockaddr_ll*)p_dest)->sll_addr, p_data, p_size);
+            ((struct sockaddr_ll*)p_dest)->sll_halen = p_size;
+            break;
+        default:
+            memcpy(p_dest->sa_data, p_data, p_size);
+            break;
+    }
+    p_dest->sa_family = p_family;
+}
+
+static void addToEnd(struct ifaddrs **p_resultList, struct ifaddrs *p_entry)
+{
+    if(!*p_resultList)
+    {
+        *p_resultList = p_entry;
+    }
+    else
+    {
+        struct ifaddrs *l_cur = *p_resultList;
+        while(l_cur->ifa_next)
+        {
+            l_cur = l_cur->ifa_next;
+        }
+        l_cur->ifa_next = p_entry;
+    }
+}
+
+static void interpretLink(struct nlmsghdr *p_hdr, struct ifaddrs **p_links, struct ifaddrs **p_resultList)
+{
+    struct ifinfomsg *l_info = (struct ifinfomsg *)NLMSG_DATA(p_hdr);
+
+    size_t l_nameSize = 0;
+    size_t l_addrSize = 0;
+    size_t l_dataSize = 0;
+    
+    size_t l_rtaSize = NLMSG_PAYLOAD(p_hdr, sizeof(struct ifinfomsg));
+    struct rtattr *l_rta;
+    for(l_rta = (struct rtattr *)(((char *)l_info) + NLMSG_ALIGN(sizeof(struct ifinfomsg))); RTA_OK(l_rta, l_rtaSize); l_rta = RTA_NEXT(l_rta, l_rtaSize))
+    {
+        //void *l_rtaData = RTA_DATA(l_rta);
+        size_t l_rtaDataSize = RTA_PAYLOAD(l_rta);
+        switch(l_rta->rta_type)
+        {
+            case IFLA_ADDRESS:
+            case IFLA_BROADCAST:
+                l_addrSize += NLMSG_ALIGN(calcAddrLen(AF_PACKET, l_rtaDataSize));
+                break;
+            case IFLA_IFNAME:
+                l_nameSize += NLMSG_ALIGN(l_rtaSize + 1);
+                break;
+            case IFLA_STATS:
+                l_dataSize += NLMSG_ALIGN(l_rtaSize);
+                break;
+            default:
+                break;
+        }
+    }
+    
+    struct ifaddrs *l_entry = malloc(sizeof(struct ifaddrs) + l_nameSize + l_addrSize + l_dataSize);
+    memset(l_entry, 0, sizeof(struct ifaddrs));
+    l_entry->ifa_name = "";
+    
+    char *l_name = ((char *)l_entry) + sizeof(struct ifaddrs);
+    char *l_addr = l_name + l_nameSize;
+    char *l_data = l_addr + l_addrSize;
+    
+    l_entry->ifa_flags = l_info->ifi_flags;
+    
+    l_rtaSize = NLMSG_PAYLOAD(p_hdr, sizeof(struct ifinfomsg));
+    for(l_rta = (struct rtattr *)(((char *)l_info) + NLMSG_ALIGN(sizeof(struct ifinfomsg))); RTA_OK(l_rta, l_rtaSize); l_rta = RTA_NEXT(l_rta, l_rtaSize))
+    {
+        void *l_rtaData = RTA_DATA(l_rta);
+        size_t l_rtaDataSize = RTA_PAYLOAD(l_rta);
+        switch(l_rta->rta_type)
+        {
+            case IFLA_ADDRESS:
+            case IFLA_BROADCAST:
+            {
+                size_t l_addrLen = calcAddrLen(AF_PACKET, l_rtaDataSize);
+                makeSockaddr(AF_PACKET, (struct sockaddr *)l_addr, l_rtaData, l_rtaDataSize);
+                ((struct sockaddr_ll *)l_addr)->sll_ifindex = l_info->ifi_index;
+                ((struct sockaddr_ll *)l_addr)->sll_hatype = l_info->ifi_type;
+                if(l_rta->rta_type == IFLA_ADDRESS)
+                {
+                    l_entry->ifa_addr = (struct sockaddr *)l_addr;
+                }
+                else
+                {
+                    l_entry->ifa_broadaddr = (struct sockaddr *)l_addr;
+                }
+                l_addr += NLMSG_ALIGN(l_addrLen);
+                break;
+            }
+            case IFLA_IFNAME:
+                strncpy(l_name, l_rtaData, l_rtaDataSize);
+                l_name[l_rtaDataSize] = '\0';
+                l_entry->ifa_name = l_name;
+                break;
+            case IFLA_STATS:
+                memcpy(l_data, l_rtaData, l_rtaDataSize);
+                l_entry->ifa_data = l_data;
+                break;
+            default:
+                break;
+        }
+    }
+    
+    addToEnd(p_resultList, l_entry);
+    p_links[l_info->ifi_index - 1] = l_entry;
+}
+
+static void interpretAddr(struct nlmsghdr *p_hdr, struct ifaddrs **p_links, struct ifaddrs **p_resultList)
+{
+    struct ifaddrmsg *l_info = (struct ifaddrmsg *)NLMSG_DATA(p_hdr);
+
+    size_t l_nameSize = 0;
+    size_t l_addrSize = 0;
+    
+    int l_addedNetmask = 0;
+    
+    size_t l_rtaSize = NLMSG_PAYLOAD(p_hdr, sizeof(struct ifaddrmsg));
+    struct rtattr *l_rta;
+    for(l_rta = (struct rtattr *)(((char *)l_info) + NLMSG_ALIGN(sizeof(struct ifaddrmsg))); RTA_OK(l_rta, l_rtaSize); l_rta = RTA_NEXT(l_rta, l_rtaSize))
+    {
+        //void *l_rtaData = RTA_DATA(l_rta);
+        size_t l_rtaDataSize = RTA_PAYLOAD(l_rta);
+        if(l_info->ifa_family == AF_PACKET)
+        {
+            continue;
+        }
+        
+        switch(l_rta->rta_type)
+        {
+            case IFA_ADDRESS:
+            case IFA_LOCAL:
+                if((l_info->ifa_family == AF_INET || l_info->ifa_family == AF_INET6) && !l_addedNetmask)
+                { // make room for netmask
+                    l_addrSize += NLMSG_ALIGN(calcAddrLen(l_info->ifa_family, l_rtaDataSize));
+                    l_addedNetmask = 1;
+                }
+            case IFA_BROADCAST:
+                l_addrSize += NLMSG_ALIGN(calcAddrLen(l_info->ifa_family, l_rtaDataSize));
+                break;
+            case IFA_LABEL:
+                l_nameSize += NLMSG_ALIGN(l_rtaSize + 1);
+                break;
+            default:
+                break;
+        }
+    }
+    
+    struct ifaddrs *l_entry = malloc(sizeof(struct ifaddrs) + l_nameSize + l_addrSize);
+    memset(l_entry, 0, sizeof(struct ifaddrs));
+    l_entry->ifa_name = p_links[l_info->ifa_index - 1]->ifa_name;
+    
+    char *l_name = ((char *)l_entry) + sizeof(struct ifaddrs);
+    char *l_addr = l_name + l_nameSize;
+    
+    l_entry->ifa_flags = l_info->ifa_flags | p_links[l_info->ifa_index - 1]->ifa_flags;
+    
+    l_rtaSize = NLMSG_PAYLOAD(p_hdr, sizeof(struct ifaddrmsg));
+    for(l_rta = (struct rtattr *)(((char *)l_info) + NLMSG_ALIGN(sizeof(struct ifaddrmsg))); RTA_OK(l_rta, l_rtaSize); l_rta = RTA_NEXT(l_rta, l_rtaSize))
+    {
+        void *l_rtaData = RTA_DATA(l_rta);
+        size_t l_rtaDataSize = RTA_PAYLOAD(l_rta);
+        switch(l_rta->rta_type)
+        {
+            case IFA_ADDRESS:
+            case IFA_BROADCAST:
+            case IFA_LOCAL:
+            {
+                size_t l_addrLen = calcAddrLen(l_info->ifa_family, l_rtaDataSize);
+                makeSockaddr(l_info->ifa_family, (struct sockaddr *)l_addr, l_rtaData, l_rtaDataSize);
+                if(l_info->ifa_family == AF_INET6)
+                {
+                    if(IN6_IS_ADDR_LINKLOCAL((struct in6_addr *)l_rtaData) || IN6_IS_ADDR_MC_LINKLOCAL((struct in6_addr *)l_rtaData))
+                    {
+                        ((struct sockaddr_in6 *)l_addr)->sin6_scope_id = l_info->ifa_index;
+                    }
+                }
+                
+                if(l_rta->rta_type == IFA_ADDRESS)
+                { // apparently in a point-to-point network IFA_ADDRESS contains the dest address and IFA_LOCAL contains the local address
+                    if(l_entry->ifa_addr)
+                    {
+                        l_entry->ifa_dstaddr = (struct sockaddr *)l_addr;
+                    }
+                    else
+                    {
+                        l_entry->ifa_addr = (struct sockaddr *)l_addr;
+                    }
+                }
+                else if(l_rta->rta_type == IFA_LOCAL)
+                {
+                    if(l_entry->ifa_addr)
+                    {
+                        l_entry->ifa_dstaddr = l_entry->ifa_addr;
+                    }
+                    l_entry->ifa_addr = (struct sockaddr *)l_addr;
+                }
+                else
+                {
+                    l_entry->ifa_broadaddr = (struct sockaddr *)l_addr;
+                }
+                l_addr += NLMSG_ALIGN(l_addrLen);
+                break;
+            }
+            case IFA_LABEL:
+                strncpy(l_name, l_rtaData, l_rtaDataSize);
+                l_name[l_rtaDataSize] = '\0';
+                l_entry->ifa_name = l_name;
+                break;
+            default:
+                break;
+        }
+    }
+    
+    if(l_entry->ifa_addr && (l_entry->ifa_addr->sa_family == AF_INET || l_entry->ifa_addr->sa_family == AF_INET6))
+    {
+        unsigned l_maxPrefix = (l_entry->ifa_addr->sa_family == AF_INET ? 32 : 128);
+        unsigned l_prefix = (l_info->ifa_prefixlen > l_maxPrefix ? l_maxPrefix : l_info->ifa_prefixlen);
+        char l_mask[16] = {0};
+        unsigned i;
+        for(i=0; i<(l_prefix/8); ++i)
+        {
+            l_mask[i] = 0xff;
+        }
+        l_mask[i] = 0xff << (8 - (l_prefix % 8));
+        
+        makeSockaddr(l_entry->ifa_addr->sa_family, (struct sockaddr *)l_addr, l_mask, l_maxPrefix / 8);
+        l_entry->ifa_netmask = (struct sockaddr *)l_addr;
+    }
+    
+    addToEnd(p_resultList, l_entry);
+}
+
+static void interpret(int p_socket, NetlinkList *p_netlinkList, struct ifaddrs **p_links, struct ifaddrs **p_resultList)
+{
+    pid_t l_pid = getpid();
+    for(; p_netlinkList; p_netlinkList = p_netlinkList->m_next)
+    {
+        unsigned int l_nlsize = p_netlinkList->m_size;
+        struct nlmsghdr *l_hdr;
+        for(l_hdr = p_netlinkList->m_data; NLMSG_OK(l_hdr, l_nlsize); l_hdr = NLMSG_NEXT(l_hdr, l_nlsize))
+        {
+            if((pid_t)l_hdr->nlmsg_pid != l_pid || (int)l_hdr->nlmsg_seq != p_socket)
+            {
+                continue;
+            }
+            
+            if(l_hdr->nlmsg_type == NLMSG_DONE)
+            {
+                break;
+            }
+            
+            if(l_hdr->nlmsg_type == RTM_NEWLINK)
+            {
+                interpretLink(l_hdr, p_links, p_resultList);
+            }
+            else if(l_hdr->nlmsg_type == RTM_NEWADDR)
+            {
+                interpretAddr(l_hdr, p_links, p_resultList);
+            }
+        }
+    }
+}
+
+static unsigned countLinks(int p_socket, NetlinkList *p_netlinkList)
+{
+    unsigned l_links = 0;
+    pid_t l_pid = getpid();
+    for(; p_netlinkList; p_netlinkList = p_netlinkList->m_next)
+    {
+        unsigned int l_nlsize = p_netlinkList->m_size;
+        struct nlmsghdr *l_hdr;
+        for(l_hdr = p_netlinkList->m_data; NLMSG_OK(l_hdr, l_nlsize); l_hdr = NLMSG_NEXT(l_hdr, l_nlsize))
+        {
+            if((pid_t)l_hdr->nlmsg_pid != l_pid || (int)l_hdr->nlmsg_seq != p_socket)
+            {
+                continue;
+            }
+            
+            if(l_hdr->nlmsg_type == NLMSG_DONE)
+            {
+                break;
+            }
+            
+            if(l_hdr->nlmsg_type == RTM_NEWLINK)
+            {
+                ++l_links;
+            }
+        }
+    }
+    
+    return l_links;
+}
+
+int getifaddrs(struct ifaddrs **ifap)
+{
+    if(!ifap)
+    {
+        return -1;
+    }
+    *ifap = NULL;
+    
+    int l_socket = netlink_socket();
+    if(l_socket < 0)
+    {
+        return -1;
+    }
+    
+    NetlinkList *l_linkResults = getResultList(l_socket, RTM_GETLINK);
+    if(!l_linkResults)
+    {
+        close(l_socket);
+        return -1;
+    }
+    
+    NetlinkList *l_addrResults = getResultList(l_socket, RTM_GETADDR);
+    if(!l_addrResults)
+    {
+        close(l_socket);
+        freeResultList(l_linkResults);
+        return -1;
+    }
+    
+    unsigned l_numLinks = countLinks(l_socket, l_linkResults) + countLinks(l_socket, l_addrResults);
+    struct ifaddrs *l_links[l_numLinks];
+    memset(l_links, 0, l_numLinks * sizeof(struct ifaddrs *));
+    
+    interpret(l_socket, l_linkResults, l_links, ifap);
+    interpret(l_socket, l_addrResults, l_links, ifap);
+
+    freeResultList(l_linkResults);
+    freeResultList(l_addrResults);
+    close(l_socket);
+    return 0;
+}
+
+void freeifaddrs(struct ifaddrs *ifa)
+{
+    struct ifaddrs *l_cur;
+    while(ifa)
+    {
+        l_cur = ifa;
+        ifa = ifa->ifa_next;
+        free(l_cur);
+    }
+}

ifaddrs-android.h

@@ -0,0 +1,58 @@
+/*
+ * Copyright (c) 1995, 1999
+ *	Berkeley Software Design, Inc.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *
+ * THIS SOFTWARE IS PROVIDED BY Berkeley Software Design, Inc. ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL Berkeley Software Design, Inc. BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ *	BSDI ifaddrs.h,v 2.5 2000/02/23 14:51:59 dab Exp
+ */
+
+#if !__ANDROID__
+#error ifaddrs-android only works with Android
+#endif
+
+#ifndef	_IFADDRS_H_
+#define	_IFADDRS_H_
+
+struct ifaddrs {
+	struct ifaddrs  *ifa_next;
+	char		*ifa_name;
+	unsigned int	 ifa_flags;
+	struct sockaddr	*ifa_addr;
+	struct sockaddr	*ifa_netmask;
+	struct sockaddr	*ifa_dstaddr;
+	void		*ifa_data;
+};
+
+/*
+ * This may have been defined in <net/if.h>.  Note that if <net/if.h> is
+ * to be included it must be included before this header file.
+ */
+#ifndef	ifa_broadaddr
+#define	ifa_broadaddr	ifa_dstaddr	/* broadcast address interface */
+#endif
+
+#include <sys/cdefs.h>
+
+__BEGIN_DECLS
+extern int getifaddrs(struct ifaddrs **ifap);
+extern void freeifaddrs(struct ifaddrs *ifa);
+__END_DECLS
+
+#endif

ifaddrs-musl.h

@@ -0,0 +1,43 @@
+#ifndef _IFADDRS_H
+#define _IFADDRS_H
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#if !__linux__
+#error ifaddrs-musl.h only works with a Linux kernel
+#endif
+
+#if __ANDROID__
+#error ifaddrs-musl.h does not work with Android
+#endif
+
+#include <features.h>
+#include <netinet/in.h>
+#include <sys/socket.h>
+
+struct ifaddrs {
+	struct ifaddrs *ifa_next;
+	char *ifa_name;
+	unsigned ifa_flags;
+	struct sockaddr *ifa_addr;
+	struct sockaddr *ifa_netmask;
+	union {
+		struct sockaddr *ifu_broadaddr;
+		struct sockaddr *ifu_dstaddr;
+	} ifa_ifu;
+	void *ifa_data;
+};
+#define ifa_broadaddr ifa_ifu.ifu_broadaddr
+#define ifa_dstaddr ifa_ifu.ifu_dstaddr
+
+void freeifaddrs(struct ifaddrs *ifp);
+int getifaddrs(struct ifaddrs **ifap);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif
+

make_dragonfly

@@ -3,7 +3,7 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-Dragon* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm -f vlmcsdmulti vlmcsd vlmcs 2>/dev/null
 
 MAKEFLAGS="-B -j12"
@@ -16,9 +16,7 @@ LF="-Wl,-z,norelro -Wl,--hash-style=sysv -Wl,--build-id=none"
 LFCLANG="-Wl,-z,norelro -Wl,--hash-style=sysv"
 export CC=gcc5
 
-gmake $MAKEFLAGS PROGRAM_NAME=vlmcsd-DragonFly-x64 CLIENT_NAME=vlmcs-DragonFly-x64 CFLAGS="$CF" LDFLAGS="$LF"
+gmake $MAKEFLAGS MULTI_NAME=vlmcsdmulti-DragonFly-x64 PROGRAM_NAME=vlmcsd-DragonFly-x64 CLIENT_NAME=vlmcs-DragonFly-x64 CFLAGS="$CF" LDFLAGS="$LF" allmulti
-rm vlmcsd.o vlmcs.o
-gmake vlmcsdmulti-DragonFly-x64 $REUSEOBJFLAGS CFLAGS="$CF" LDFLAGS="$LF" MULTI_NAME=vlmcsdmulti-DragonFly-x64
 
 rm *.o
 
@@ -29,4 +27,4 @@ cp -af vlmcsd-DragonFly-x64 /usr/local/sbin/vlmcsd
 cp -af vlmcs-DragonFly-x64 /usr/local/bin/vlmcs
 
 # Copy everything to distribution server
-scp -p vlmcsdmulti-* vlmcsd-* vlmcs-* root@ubuntu64:x/binaries/DragonFly/intel/
+scp -p vlmcsdmulti-* vlmcsd-Dragon* vlmcs-* root@ubuntu64:x/binaries/DragonFly/intel/

make_freebsd

@@ -3,7 +3,7 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-Free* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm -f vlmcsdmulti vlmcsd vlmcs 2>/dev/null
 
 MAKEFLAGS="-B -j12"
@@ -15,22 +15,13 @@ LF="-Wl,-z,norelro -Wl,--hash-style=gnu -Wl,--build-id=none"
 LFCLANG="-Wl,-z,norelro -Wl,--hash-style=gnu"
 
 gmake $MAKEFLAGS allmulti CAT=2 MULTI_NAME=vlmcsdmulti-FreeBSD-10.3-x64-gcc CLIENT_NAME=vlmcs-FreeBSD-10.3-x64-gcc PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x64-gcc CC=gcc5 CFLAGS="$CF" LDFLAGS="$LF"
-
+gmake $MAKEFLAGS MULTI_NAME=vlmcsdmulti-FreeBSD-10.3-x64 CLIENT_NAME=vlmcs-FreeBSD-10.3-x64 PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x64 CC=clang38 CFLAGS="$CFCLANG" LDFLAGS="$LF" allmulti
-gmake $MAKEFLAGS CLIENT_NAME=vlmcs-FreeBSD-10.3-x64 PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x64 CC=clang38 CFLAGS="$CFCLANG" LDFLAGS="$LF"
+gmake $MAKEFLAGS MULTI_NAME=vlmcsdmulti-FreeBSD-10.3-x86 CLIENT_NAME=vlmcs-FreeBSD-10.3-x86 PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x86 CC=clang38 CFLAGS="$CFCLANG -m32" LDFLAGS="$LF"
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.*
-gmake $REUSEOBJFLAGS vlmcsdmulti-FreeBSD-10.3-x64 MULTI_NAME=vlmcsdmulti-FreeBSD-10.3-x64 CC=clang38 CFLAGS="$CFCLANG" LDFLAGS="$LF"
-
-gmake $MAKEFLAGS CLIENT_NAME=vlmcs-FreeBSD-10.3-x86 PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x86 CC=clang38 CFLAGS="$CFCLANG -m32" LDFLAGS="$LF"
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.*
-gmake $REUSEOBJFLAGS vlmcsdmulti-FreeBSD-10.3-x86 MULTI_NAME=vlmcsdmulti-FreeBSD-10.3-x86 CC=clang38 CFLAGS="$CFCLANG -m32" LDFLAGS="$LF"
-
 gmake $MAKEFLAGS allmulti CAT=2 MULTI_NAME=vlmcsdmulti-FreeBSD-10.3-x86-gcc CLIENT_NAME=vlmcs-FreeBSD-10.3-x86-gcc PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x86-gcc CC=gcc5 CFLAGS="$CF -m32 -DCOMPAT_32BIT" LDFLAGS="-L/usr/lib32 -B/usr/lib32 $LF"
-
 gmake $MAKEFLAGS CAT=2 vlmcsd-FreeBSD-10.3-x64-threads-gcc PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x64-threads-gcc THREADS=1 CC=gcc5 CFLAGS="$CF" LDFLAGS="-lpthread $LF"
 gmake $MAKEFLAGS vlmcsd-FreeBSD-10.3-x64-threads PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x64-threads THREADS=1 CC=clang38 CFLAGS="$CFCLANG" LDFLAGS="-lpthread $LF"
 gmake $MAKEFLAGS vlmcsd-FreeBSD-10.3-x86-threads PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x86-threads THREADS=1 CC=clang38 CFLAGS="$CFCLANG -m32" LDFLAGS="-lpthread $LF"
 gmake $MAKEFLAGS CAT=2 vlmcsd-FreeBSD-10.3-x86-threads-gcc PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x86-threads-gcc THREADS=1 CC=gcc5 CFLAGS="$CF -m32 -DCOMPAT_32BIT" LDFLAGS="-lpthread -L/usr/lib32 -B/usr/lib32 $LF"
-
 gmake $MAKEFLAGS CRYPTO=openssl_with_aes CLIENT_NAME=vlmcs-FreeBSD-10.3-x64-openssl1.0.1-EXPERIMENTAL PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x64-openssl1.0.1-EXPERIMENTAL CC=clang38 CFLAGS="$CFCLANG" LDFLAGS="$LF"
 gmake $MAKEFLAGS CRYPTO=openssl_with_aes CLIENT_NAME=vlmcs-FreeBSD-10.3-x86-openssl1.0.1-EXPERIMENTAL PROGRAM_NAME=vlmcsd-FreeBSD-10.3-x86-openssl1.0.1-EXPERIMENTAL CC=clang38 CFLAGS="$CFCLANG -m32" LDFLAGS="$LF"
 
@@ -39,8 +30,8 @@ rm *.o
 strip -s --strip-unneeded --remove-section=.eh_frame_hdr --remove-section=.eh_frame --remove-section=.note.gnu.gold-version --remove-section=.comment --remove-section=.note --remove-section=.note.gnu.build-id --remove-section=.note.ABI-tag vlmcs-* vlmcsd-* vlmcsdmulti-*
 sstrip -z vlmcs-* vlmcsd-* vlmcsdmulti-*
 
-sudo cp -af vlmcsd-FreeBSD-10.3-x86-gcc /usr/local/sbin/vlmcsd
+sudo cp -af vlmcsd-FreeBSD-10.3-x64-gcc /usr/local/sbin/vlmcsd
-sudo cp -af vlmcs-FreeBSD-10.3-x86-gcc /usr/local/bin/vlmcs
+sudo cp -af vlmcs-FreeBSD-10.3-x64-gcc /usr/local/bin/vlmcs
 
 # Copy everything to distribution server
-scp -p vlmcsdmulti-* vlmcsd-* vlmcs-* root@ubuntu64:x/binaries/FreeBSD/intel/
+scp -p vlmcsdmulti-* vlmcsd-Free* vlmcs-* root@ubuntu64:x/binaries/FreeBSD/intel/

make_hurd

@@ -3,7 +3,7 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-hurd* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm -f vlmcsdmulti vlmcsd vlmcs 2>/dev/null
 
 MAKEFLAGS="-B -j1"
@@ -12,8 +12,7 @@ export CC=gcc
 CF="-flto=jobserver -pipe -fwhole-program -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
 LF="-fuse-ld=gold -lresolv -Wl,-z,norelro,--hash-style=gnu,--build-id=none"
 
-make $MAKEFLAGS PROGRAM_NAME=vlmcsd-hurd-x86-glibc CLIENT_NAME=vlmcs-hurd-x86-glibc CFLAGS="$CF" LDFLAGS="$LF" CAT=2
+make $MAKEFLAGS MULTI_NAME=vlmcsdmulti-hurd-x86-glibc vlmcsdmulti-hurd-x86-glibc PROGRAM_NAME=vlmcsd-hurd-x86-glibc CLIENT_NAME=vlmcs-hurd-x86-glibc CFLAGS="$CF" LDFLAGS="$LF" allmulti
-make $MAKEFLAGS MULTI_NAME=vlmcsdmulti-hurd-x86-glibc vlmcsdmulti-hurd-x86-glibc CFLAGS="$CF" LDFLAGS="$LF" CAT=2 AUXV=1
 
 make clean
 
@@ -34,5 +33,5 @@ cp -af vlmcsd.ini.5 /usr/local/man/man5/
 bzip2 -f -9 /usr/local/man/man5/vlmcsd.ini.5 /usr/local/man/man1/vlmcs.1 /usr/local/man/man1/vlmcsdmulti.1 /usr/local/man/man7/vlmcsd.7 /usr/local/man/man8/vlmcsd.8
 
 # Copy everything to distribution server
-scp -p vlmcsdmulti-* vlmcsd-* vlmcs-* root@ubuntu64.internal:x/binaries/Hurd/intel/
+scp -p vlmcsdmulti-* vlmcsd-hurd* vlmcs-* root@ubuntu64.internal:x/binaries/Hurd/intel/
 

make_kfreebsd

@@ -3,7 +3,7 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-Free* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm -f vlmcsdmulti vlmcsd vlmcs 2>/dev/null
 
 MAKEFLAGS="-B -j`nproc`"
@@ -16,21 +16,19 @@ export PROGRAM_NAME=vlmcsd-FreeBSD-10.1-x64-glibc
 export CLIENT_NAME=vlmcs-FreeBSD-10.1-x64-glibc
 export MULTI_NAME=vlmcsdmulti-FreeBSD-10.1-x64-glibc
 
-make $MAKEFLAGS CFLAGS="$CF -m64" LDFLAGS="$LF" CAT=2
+make $MAKEFLAGS CFLAGS="$CF -m64" LDFLAGS="$LF" CAT=2 allmulti
-make $MAKEFLAGS $MULTI_NAME CFLAGS="$CF -m64" LDFLAGS="$LF" CAT=2 AUXV=1
+
+cp -af $PROGRAM_NAME /usr/local/sbin/vlmcsd
+cp -af $CLIENT_NAME /usr/local/bin/vlmcs
 
 export PROGRAM_NAME=vlmcsd-FreeBSD-10.1-x86-glibc
 export CLIENT_NAME=vlmcs-FreeBSD-10.1-x86-glibc
 export MULTI_NAME=vlmcsdmulti-FreeBSD-10.1-x86-glibc
 
-make $MAKEFLAGS CFLAGS="$CF -m32" LDFLAGS="$LF" CAT=2
+make $MAKEFLAGS CFLAGS="$CF -m32" LDFLAGS="$LF" CAT=2 allmulti
-make $MAKEFLAGS $MULTI_NAME CFLAGS="$CF -m32" LDFLAGS="$LF" CAT=2 AUXV=1
 
 sstrip -z vlmcs-* vlmcsd-* vlmcsdmulti-*
 
-cp -af $PROGRAM_NAME /usr/local/sbin/vlmcsd
-cp -af $CLIENT_NAME /usr/local/bin/vlmcs
-
 # Copy man pages
 mkdir -p /usr/local/man/man1 2>/dev/null
 mkdir -p /usr/local/man/man5 2>/dev/null
@@ -43,5 +41,5 @@ cp -af vlmcsd.ini.5 /usr/local/man/man5/
 bzip2 -f -9 /usr/local/man/man5/vlmcsd.ini.5 /usr/local/man/man1/vlmcs.1 /usr/local/man/man1/vlmcsdmulti.1 /usr/local/man/man7/vlmcsd.7 /usr/local/man/man8/vlmcsd.8
 
 # Copy everything to distribution server
-scp -p vlmcsdmulti-* vlmcsd-* vlmcs-* root@ubuntu64.internal:x/binaries/FreeBSD/intel/
+scp -p vlmcsdmulti-* vlmcsd-Free* vlmcs-* root@ubuntu64.internal:x/binaries/FreeBSD/intel/
 

make_minix

@@ -16,9 +16,7 @@ export CLIENT_NAME=vlmcs$SUFFIX
 export MULTI_NAME=vlmcsdmulti$SUFFIX
 
 gmake clean
-gmake -B
+gmake -B allmulti
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-gmake $MULTI_NAME
 
 strip -s --strip-unneeded --remove-section .eh_frame_hdr --remove-section .eh_frame --remove-section .ident --remove-section .note.minix.ident --remove-section .note.netbsd.pax --remove-section=.note.gnu.gold-version --remove-section=.comment --remove-section=.note --remove-section=.note.gnu.build-id --remove-section=.note.ABI-tag *$SUFFIX
 

make_multilib_linux

@@ -4,7 +4,7 @@ SMALLCC="-pipe -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tabl
 SMALLLD="-pipe -Wl,--hash-style=sysv -Wl,-z,norelro -Wl,--build-id=none"
 SMALL="$SMALLCC $SMALLLD"
 
-rm -f vlmcsd vlmcs vlmcsdmulti vlmcsd-* vlmcs-* vlmcsdmulti-*
+rm -f vlmcsd vlmcs vlmcsdmulti vlmcsd-s390* vlmcsd-sparc64* vlmcsd-mips64* vlmcs-* vlmcsdmulti-*
 
 ## IBM S/390
 
@@ -20,10 +20,7 @@ export MULTI_NAME=vlmcsdmulti-s390-glibc
 export CLIENT_NAME=vlmcs-s390-glibc
 export PROGRAM_NAME=vlmcsd-s390-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
-
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-make -j`nproc` $MULTI_NAME
 
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
@@ -32,15 +29,11 @@ export MULTI_NAME=vlmcsdmulti-s390x-glibc
 export CLIENT_NAME=vlmcs-s390x-glibc
 export PROGRAM_NAME=vlmcsd-s390x-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
-
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-export PLATFORMFLAGS="-flto=jobserver -fwhole-program -m64 -mzarch -mpacked-stack -msmall-exec"
-make -j`nproc` $MULTI_NAME
-
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
 
+
 ## SPARC64
 
 export PLATFORMFLAGS="-flto=jobserver -fwhole-program -mcpu=v7"
@@ -51,13 +44,12 @@ export MULTI_NAME=vlmcsdmulti-sparc64v9-glibc
 export CLIENT_NAME=vlmcs-sparc64v9-glibc
 export PROGRAM_NAME=vlmcsd-sparc64v9-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
 
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-make -j`nproc` $MULTI_NAME
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
 
+
 ## MIPS64 BIG-ENDIAN
 
 export PLATFORMFLAGS="-flto=jobserver -fwhole-program -mips64 -mno-mips16"
@@ -68,10 +60,8 @@ export MULTI_NAME=vlmcsdmulti-mips64-glibc
 export CLIENT_NAME=vlmcs-mips64-glibc
 export PROGRAM_NAME=vlmcsd-mips64-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
 
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-make -j`nproc` $MULTI_NAME
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
 export PLATFORMFLAGS="-flto=jobserver -fwhole-program -mips64 -mmicromips"
@@ -79,10 +69,8 @@ export MULTI_NAME=vlmcsdmulti-mips64mm-glibc
 export CLIENT_NAME=vlmcs-mips64mm-glibc
 export PROGRAM_NAME=vlmcsd-mips64mm-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
 
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-make -j`nproc` $MULTI_NAME
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
 
@@ -96,10 +84,8 @@ export MULTI_NAME=vlmcsdmulti-mips64el-glibc
 export CLIENT_NAME=vlmcs-mips64el-glibc
 export PROGRAM_NAME=vlmcsd-mips64el-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
 
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-make -j`nproc` $MULTI_NAME
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
 export PLATFORMFLAGS="-flto=jobserver -fwhole-program -mips64 -mmicromips"
@@ -107,10 +93,8 @@ export MULTI_NAME=vlmcsdmulti-mips64elmm-glibc
 export CLIENT_NAME=vlmcs-mips64elmm-glibc
 export PROGRAM_NAME=vlmcsd-mips64elmm-glibc
 
-make -B -j`nproc` $CLIENT_NAME $PROGRAM_NAME
+make -B -j`nproc` allmulti
 
-rm -f vlmcsd.o vlmcs.o vlmcsdmulti.o
-make -j`nproc` $MULTI_NAME
 sstrip -z $CLIENT_NAME $PROGRAM_NAME $MULTI_NAME
 
 

make_netbsd

@@ -3,21 +3,19 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-NetBSD* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 gmake clean
 
 MAKEFLAGS="-B -j12"
 REUSEOBJFLAGS="-j12"
 
 CF="-flto=12 -static-libgcc -pipe -fwhole-program -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
-CF45="-static-libgcc -pipe -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
+CF45="-flto=12 -static-libgcc -pipe -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
 CFCLANG="-pipe -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
 LF="-Wl,-z,norelro -Wl,--hash-style=sysv -Wl,--build-id=none"
 LFCLANG="-Wl,-z,norelro -Wl,--hash-style=sysv"
 
-gmake $MAKEFLAGS CC=/usr/pkg/gcc5/bin/gcc PROGRAM_NAME=vlmcsd-NetBSD-x64 CLIENT_NAME=vlmcs-NetBSD-x64 CFLAGS="$CF" LDFLAGS="$LF"
+gmake $MAKEFLAGS CC=/usr/pkg/gcc5/bin/gcc PROGRAM_NAME=vlmcsd-NetBSD-x64 CLIENT_NAME=vlmcs-NetBSD-x64 MULTI_NAME=vlmcsdmulti-NetBSD-x64 allmulti CFLAGS="$CF" LDFLAGS="$LF"
-rm vlmcsd.o vlmcs.o
-gmake vlmcsdmulti-NetBSD-x64 $REUSEOBJFLAGS CC=/usr/pkg/gcc5/bin/gcc CFLAGS="$CF" LDFLAGS="$LF" MULTI_NAME=vlmcsdmulti-NetBSD-x64
 
 gmake allmulti CC=gcc $MAKEFLAGS CAT=2 MULTI_NAME=vlmcsdmulti-NetBSD-x86 PROGRAM_NAME=vlmcsd-NetBSD-x86 CLIENT_NAME=vlmcs-NetBSD-x86 CFLAGS="$CF45 -m32" LDFLAGS="$LF"
 
@@ -32,4 +30,4 @@ cp -af vlmcsd-NetBSD-x86 /usr/local/sbin/vlmcsd
 cp -af vlmcs-NetBSD-x86 /usr/local/bin/vlmcs
 
 # Copy everything to distribution server
-scp -p vlmcsdmulti-* vlmcsd-* vlmcs-* root@ubuntu64:x/binaries/NetBSD/intel/
+scp -p vlmcsdmulti-* vlmcsd-Net* vlmcs-* root@ubuntu64:x/binaries/NetBSD/intel/

make_openbsd

@@ -3,7 +3,7 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-Open* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm -f vlmcsdmulti vlmcsd vlmcs 2>/dev/null
 
 MAKEFLAGS="-B -j12"
@@ -15,7 +15,7 @@ CFCLANG="-pipe -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tabl
 LF="-Wl,-z,norelro"
 LFCLANG="-Wl,-z,norelro"
 
-gmake allmulti CAT=2 $MAKEFLAGS CC=egcc MULTI_NAME=vlmcsdmulti-OpenBSD-x64 PROGRAM_NAME=vlmcsd-OpenBSD-x64 CLIENT_NAME=vlmcs-OpenBSD-x64 CFLAGS="$CF" LDFLAGS="$LF"
+gmake -Bj12 allmulti $MAKEFLAGS CC=egcc MULTI_NAME=vlmcsdmulti-OpenBSD-x64 PROGRAM_NAME=vlmcsd-OpenBSD-x64 CLIENT_NAME=vlmcs-OpenBSD-x64 CFLAGS="$CF" LDFLAGS="$LF"
 
 #gmake allmulti $MAKEFLAGS CAT=2 MULTI_NAME=vlmcsdmulti-OpenBSD-x86 PROGRAM_NAME=vlmcsd-OpenBSD-x86 CLIENT_NAME=vlmcs-OpenBSD-x86 CFLAGS="$CF45 -m32" LDFLAGS="$LF"
 
@@ -30,4 +30,4 @@ cp -f vlmcsd-OpenBSD-x64 /usr/local/sbin/vlmcsd
 cp -f vlmcs-OpenBSD-x64 /usr/local/bin/vlmcs
 
 # Copy everything to distribution server
-scp -p vlmcsdmulti-* vlmcsd-* vlmcs-* root@ubuntu64:x/binaries/OpenBSD/intel/
+scp -p vlmcsdmulti-* vlmcsd-Open* vlmcs-* root@ubuntu64:x/binaries/OpenBSD/intel/

make_osx

@@ -3,7 +3,7 @@
 export VERBOSE=3
 export DNS_PARSER=OS
 
-rm vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm vlmcsd-Mac* vlmcsd-iOS* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm vlmcsd vlmcs vlmcsdmulti 2>/dev/null
 
 MAKEFLAGS="-Bj"
@@ -12,40 +12,26 @@ CFGCC="-static-libgcc -mdynamic-no-pic -Os -flto=jobserver -fwhole-program -fno-
 CFCLANG="-mdynamic-no-pic -Os -flto -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
 CFGCC42="-static-libgcc -mdynamic-no-pic -Os -fno-common -fno-exceptions -fno-stack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fmerge-all-constants"
 
-make $MAKEFLAGS CLIENT_NAME=vlmcs-MacOSX-x86 PROGRAM_NAME=vlmcsd-MacOSX-x86 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.0" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-MacOSX-x86 CLIENT_NAME=vlmcs-MacOSX-x86 PROGRAM_NAME=vlmcsd-MacOSX-x86 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.0" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-MacOSX-x86 MULTI_NAME=vlmcsdmulti-MacOSX-x86 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.0" && \
 make $MAKEFLAGS vlmcsd-MacOSX-x86-threads THREADS=1 PROGRAM_NAME=vlmcsd-MacOSX-x86-threads CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.0" && \
-make $MAKEFLAGS CLIENT_NAME=vlmcs-MacOSX-x64 PROGRAM_NAME=vlmcsd-MacOSX-x64 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.0" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-MacOSX-x64 CLIENT_NAME=vlmcs-MacOSX-x64 PROGRAM_NAME=vlmcsd-MacOSX-x64 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.0" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-MacOSX-x64 MULTI_NAME=vlmcsdmulti-MacOSX-x64 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.0" && \
 make $MAKEFLAGS vlmcsd-MacOSX-x64-threads THREADS=1 PROGRAM_NAME=vlmcsd-MacOSX-x64-threads CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.0" && \
 #make $MAKEFLAGS CLIENT_NAME=vlmcs-MacOSX-x86-openssl-EXPERIMENTAL PROGRAM_NAME=vlmcsd-MacOSX-x86-openssl-EXPERIMENTAL CRYPTO=openssl_with_aes_soft CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.4" && \
 #make $MAKEFLAGS CLIENT_NAME=vlmcs-MacOSX-x64-openssl-EXPERIMENTAL PROGRAM_NAME=vlmcsd-MacOSX-x64-openssl-EXPERIMENTAL CRYPTO=openssl_with_aes_soft CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.4" && \
 
 #make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-7.1-armv7 PROGRAM_NAME=vlmcsd-iOS-7.1-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS7.1.sdk" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
+#rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
 #make $REUSEOBJFLAGS vlmcsdmulti-iOS-7.1-armv7 MULTI_NAME=vlmcsdmulti-iOS-7.1-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS7.1.sdk" && \
 
-make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-armv7 PROGRAM_NAME=vlmcsd-iOS-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 -isysroot ~/toolchains/iPhoneOS.sdk" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-iOS-armv7 CLIENT_NAME=vlmcs-iOS-armv7 PROGRAM_NAME=vlmcsd-iOS-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 -isysroot ~/toolchains/iPhoneOS.sdk" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-iOS-armv8-aarch64 CLIENT_NAME=vlmcs-iOS-armv8-aarch64 PROGRAM_NAME=vlmcsd-iOS-armv8-aarch64 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -arch arm64 -miphoneos-version-min=7.0 -isysroot ~/toolchains/iPhoneOS.sdk" && \
-make $REUSEOBJFLAGS vlmcsdmulti-iOS-armv7 MULTI_NAME=vlmcsdmulti-iOS-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 -isysroot ~/toolchains/iPhoneOS.sdk" && \
-make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-armv8-aarch64 PROGRAM_NAME=vlmcsd-iOS-armv8-aarch64 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -arch arm64 -miphoneos-version-min=7.0 -isysroot ~/toolchains/iPhoneOS.sdk" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-iOS-armv8-aarch64 MULTI_NAME=vlmcsdmulti-iOS-armv8-aarch64 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-m64 -arch arm64 -miphoneos-version-min=7.0 -isysroot ~/toolchains/iPhoneOS.sdk" && \
 
-make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-6.1-armv7 PROGRAM_NAME=vlmcsd-iOS-6.1-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS6.1.sdk -isysroot ~/toolchains/iPhoneOS6.1.sdk" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-iOS-6.1-armv7 CLIENT_NAME=vlmcs-iOS-6.1-armv7 PROGRAM_NAME=vlmcsd-iOS-6.1-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS6.1.sdk -isysroot ~/toolchains/iPhoneOS6.1.sdk" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-iOS-6.1-armv7 MULTI_NAME=vlmcsdmulti-iOS-6.1-armv7 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS6.1.sdk -isysroot ~/toolchains/iPhoneOS6.1.sdk" && \
 
-make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-5.1-armv7-clang3.4 PROGRAM_NAME=vlmcsd-iOS-5.1-armv7-clang3.4 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS5.1.sdk -isysroot ~/toolchains/iPhoneOS5.1.sdk" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-iOS-5.1-armv7-clang3.4 CLIENT_NAME=vlmcs-iOS-5.1-armv7-clang3.4 PROGRAM_NAME=vlmcsd-iOS-5.1-armv7-clang3.4 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS5.1.sdk -isysroot ~/toolchains/iPhoneOS5.1.sdk" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-iOS-5.1-armv7-clang3.4 MULTI_NAME=vlmcsdmulti-iOS-5.1-armv7-clang3.4 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-mthumb -m32 -arch armv7 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS5.1.sdk -isysroot ~/toolchains/iPhoneOS5.1.sdk" && \
 
 #PATH=~/toolchains/iOS5.1-MacOS-Lion/usr/bin:$PATH clang --version
-PATH=~/toolchains/iOS5.1-MacOS-Lion/usr/bin:$PATH make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-5.1-armv6-clang3.1 PROGRAM_NAME=vlmcsd-iOS-5.1-armv6-clang3.1 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-arch armv6 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS5.1.sdk -isysroot ~/toolchains/iPhoneOS5.1.sdk" && \
+PATH=~/toolchains/iOS5.1-MacOS-Lion/usr/bin:$PATH make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-iOS-5.1-armv6-clang3.1 CLIENT_NAME=vlmcs-iOS-5.1-armv6-clang3.1 PROGRAM_NAME=vlmcsd-iOS-5.1-armv6-clang3.1 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-arch armv6 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS5.1.sdk -isysroot ~/toolchains/iPhoneOS5.1.sdk" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-PATH=~/toolchains/iOS5.1-MacOS-Lion/usr/bin:$PATH make $REUSEOBJFLAGS vlmcsdmulti-iOS-5.1-armv6-clang3.1 MULTI_NAME=vlmcsdmulti-iOS-5.1-armv6-clang3.1 CC=clang CFLAGS="$CFCLANG" PLATFORMFLAGS="-arch armv6 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS5.1.sdk -isysroot ~/toolchains/iPhoneOS5.1.sdk" && \
 
 #PATH=~/toolchains/gcc4.2/usr/bin/bin:$PATH make $MAKEFLAGS CLIENT_NAME=vlmcs-iOS-4.1-armv6-llvm-gcc4.2 PROGRAM_NAME=vlmcsd-iOS-4.1-armv6-llvm-gcc4.2 CC=llvm-g++-4.2 CFLAGS="$CFGCC42" PLATFORMFLAGS="-arch armv6 -miphoneos-version-min=1.0 --sysroot ~/toolchains/iPhoneOS4.1.sdk -isysroot ~/toolchains/iPhoneOS4.1.sdk" && \
 #rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
@@ -56,18 +42,12 @@ PATH=~/toolchains/iOS5.1-MacOS-Lion/usr/bin:$PATH make $REUSEOBJFLAGS vlmcsdmult
 #PATH=~/toolchains/gcc4.2/usr/bin:$PATH make $REUSEOBJFLAGS vlmcsdmulti-iOS-4.1-armv7-llvm-clang MULTI_NAME=vlmcsdmulti-iOS-4.1-armv7-llvm-clang CC=~/toolchains/gcc4.2/usr/bin/bin/clang CFLAGS="$CFGCC42" PLATFORMFLAGS="-mthumb -arch armv7 -miphoneos-version-min=4.1 --sysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS4.1.sdk -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS4.1.sdk" && \
 
 
-PATH=~/toolchains/gcc4.2/usr/bin:$PATH make -Bj SAFE_MODE=1 PROGRAM_NAME=vlmcsd-MacOSX-ppc CLIENT_NAME=vlmcs-MacOSX-ppc CC=gcc CFLAGS="$CFGCC42 -isysroot ~/toolchains/MacOSX10.5.sdk -arch ppc -mmacosx-version-min=10.0" && \
+PATH=~/toolchains/gcc4.2/usr/bin:$PATH make -Bj allmulti SAFE_MODE=1 MULTI_NAME=vlmcsdmulti-MacOSX-ppc PROGRAM_NAME=vlmcsd-MacOSX-ppc CLIENT_NAME=vlmcs-MacOSX-ppc CC=gcc CFLAGS="$CFGCC42 -isysroot ~/toolchains/MacOSX10.5.sdk -arch ppc -mmacosx-version-min=10.0" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-PATH=~/toolchains/gcc4.2/usr/bin:$PATH make -j SAFE_MODE=1 vlmcsdmulti-MacOSX-ppc MULTI_NAME=vlmcsdmulti-MacOSX-ppc CC=gcc CFLAGS="$CFGCC42 -isysroot ~/toolchains/MacOSX10.5.sdk -arch ppc -mmacosx-version-min=10.0"
 
 
-make $MAKEFLAGS CLIENT_NAME=vlmcs-MacOSX-x86-gcc PROGRAM_NAME=vlmcsd-MacOSX-x86-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.11" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-MacOSX-x86-gcc CLIENT_NAME=vlmcs-MacOSX-x86-gcc PROGRAM_NAME=vlmcsd-MacOSX-x86-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.11" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-MacOSX-x86-gcc MULTI_NAME=vlmcsdmulti-MacOSX-x86-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.11" && \
 make $MAKEFLAGS vlmcsd-MacOSX-x86-threads-gcc THREADS=1 PROGRAM_NAME=vlmcsd-MacOSX-x86-threads-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m32 -march=core2 -mmacosx-version-min=10.11" && \
-make $MAKEFLAGS CLIENT_NAME=vlmcs-MacOSX-x64-gcc PROGRAM_NAME=vlmcsd-MacOSX-x64-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.11" && \
+make $MAKEFLAGS allmulti MULTI_NAME=vlmcsdmulti-MacOSX-x64-gcc CLIENT_NAME=vlmcs-MacOSX-x64-gcc PROGRAM_NAME=vlmcsd-MacOSX-x64-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.11" && \
-rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.* && \
-make $REUSEOBJFLAGS vlmcsdmulti-MacOSX-x64-gcc MULTI_NAME=vlmcsdmulti-MacOSX-x64-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.11" && \
 make $MAKEFLAGS vlmcsd-MacOSX-x64-threads-gcc THREADS=1 PROGRAM_NAME=vlmcsd-MacOSX-x64-threads-gcc CC=gcc-5 CFLAGS="$CFGCC" PLATFORMFLAGS="-m64 -march=core2 -mmacosx-version-min=10.11" && \
 
 # Sign the iOS binaries
@@ -88,7 +68,7 @@ sudo mkdir -p /usr/local/share/man/man5
 
 sudo cp -p vlmcsd.8 /usr/local/share/man/man8
 sudo cp -p vlmcs.1 vlmcsdmulti.1 /usr/local/share/man/man1
-sudo cp -p vlmcsd.7 /usr/local/share/man/man7
+sudo cp -p vlmcsd-floppy.7 vlmcsd.7 /usr/local/share/man/man7
 sudo cp -p vlmcsd.ini.5 //usr/local/share/man/man5
 
 # Copy the stuff to distribution server

make_solaris

@@ -10,7 +10,7 @@ fi
 
 SOLARIS_VERSION=`uname -v`
 
-rm -f vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
+rm -f vlmcsd-Solaris* vlmcs-* vlmcsdmulti-* *_all.* 2>/dev/null
 rm -f vlmcsdmulti vlmcsd vlmcs 2>/dev/null
 
 MAKEFLAGS="-B -j`nproc`"
@@ -24,9 +24,7 @@ LF="-fwhole-program -Wl,-z,norelro -Wl,--hash-style=sysv -Wl,--build-id=none"
 if [ "$CAT" != "" ]; then
   gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld vlmcs-Solaris$SOLARIS_VERSION-x86 vlmcsd-Solaris$SOLARIS_VERSION-x86 vlmcsdmulti-Solaris$SOLARIS_VERSION-x86 CLIENT_NAME=vlmcs-Solaris$SOLARIS_VERSION-x86 PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x86 MULTI_NAME=vlmcsdmulti-Solaris$SOLARIS_VERSION-x86 CC=gcc CFLAGS="$CF" LDFLAGS="$LF"
 else
-  gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld CLIENT_NAME=vlmcs-Solaris$SOLARIS_VERSION-x86 PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x86 CC=gcc CFLAGS="$CF" LDFLAGS="$LF"
+  gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld MULTI_NAME=vlmcsdmulti-Solaris$SOLARIS_VERSION-x86 CLIENT_NAME=vlmcs-Solaris$SOLARIS_VERSION-x86 PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x86 CC=gcc CFLAGS="$CF" LDFLAGS="$LF" allmulti
-  rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.*
-  gmake $REUSEOBJFLAGS LD_ALTEXEC=/usr/bin/gld vlmcsdmulti-Solaris$SOLARIS_VERSION-x86 MULTI_NAME=vlmcsdmulti-Solaris$SOLARIS_VERSION-x86 CC=gcc CFLAGS="$CF" LDFLAGS="$LF"
 fi
 
 gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld vlmcsd-Solaris$SOLARIS_VERSION-x86-threads PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x86-threads CC=gcc THREADS=1 CFLAGS="$CF" LDFLAGS="-lpthread $LF"
@@ -39,9 +37,7 @@ LF="$LF -Wl,-melf_x86_64_sol2"
 if [ "$CAT" != "" ]; then
   gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld vlmcsdmulti-Solaris$SOLARIS_VERSION-x64 vlmcs-Solaris$SOLARIS_VERSION-x64 vlmcsd-Solaris$SOLARIS_VERSION-x64 MULTI_NAME=vlmcsdmulti-Solaris$SOLARIS_VERSION-x64 CLIENT_NAME=vlmcs-Solaris$SOLARIS_VERSION-x64 PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x64 CC=gcc CFLAGS="$CF" LDFLAGS="$LF" PLATFORMFLAGS="-m64"
 else
-  gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld CLIENT_NAME=vlmcs-Solaris$SOLARIS_VERSION-x64 PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x64 CC=gcc CFLAGS="$CF" LDFLAGS="$LF" PLATFORMFLAGS="-m64"
+  gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld MULTI_NAME=vlmcsdmulti-Solaris$SOLARIS_VERSION-x64 CLIENT_NAME=vlmcs-Solaris$SOLARIS_VERSION-x64 PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x64 CC=gcc CFLAGS="$CF" LDFLAGS="$LF" PLATFORMFLAGS="-m64" allmulti
-  rm -f vlmcs.o vlmcsd.o vlmcsdmulti.o *_all.*
-  gmake $REUSEOBJFLAGS LD_ALTEXEC=/usr/bin/gld vlmcsdmulti-Solaris$SOLARIS_VERSION-x64 MULTI_NAME=vlmcsdmulti-Solaris$SOLARIS_VERSION-x64 CC=gcc CFLAGS="$CF" LDFLAGS="$LF" PLATFORMFLAGS="-m64"
 fi
 
 gmake $MAKEFLAGS LD_ALTEXEC=/usr/bin/gld vlmcsd-Solaris$SOLARIS_VERSION-x64-threads PROGRAM_NAME=vlmcsd-Solaris$SOLARIS_VERSION-x64-threads CC=gcc THREADS=1 CFLAGS="$CF" LDFLAGS="$LF -lpthread" PLATFORMFLAGS="-m64"
@@ -54,4 +50,4 @@ gstrip -s --strip-unneeded --remove-section=.note.gnu.gold-version --remove-sect
 #sstrip -z vlmcs-* vlmcsd-*
 
 # Copy stuff to distribution server
-scp -p vlmcsd-* vlmcs-* vlmcsdmulti-* root@ubuntu64:x/binaries/Solaris/intel
+scp -p vlmcsd-Sola* vlmcs-* vlmcsdmulti-* root@ubuntu64:x/binaries/Solaris/intel

make_windows

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-rm -f cygkms*.dll libkms*.dll vlmcsd-* vlmcs-* vlmcsdmulti-* *_all.* vlmcsd.exe vlmcs.exe vlmcsdmulti.exe 2> /dev/null
+rm -f cygkms*.dll libkms*.dll vlmcs-* vlmcsd-win* vlmcsd-cyg* vlmcsdmulti-* *_all.* vlmcsd.exe vlmcs.exe vlmcsdmulti.exe 2> /dev/null
 
 export CAT=2
 export VERBOSE=3
@@ -11,17 +11,17 @@ CFMSRPC="-Wno-missing-braces -Wno-unused-variable $CF" # -fno-common -fno-stack-
 PF32=""
 PF64="-mpreferred-stack-boundary=4 -march=nocona -mtune=generic"
 LFCYG32="-fwhole-program -Wl,--nxcompat,--dynamicbase,--tsaware,--large-address-aware,--disable-long-section-names"
-LFWIN32="-fwhole-program -lws2_32 -Wl,--nxcompat,--dynamicbase,--tsaware,--large-address-aware,--disable-long-section-names"
+LFWIN32="-fwhole-program -Wl,--nxcompat,--dynamicbase,--tsaware,--large-address-aware,--disable-long-section-names"
 LFCYG64="-fwhole-program -Wl,--nxcompat,--dynamicbase,--tsaware,--disable-long-section-names,--high-entropy-va"
-LFWIN64="-fwhole-program -lws2_32 -Wl,--nxcompat,--dynamicbase,--tsaware,--disable-long-section-names,--high-entropy-va"
+LFWIN64="-fwhole-program -Wl,--nxcompat,--dynamicbase,--tsaware,--disable-long-section-names,--high-entropy-va"
 
 MAKEFLAGS="-j$NUMCPU -B"
 REUSEFLAGS="-j$NUMCPU"
 
 make $MAKEFLAGS cygkms32.dll FEATURES=minimum THREADS=1 DLL_NAME=cygkms32.dll DNS_PARSER=internal CC=i686-pc-cygwin-gcc.exe CFLAGS="$CF -flto=jobserver -fvisibility=hidden" PLATFORMFLAGS="$PF32" LDFLAGS="$LFCYG32 -Wl,--no-seh"
 make $MAKEFLAGS cygkms64.dll FEATURES=minimum THREADS=1 DLL_NAME=cygkms64.dll DNS_PARSER=internal CC=x86_64-pc-cygwin-gcc.exe CFLAGS="$CF -flto=jobserver -fvisibility=hidden" PLATFORMFLAGS="$PF64" LDFLAGS="$LFCYG64 -Wl,--no-seh"
-make $MAKEFLAGS all vlmcsdmulti-cygwin-x86 THREADS=1 DNS_PARSER=internal CLIENT_NAME=vlmcs-cygwin-x86 PROGRAM_NAME=vlmcsd-cygwin-x86 MULTI_NAME=vlmcsdmulti-cygwin-x86 CC=i686-pc-cygwin-gcc.exe CFLAGS="$CF" PLATFORMFLAGS="$PF32" LDFLAGS="$LFCYG32 -Wl,--no-seh"
+make $MAKEFLAGS allmulti THREADS=1 DNS_PARSER=internal CLIENT_NAME=vlmcs-cygwin-x86 PROGRAM_NAME=vlmcsd-cygwin-x86 MULTI_NAME=vlmcsdmulti-cygwin-x86 CC=i686-pc-cygwin-gcc.exe CFLAGS="$CF" PLATFORMFLAGS="$PF32" LDFLAGS="$LFCYG32 -Wl,--no-seh"
-make $MAKEFLAGS all vlmcsdmulti-cygwin-x64 THREADS=1 DNS_PARSER=internal CLIENT_NAME=vlmcs-cygwin-x64 PROGRAM_NAME=vlmcsd-cygwin-x64 MULTI_NAME=vlmcsdmulti-cygwin-x64 CC=x86_64-pc-cygwin-gcc.exe CFLAGS="$CF" PLATFORMFLAGS="$PF64" LDFLAGS="$LFCYG64 -Wl,--no-seh"
+make $MAKEFLAGS allmulti THREADS=1 DNS_PARSER=internal CLIENT_NAME=vlmcs-cygwin-x64 PROGRAM_NAME=vlmcsd-cygwin-x64 MULTI_NAME=vlmcsdmulti-cygwin-x64 CC=x86_64-pc-cygwin-gcc.exe CFLAGS="$CF" PLATFORMFLAGS="$PF64" LDFLAGS="$LFCYG64 -Wl,--no-seh"
 make $MAKEFLAGS MSRPC=1 THREADS=1 DNS_PARSER=internal CLIENT_NAME=vlmcs-cygwin-msrpc-x86 PROGRAM_NAME=vlmcsd-cygwin-msrpc-x86 MULTI_NAME=vlmcsdmulti-cygwin-msrpc-x86 CC=i686-pc-cygwin-gcc.exe CFLAGS="$CF -fasynchronous-unwind-tables" PLATFORMFLAGS="$PF32" LDFLAGS="$LFCYG32"
 make $MAKEFLAGS MSRPC=1 THREADS=1 DNS_PARSER=internal CLIENT_NAME=vlmcs-cygwin-msrpc-x64 PROGRAM_NAME=vlmcsd-cygwin-msrpc-x64 MULTI_NAME=vlmcsdmulti-cygwin-msrpc-x64 CC=x86_64-pc-cygwin-gcc.exe CFLAGS="$CFMSRPC" PLATFORMFLAGS="$PF64" LDFLAGS="$LFCYG64"
 unset CAT
@@ -50,7 +50,7 @@ rm -f *_all.* *.o 2> /dev/null &
 echo ""
 echo "Copying MingW binaries from distribution server"
 
-scp -p root@ubuntu64:x/binaries/Windows/intel/* .
+scp -p root@ubuntu64:x/binaries/Windows/intel/*Windows* root@ubuntu64:x/binaries/Windows/intel/libkms* .
 
 echo ""
 echo "Installing binaries"
@@ -73,12 +73,12 @@ mkdir -p /usr/share/man/man1
 mkdir -p /usr/share/man/man7
 mkdir -p /usr/share/man/man5
 
-cp -p vlmcsd.7 /usr/share/man/man7
+cp -p vlmcsd.7 vlmcsd-floppy.7 /usr/share/man/man7
 cp -p vlmcsd.8 /usr/share/man/man8
 cp -p vlmcsd.ini.5 /usr/share/man/man5
 cp -p vlmcs.1 vlmcsdmulti.1 /usr/share/man/man1
 
-bzip2 -f /usr/share/man/man5/vlmcsd.ini.5 /usr/share/man/man7/vlmcsd.7 /usr/share/man/man8/vlmcsd.8 /usr/share/man/man1/vlmcs.1 /usr/share/man/man1/vlmcsdmulti.1 &
+bzip2 -f /usr/share/man/man7/vlmcsd-floppy.7 /usr/share/man/man5/vlmcsd.ini.5 /usr/share/man/man7/vlmcsd.7 /usr/share/man/man8/vlmcsd.8 /usr/share/man/man1/vlmcs.1 /usr/share/man/man1/vlmcsdmulti.1 &
 
 # Copy stuff to distribution server
-scp -p vlmcsd-* vlmcs-* vlmcsdmulti-* *.dll root@ubuntu64:x/binaries/Windows/intel
+scp -p vlmcsd-cyg* vlmcsd-Win* vlmcs-* vlmcsdmulti-* *.dll root@ubuntu64:x/binaries/Windows/intel

msrpc-server.c

@@ -9,6 +9,10 @@
 #error MSRPC is only available with native Windows or Cygwin
 #endif
 
+#if _WIN32 && !defined(NO_PRIVATE_IP_DETECT)
+#include <winsock2.h>
+#endif
+
 #include "msrpc-server.h"
 #include "output.h"
 #include "kms.h"
@@ -157,6 +161,56 @@ RPC_STATUS getClientIp(const RPC_BINDING_HANDLE clientBinding, RPC_CSTR *ipAddre
 #endif // NO_LOG
 
 
+#ifndef NO_PRIVATE_IP_DETECT
+static int_fast8_t IsPrivateIPAddress(char* ipAddress)
+{
+	int family = strchr(ipAddress,'.') ? AF_INET : AF_INET6;
+
+	switch(family)
+	{
+		case AF_INET:
+		{
+			int i;
+			char* current;
+			char* next;
+			uint32_t ip;
+
+			for (ip = 0, i = 0, current = ipAddress; i < 4; i++, current = next + 1)
+			{
+				ip = (ip << 8) | strtoul(current, &next, 10);
+				if (*next != '.') break;
+			}
+
+			if
+			(
+				(ip & 0xff000000) == 0x7f000000 || // 127.x.x.x localhost
+				(ip & 0xffff0000) == 0xc0a80000 || // 192.168.x.x private routeable
+				(ip & 0xffff0000) == 0xa9fe0000 || // 169.254.x.x link local
+				(ip & 0xff000000) == 0x0a000000 || // 10.x.x.x private routeable
+				(ip & 0xfff00000) == 0xac100000    // 172.16-31.x.x private routeable
+			)
+			{
+				return TRUE;
+			}
+
+			break;
+		}
+
+		case AF_INET6:
+		{
+			if (!strcmp(ipAddress, "::1")) return TRUE;
+			if (strchr(ipAddress, ':') - ipAddress != 4) break;
+
+			int16_t firstWord;
+			hex2bin((BYTE*)&firstWord, ipAddress, 2);
+			if ((BE16(firstWord) & 0xe000) != 0x2000) return TRUE;
+		}
+
+	}
+
+	return FALSE;
+}
+#endif // NO_PRIVATE_IP_DETECT
 
 /*
  * This is the callback function for the RPC request as defined in KMSServer.idl
@@ -177,6 +231,27 @@ int ProcessActivationRequest(handle_t IDL_handle, int requestSize, unsigned char
 
 #	endif // NO_LOG
 
+#	ifndef NO_PRIVATE_IP_DETECT
+	if (result && (PublicIPProtectionLevel & 2))
+	{
+#		ifndef NO_LOG
+		logger ("Cannot verify that client has a private IP address\n");
+#		endif
+
+		return RPC_S_ACCESS_DENIED;
+	}
+
+	if (!result && (PublicIPProtectionLevel & 2) && !IsPrivateIPAddress((char*)clientIpAddress))
+	{
+#		ifndef NO_LOG
+		logger("Client with public IP address rejected\n");
+#		endif
+
+		RpcStringFreeA(&clientIpAddress);
+		return RPC_S_ACCESS_DENIED;
+	}
+#	endif // NO_PRIVATE_IP_DETECT
+
 	// Discard any packet smaller than a v4 request
 	if (requestSize < (int)sizeof(REQUEST_V4))
 	{

netlink-musl.h

@@ -0,0 +1,107 @@
+#ifndef NETLINK_MUSL_H
+#define NETLINK_MUSL_H
+
+#if !__linux__
+#error netlink-musl.h only works with a linux kernel
+#endif
+
+#if __ANDROID__
+#error netlink-musl.h does not work with Android
+#endif
+
+#include <stdint.h>
+
+/* linux/netlink.h */
+
+#define NETLINK_ROUTE 0
+
+struct nlmsghdr {
+	uint32_t	nlmsg_len;
+	uint16_t	nlmsg_type;
+	uint16_t	nlmsg_flags;
+	uint32_t	nlmsg_seq;
+	uint32_t	nlmsg_pid;
+};
+
+#define NLM_F_REQUEST	1
+#define NLM_F_MULTI	2
+#define NLM_F_ACK	4
+
+#define NLM_F_ROOT	0x100
+#define NLM_F_MATCH	0x200
+#define NLM_F_ATOMIC	0x400
+#define NLM_F_DUMP	(NLM_F_ROOT|NLM_F_MATCH)
+
+#define NLMSG_NOOP	0x1
+#define NLMSG_ERROR	0x2
+#define NLMSG_DONE	0x3
+#define NLMSG_OVERRUN	0x4
+
+/* linux/rtnetlink.h */
+
+#define RTM_NEWLINK	16
+#define RTM_GETLINK	18
+#define RTM_NEWADDR	20
+#define RTM_GETADDR	22
+
+struct rtattr {
+	unsigned short	rta_len;
+	unsigned short	rta_type;
+};
+
+struct rtgenmsg {
+	unsigned char	rtgen_family;
+};
+
+struct ifinfomsg {
+	unsigned char	ifi_family;
+	unsigned char	__ifi_pad;
+	unsigned short	ifi_type;
+	int		ifi_index;
+	unsigned	ifi_flags;
+	unsigned	ifi_change;
+};
+
+/* linux/if_link.h */
+
+#define IFLA_ADDRESS	1
+#define IFLA_BROADCAST	2
+#define IFLA_IFNAME	3
+#define IFLA_STATS	7
+
+/* linux/if_addr.h */
+
+struct ifaddrmsg {
+	uint8_t		ifa_family;
+	uint8_t		ifa_prefixlen;
+	uint8_t		ifa_flags;
+	uint8_t		ifa_scope;
+	uint32_t	ifa_index;
+};
+
+#define IFA_ADDRESS	1
+#define IFA_LOCAL	2
+#define IFA_LABEL	3
+#define IFA_BROADCAST	4
+
+/* musl */
+
+#define NETLINK_ALIGN(len)	(((len)+3) & ~3)
+#define NLMSG_DATA(nlh)		((void*)((char*)(nlh)+sizeof(struct nlmsghdr)))
+#define NLMSG_DATALEN(nlh)	((nlh)->nlmsg_len-sizeof(struct nlmsghdr))
+#define NLMSG_DATAEND(nlh)	((char*)(nlh)+(nlh)->nlmsg_len)
+#define NLMSG_NEXT(nlh)		(struct nlmsghdr*)((char*)(nlh)+NETLINK_ALIGN((nlh)->nlmsg_len))
+#define NLMSG_OK(nlh,end)	((char*)(end)-(char*)(nlh) >= sizeof(struct nlmsghdr))
+
+#define RTA_DATA(rta)		((void*)((char*)(rta)+sizeof(struct rtattr)))
+#define RTA_DATALEN(rta)	((rta)->rta_len-sizeof(struct rtattr))
+#define RTA_DATAEND(rta)	((char*)(rta)+(rta)->rta_len)
+#define RTA_NEXT(rta)		(struct rtattr*)((char*)(rta)+NETLINK_ALIGN((rta)->rta_len))
+#define RTA_OK(nlh,end)		((char*)(end)-(char*)(rta) >= sizeof(struct rtattr))
+
+#define NLMSG_RTA(nlh,len)	((void*)((char*)(nlh)+sizeof(struct nlmsghdr)+NETLINK_ALIGN(len)))
+#define NLMSG_RTAOK(rta,nlh)	RTA_OK(rta,NLMSG_DATAEND(nlh))
+
+int __rtnetlink_enumerate(int link_af, int addr_af, int (*cb)(void *ctx, struct nlmsghdr *h), void *ctx);
+
+#endif // NETLINK_MUSL_H

network.c

@@ -9,14 +9,34 @@
 #define _GNU_SOURCE
 #endif
 
+#include "types.h"
+
+#if HAVE_GETIFADDR && _WIN32
+#include <iphlpapi.h>
+#endif
+
 #include <string.h>
+
 #ifndef _WIN32
 #include <signal.h>
 #include <unistd.h>
 #include <fcntl.h>
 #include <errno.h>
 #include <netinet/in.h>
-#endif // WIN32
+#include <sys/types.h>
+
+#if HAVE_GETIFADDR
+
+#if __ANDROID__
+#include "ifaddrs-android.h"
+#elif defined(GETIFADDRS_MUSL)
+#include "ifaddrs-musl.h"
+#else // getifaddrs from OS
+#include <ifaddrs.h>
+#endif // getifaddrs from OS
+
+#endif // HAVE_GETIFADDR
+#endif // !WIN32
 
 #include "network.h"
 #include "endian.h"
@@ -147,6 +167,69 @@ int_fast8_t isDisconnected(const SOCKET s)
 }
 
 
+#if !defined(NO_PRIVATE_IP_DETECT)
+// Check, if a sockaddr is a private IPv4 or IPv6 address
+static int_fast8_t isPrivateIPAddress(struct sockaddr* addr, socklen_t* length)
+{
+	union v6addr
+	{
+		uint8_t bytes[16];
+		uint16_t words[8];
+		uint32_t dwords[4];
+		uint64_t qwords[2];
+	};
+
+	if (addr == NULL) return FALSE;
+
+	switch (addr->sa_family)
+	{
+		case AF_INET6:
+		{
+			union v6addr* ipv6addr = (union v6addr*)&((struct sockaddr_in6*)addr)->sin6_addr;
+
+			if
+			(
+					(ipv6addr->qwords[0] != 0 || BE64(ipv6addr->qwords[1]) != 1) && // ::1 IPv6 localhost
+					(BE16(ipv6addr->words[0]) & 0xe000) == 0x2000 // !2000::/3
+			)
+			{
+				return FALSE;
+			}
+
+
+			if (length) *length = sizeof(struct sockaddr_in6);
+			break;
+		}
+
+		case AF_INET:
+		{
+			uint32_t ipv4addr = BE32(((struct sockaddr_in*)addr)->sin_addr.s_addr);
+
+			if
+			(
+				(ipv4addr & 0xff000000) != 0x7f000000 && // 127.x.x.x localhost
+				(ipv4addr & 0xffff0000) != 0xc0a80000 && // 192.168.x.x private routeable
+				(ipv4addr & 0xffff0000) != 0xa9fe0000 && // 169.254.x.x link local
+				(ipv4addr & 0xff000000) != 0x0a000000 && // 10.x.x.x private routeable
+				(ipv4addr & 0xfff00000) != 0xac100000    // 172.16-31.x.x private routeable
+			)
+			{
+				return FALSE;
+			}
+
+			if (length) *length = sizeof(struct sockaddr_in);
+			break;
+		}
+
+		default:
+			return FALSE;
+	}
+
+	return TRUE;
+}
+#endif // !defined(NO_PRIVATE_IP_DETECT)
+
+
 // Connect to TCP address addr (e.g. "kms.example.com:1688") and return an
 // open socket for the connection if successful or INVALID_SOCKET otherwise
 SOCKET connectToAddress(const char *const addr, const int AddressFamily, int_fast8_t showHostName)
@@ -290,6 +373,147 @@ int listenOnAllAddresses()
 #else // !SIMPLE_SOCKETS
 
 
+#if HAVE_GETIFADDR && !defined(NO_PRIVATE_IP_DETECT)
+// Get list of private IP addresses.
+// Returns 0 on success or an errno error code on failure
+void getPrivateIPAddresses(int* numAddresses, char*** ipAddresses)
+{
+#	if _WIN32
+
+	PIP_ADAPTER_ADDRESSES firstAdapter, currentAdapter;
+
+    DWORD dwRetVal = NO_ERROR;
+    ULONG outBufLen = 16384;
+    ULONG flags = GAA_FLAG_SKIP_MULTICAST | GAA_FLAG_SKIP_ANYCAST | GAA_FLAG_SKIP_DNS_SERVER | GAA_FLAG_SKIP_FRIENDLY_NAME;
+
+    firstAdapter = (PIP_ADAPTER_ADDRESSES)vlmcsd_malloc(outBufLen);
+
+    if ((dwRetVal = GetAdaptersAddresses(AF_UNSPEC, flags, NULL, firstAdapter, &outBufLen)) == ERROR_BUFFER_OVERFLOW)
+    {
+    	free(firstAdapter);
+    	firstAdapter = (PIP_ADAPTER_ADDRESSES)vlmcsd_malloc(outBufLen);
+    	dwRetVal = GetAdaptersAddresses(AF_UNSPEC, flags, NULL, firstAdapter, &outBufLen);
+    }
+
+	if (dwRetVal != NO_ERROR)
+	{
+		printerrorf("FATAL: Could not get network address list: %s\n", vlmcsd_strerror(dwRetVal));
+		exit(dwRetVal);
+	}
+
+	for (currentAdapter = firstAdapter, *numAddresses = 0; currentAdapter != NULL; currentAdapter = currentAdapter->Next)
+	{
+		PIP_ADAPTER_UNICAST_ADDRESS_XP currentAddress;
+		int length;
+
+		if (currentAdapter->OperStatus != IfOperStatusUp) continue;
+
+		for (currentAddress = currentAdapter->FirstUnicastAddress; currentAddress != NULL; currentAddress = currentAddress->Next)
+		{
+			if (isPrivateIPAddress(currentAddress->Address.lpSockaddr, &length)) (*numAddresses)++;
+		}
+	}
+
+	*ipAddresses = (char**)vlmcsd_malloc(*numAddresses * sizeof(char*));
+
+	for (currentAdapter = firstAdapter, *numAddresses = 0; currentAdapter != NULL; currentAdapter = currentAdapter->Next)
+	{
+		PIP_ADAPTER_UNICAST_ADDRESS_XP currentAddress;
+		int length;
+
+		if (currentAdapter->OperStatus != IfOperStatusUp) continue;
+
+		for (currentAddress = currentAdapter->FirstUnicastAddress; currentAddress != NULL; currentAddress = currentAddress->Next)
+		{
+			if (!isPrivateIPAddress(currentAddress->Address.lpSockaddr, &length)) continue;
+
+			char *ipAddress = (char*)vlmcsd_malloc(64);
+			int error = getnameinfo(currentAddress->Address.lpSockaddr, currentAddress->Address.iSockaddrLength, ipAddress, 64, NULL, 0, NI_NUMERICHOST);
+
+			if (error)
+			{
+				printerrorf("WARNING: Could not get IP address from interface list: %s\n", gai_strerror(error));
+				*ipAddress = 0;
+			}
+
+			(*ipAddresses)[(*numAddresses)++] = ipAddress;
+		}
+	}
+
+	free(firstAdapter);
+
+#	else // !_WIN32
+
+	struct ifaddrs *addrs, *addr;
+
+	if (getifaddrs(&addrs))
+	{
+		printerrorf("FATAL: Could not get network address list: %s\n", vlmcsd_strerror(errno));
+		exit(errno);
+	}
+
+	socklen_t length;
+
+	for (addr = addrs, *numAddresses = 0; addr != NULL; addr = addr->ifa_next)
+	{
+		if (!isPrivateIPAddress(addr->ifa_addr, &length)) continue;
+		(*numAddresses)++;
+	}
+
+	*ipAddresses = (char**)vlmcsd_malloc(*numAddresses * sizeof(char*));
+
+	for (addr = addrs, *numAddresses = 0; addr != NULL; addr = addr->ifa_next)
+	{
+		if (!isPrivateIPAddress(addr->ifa_addr, &length)) continue;
+
+		char *ipAddress = (char*)vlmcsd_malloc(64);
+		int error = getnameinfo(addr->ifa_addr, length, ipAddress, 64, NULL, 0, NI_NUMERICHOST);
+
+		if (error)
+		{
+			printerrorf("WARNING: Could not get IP address from interface list: %s\n", gai_strerror(error));
+			*ipAddress = 0;
+		}
+
+#		if __UCLIBC__ || __gnu_hurd__
+
+		size_t adrlen = strlen(ipAddress);
+
+		if
+		(
+			addr->ifa_addr->sa_family == AF_INET6 &&
+			adrlen > 5 &&
+			!strchr(ipAddress, '%') &&
+			(BE16(*(uint16_t*)&((struct sockaddr_in6*)addr->ifa_addr)->sin6_addr) & 0xffc0) == 0xfe80
+		)
+		{
+			size_t ifnamelen = strlen(addr->ifa_name);
+			char* workaroundIpAddress = (char*)vlmcsd_malloc(adrlen + ifnamelen + 2);
+			strcpy(workaroundIpAddress, ipAddress);
+			strcat(workaroundIpAddress, "%");
+			strcat(workaroundIpAddress, addr->ifa_name);
+			(*ipAddresses)[(*numAddresses)++] = workaroundIpAddress;
+			free(ipAddress);
+		}
+		else
+		{
+			(*ipAddresses)[(*numAddresses)++] = ipAddress;
+		}
+#		else // !__UCLIBC__
+
+		(*ipAddresses)[(*numAddresses)++] = ipAddress;
+
+#		endif // !__UCLIBC__
+	}
+
+	freeifaddrs(addrs);
+
+#	endif // !_WIN32
+}
+#endif // HAVE_GETIFADDR && !defined(NO_PRIVATE_IP_DETECT)
+
+
+
 // Create a Listening socket for addrinfo sa and return socket s
 // szHost and szPort are for logging only
 static int listenOnAddress(const struct addrinfo *const ai, SOCKET *s)
@@ -576,8 +800,25 @@ static void serveClient(const SOCKET s_client, const DWORD RpcAssocGroup)
 	logger(fIP, connection_type, cAccepted, ipstr);
 	#endif // NO_LOG
 
+#	if !defined(NO_PRIVATE_IP_DETECT)
+
+	if (!(PublicIPProtectionLevel & 2) || isPrivateIPAddress((struct sockaddr*)&addr, NULL))
+	{
+		rpcServer(s_client, RpcAssocGroup, ipstr);
+	}
+#	ifndef NO_LOG
+	else
+	{
+		logger("Client with public IP address rejected\n");
+	}
+#	endif // NO_LOG
+
+#   else // defined(NO_PRIVATE_IP_DETECT)
+
 	rpcServer(s_client, RpcAssocGroup, ipstr);
 
+#	endif // defined(NO_PRIVATE_IP_DETECT)
+
 #	ifndef NO_LOG
 	logger(fIP, connection_type, cClosed, ipstr);
 #	endif // NO_LOG

network.h

@@ -28,6 +28,10 @@ int listenOnAllAddresses();
 BOOL addListeningSocket(const char *const addr);
 __pure int_fast8_t checkProtocolStack(const int addressfamily);
 
+#if HAVE_GETIFADDR
+void getPrivateIPAddresses(int* numAddresses, char*** ipAddresses);
+#endif // HAVE_GETIFADDR
+
 #endif // NO_SOCKETS
 
 int runServer();

output.c

@@ -51,11 +51,14 @@ static void vlogger(const char *message, va_list args)
 	char mbstr[24];
 	#endif
 
-	strftime(mbstr, sizeof(mbstr), "%Y-%m-%d %X", localtime(&now));
+	if (LogDateAndTime)
+		strftime(mbstr, sizeof(mbstr), "%Y-%m-%d %X: ", localtime(&now));
+	else
+		*mbstr = 0;
 
 	#ifndef USE_THREADS
 
-	fprintf(log, "%s: ", mbstr);
+	fprintf(log, "%s", mbstr);
 	vfprintf(log, message, args);
 	fflush(log);
 
@@ -63,12 +66,11 @@ static void vlogger(const char *message, va_list args)
 
 	// We write everything to a string before we really log inside the critical section
 	// so formatting the output can be concurrent
-	strcat(mbstr, ": ");
 	int len = strlen(mbstr);
 	vsnprintf(mbstr + len, sizeof(mbstr) - len, message, args);
 
 	lock_mutex(&logmutex);
-	fputs(mbstr, log);
+	fprintf(log, "%s", mbstr);
 	fflush(log);
 	unlock_mutex(&logmutex);
 
@@ -616,6 +618,17 @@ void printServerFlags()
 		" NO_FREEBIND"
 #		endif //!HAVE_FREEBIND
 
+#		if !HAVE_GETIFADDR
+		" !HAVE_GETIFADDR"
+#		endif // !HAVE_GETIFADDR
+
+#		if HAVE_GETIFADDR && defined(GETIFADDRS_MUSL)
+		" GETIFADDRS=musl"
+#		endif // HAVE_GETIFADDR && defined(GETIFADDRS_MUSL)
+
+#		if defined(NO_PRIVATE_IP_DETECT)
+		" NO_PRIVATE_IP_DETECT"
+#		endif // defined(NO_PRIVATE_IP_DETECT)
 	);
 }
 #endif // NO_VERSION_INFORMATION

shared_globals.c

@@ -24,6 +24,10 @@ int_fast8_t UseRpcBTFN = TRUE;
 const char *defaultport = "1688";
 #endif // NO_SOCKETS
 
+#if !defined(NO_PRIVATE_IP_DETECT)
+uint32_t PublicIPProtectionLevel = 0;
+#endif
+
 KmsResponseParam_t KmsResponseParameters[MAX_KMSAPPS];
 
 #if !defined(NO_SOCKETS) && !defined(NO_SIGHUP) && !defined(_WIN32)
@@ -43,6 +47,7 @@ uint32_t MaxTasks = SEM_VALUE_MAX;
 #endif // !defined(NO_LIMIT) && !defined (NO_SOCKETS) && !__minix__
 
 #ifndef NO_LOG
+int_fast8_t LogDateAndTime = TRUE;
 char *fn_log = NULL;
 int_fast8_t logstdout = 0;
 #ifndef NO_VERBOSE_LOG

shared_globals.h

@@ -42,7 +42,7 @@
 #include <limits.h>
 #include <ctype.h>
 #include <stdarg.h>
-#include <semaphore.h>
+//#include <semaphore.h>
 #include "types.h"
 
 #define MAX_KMSAPPS 3
@@ -102,6 +102,10 @@ extern int_fast8_t UseRpcBTFN;
 extern const char *defaultport;
 #endif // NO_SOCKETS
 
+#if !defined(NO_PRIVATE_IP_DETECT)
+extern uint32_t PublicIPProtectionLevel;
+#endif
+
 #if !defined(NO_SOCKETS) && !defined(NO_SIGHUP) && !defined(_WIN32)
 extern int_fast8_t IsRestarted;
 #endif // !defined(NO_SOCKETS) && !defined(NO_SIGHUP) && !defined(_WIN32)
@@ -115,6 +119,7 @@ extern uint32_t MaxTasks;
 #endif // !defined(NO_LIMIT) && !defined (NO_SOCKETS) && !__minix__
 
 #ifndef NO_LOG
+extern int_fast8_t LogDateAndTime;
 extern char *fn_log;
 extern int_fast8_t logstdout;
 #ifndef NO_VERBOSE_LOG

types.h

@@ -37,10 +37,20 @@
 #endif // _WIN32
 
 
+#if __linux__ // Some versions of uclibc do not define IP_FREEBIND in the correct header file
+#ifndef IP_FREEBIND
+#define IP_FREEBIND 15
+#endif // IP_FREEBIND
+#endif // __linux__
+
 #if (IP_BINDANY || IP_FREEBIND || IPV6_BINDANY || IP_NONLOCALOK) && !defined(NO_FREEBIND) && !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 #define HAVE_FREEBIND 1
 #endif
 
+#if !defined(NO_GETIFADDRS) && !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS) && !defined(NO_SOCKETS) && !defined(NO_PRIVATE_IP_DETECT) 
+#define HAVE_GETIFADDR 1
+#endif 
+
 #ifndef alloca
 #ifdef __GNUC__
 #define alloca(x) __builtin_alloca(x)

vlmcs.1.html

@@ -1,5 +1,5 @@
 <!-- Creator     : groff version 1.22.3 -->
-<!-- CreationDate: Sun Jun  5 14:31:10 2016 -->
+<!-- CreationDate: Wed Jul 13 12:34:01 2016 -->
 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd">
 <html>

vlmcsd-floppy.7

@@ -0,0 +1,292 @@
+.mso www.tmac
+.TH "VLMCSD-FLOPPY" 7 "June 2016" "Hotbird64" "KMS Activation Manual"
+.LO 8
+
+.SH NAME
+floppy144.vfd \- a bootable floppy disk with Linux and \fBvlmcsd\fR(8)
+
+.SH DESCRIPTION
+\fBfloppy144.vfd\fR is an image of a bootable floppy that contains a minimal version of Linux and \fBvlmcsd\fR(8). It requires only 16 MB of RAM. Its primary purpose is to run \fBvlmcsd\fR(8) in a small virtual machine which makes it easy to use \fBvlmcsd\fR(8) to activate the virtual machine's host computer which is not possible in Windows 8.1 and up. The floppy image is a standard 3,5" floppy with 1.44 MB storage. It is formatted with a FAT12 filesystem. The floppy can be mounted to apply several customizations.
+
+.SH SUPPORTED HYPERVISORS
+The floppy image has been tested with the following hypervisors:
+.IP
+VMWare, VirtualBox, Hyper-V and QEMU
+
+.RE
+Others are likely to work.
+
+.SH SETUP
+Create a new virtual machine. Assign 16 MB of RAM. Add a floppy drive and attach \fBfloppy144.vfd\fR to this drive. Do not create a virtual hard disk. Setup the virtual machine to boot from a floppy drive (VirtualBox has floppy boot disabled by default). If possible, setup a virtual machine with plain old BIOS (not UEFI). If you created an UEFI virtual machine, enable the compatibility support mode (CSM) to allow a BIOS compatible boot. Set number of CPUs to 1. The Linux kernel is not capable of SMP. Remove IDE, SATA, SCSI and USB support if possible. The Linux kernel can't handle this and ignores any devices connected to these buses.
+
+Setup an ethernet card. The following models are supported:
+.IP
+Intel PRO/1000
+.br
+AMD PCNET III
+.br
+AMD PCNET32
+.br
+VMWare vmxnet3 (paravirtualized driver used by VMWare)
+.br
+virtio (paravirtualized driver used by VirtualBox, QEMU, KVM and lguest)
+
+.RE
+Most hypervisors emulate an Intel PRO/1000 or AMD PCNET32 by default. Selecting a paravirtualized driver slightly improves performance. In VirtualBox you can simply select virtio in the network configuration dialog. VMWare requires that you add or change the VMX file. Use 'ethernet0.virtualDev\ =\ "vmxnet3"' in your VMWare config file.
+
+If you are using QEMU, you must also setup a TAP adapter. Port redirection does not work to activate your own computer.
+
+.SH CONFIGURATION
+\fBfloppy144.vfd\fR can be customized to fit your needs. This is done by editing the file syslinux.cfg on the floppy image. The floppy image must be mounted. Under Linux you can simply attach \fBfloppy144.vfd\fR to a loop device which is mountable like any other block device. For Windows you must use some software that allows mounting a floppy image, e.g.
+.URL http://www.osforensics.com/tools/mount-disk-images.html OSFMount ""
+
+OSFMount works under all Windows versions beginning with Windows XP up to Windows 10 (32- and 64-bit).
+
+The default syslinux.cfg file looks like this:
+.IP
+.br
+.SM
+prompt 0
+.br
+.SM
+TIMEOUT 50
+.br
+.SM
+default dhcp
+.br
+
+.SM
+LABEL dhcp
+.br
+.SM
+\0\0KERNEL bzImage
+.br
+.SM
+\0\0APPEND vga=773 quiet initrd=initrd KBD=us LISTEN=[::]:1688,0.0.0.0:1688 TZ=UTC0 IPV4_CONFIG=DHCP NTP_SERVER=pool.ntp.org HOST_NAME=vlmcsd ROOT_PASSWORD=vlmcsd USER_NAME=user USER_PASSWORD=vlmcsd GUEST_PASSWORD=vlmcsd INETD=Y WINDOWS=06401-00206-271-395032-03-1033-9600.0000-1652016 OFFICE2010=06401-00096-199-204970-03-1033-9600.0000-1652016 OFFICE2013=06401-00206-234-921934-03-1033-9600.0000-1652016 HWID=36:4F:46:3A:88:63:D3:5F
+
+.SM
+LABEL static
+.br
+.SM
+\0\0KERNEL bzImage
+.br
+.SM
+\0\0APPEND vga=773 quiet initrd=initrd KBD=fr LISTEN=[::]:1688,0.0.0.0:1688 TZ=CET-1CEST,M3.5.0,M10.5.0/3 IPV4_CONFIG=STATIC IPV4_ADDRESS=192.168.20.123/24 IPV4_GATEWAY=192.168.20.2 IPV4_DNS1=192.168.20.2 IPV4_DNS2=NONE NTP_SERVER=pool.ntp.org HOST_NAME=vlmcsd ROOT_PASSWORD=vlmcsd USER_NAME=user USER_PASSWORD=vlmcsd GUEST_PASSWORD=vlmcsd INETD=Y
+
+.PP
+There are two configurations in this files: \fIdhcp\fR (for configuring the IPv4 network via DHCP) and \fIstatic\fR (for a static IPv4 configuration). The kernel always boots the \fIdhcp\fR configuration without asking (lines 'prompt 0' and 'default dhcp'). You can simply change the default configuration to \fIstatic\fR and then customize the APPEND line in the \fIstatic\fR configuration. For more details how to customize the syslinux.cfg file see \fBsyslinux\fR(1).
+
+Each APPPEND line contains one or more items seperated by spaces. \fBAll items are case-sensitive\fR. The following parameters can be customized:
+
+.IP \fBvga=\fIvesa-video-mode\fR
+Sets the VESA display mode for the virtual machine. The parameter is not optional. If you ommit it, you will not see anything on the screen. 773 means 1024x768 with 256 colors. See
+.URL https://en.wikipedia.org/wiki/VESA_BIOS_Extensions#Linux_video_mode_numbers Wikipedia ""
+for more video modes. Note that all 16 color (4-bit) modes will not work. Use 8-bit (256 colors), 16-bit (65536 colors), 24-bit and 32-bit (> 16 Million colors) only. All modes above 1280x1024 are non-VESA-standard and vary for all (virtual) graphic cards.
+
+.IP \fBquiet\fR
+This causes the kernel not display the its log during boot. You may omit \fBquiet\fR but it doesn't make much sense. The boot log is actually very verbose and scrolls away from screen quickly. If any errors occur during boot, they will be displayed even if \fBquiet\fR is present in the APPEND line. You may evaluate the complete boot log later by using the dmesg command or the menu on /dev/tty8.
+
+.IP "\fBinitrd=\fIinitial-ram-disk-file\fR"
+This defines the initial ram disk that the kernel will read. There is only one initial ram disk on the floppy thus leave \fIinitrd=initrd\fR as it is.
+
+.IP "\fBKBD=\fIkeyboard-layout-name\fR"
+This allows you to select the keyboard layout. \fIkeyboard-layout-name\fR is usually the ISO 3166-1 (top level domain) code for a country. A list of valid \fIkeyboard-layout-name\fRs can be accessed via the menu system on /dev/tty8 (press ALT-F8). Note, that this is a keyboard driver only. There is no Unicode font support in \fBfloppy144.vfd\fR (due to the fact that the kernel uses a generic VESA framebuffer device only). Characters beyond ASCII work for Western European languages only but not Eastern European, Greek, Cyrillic, Arabic, Hebrew, CJK and other languages. There is no need in \fBfloppy144.vfd\fR to enter any characters outside ASCII. The purpose of the keyboard maps are that you will find characters like dash, backslash, brackets, braces, etc. at the usual place on your keyboard.
+
+.IP "\fBLISTEN=\fRPRIVATE[:\fItcp-port\fR] | \fIip-address\fR[:\fItcp-port\fR][,\fIip-address\fR[:\fItcp-port\fR]][,...]"
+One or more combinations of IP addresses and optional TCP port seperated by commas that \fBvlmcsd\fR(8) should listen on or PRIVATE to listen on all private IP addresses only. The default port is 1688. If you use an explicit port number, append it to the IP address seperated by a colon. If you use a port number and the IP address contains colons, you must enclose the IP address in brackets. For example \fI192.168.0.2,[fd00::dead:beef]:5678\fR causes \fBvlmcsd\fR(8) to listen on 192.168.0.2 port 1688 and fd00::dead:beef port 5678.
+
+.IP "\fBWINDOWS=\fIepid\fR"
+Defines the ePID that is used for Windows activations. If you ommit this parameter, vlmcsd generates a random ePID when it is started.
+
+.IP "\fBOFFICE2010=\fIepid\fR"
+Defines the ePID that is used for Office 2010 activations. If you ommit this parameter, \fBvlmcsd\fR(8) generates a random ePID when it is started.
+
+.IP "\fBOFFICE2013=\fIepid\fR"
+Defines the ePID that is used for Office (versions 2013 and greater) activations. If you ommit this parameter, \fBvlmcsd\fR(8) generates a random ePID when it is started.
+
+.IP "\fBHWID=\fIhwid\fR"
+Defines the HwId that is sent to clients. \fIhwid\fR must be specified as 16 hex digits that are interpreted as a series of 8 bytes (big endian). Any character that is not a hex digit will be ignored. This is for better readability.
+
+.IP "\fBTZ=\fIposix-time-zone-string\fR"
+Set the time zone to \fIposix-time-zone-string\fR. It must conform to the
+.URL http://pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap08.html POSIX
+specification. Simplified time zone strings like "Europe/London" or "America/Detroit" are not allowed. This has the very simple reason that there is no space on the floppy to store the time zone database.
+
+The string \fICET-1CEST,M3.5.0,M10.5.0/3\fR (most countries in Europe) reads as follows:
+.RS 7
+.IP \fICET\fR 10
+The standard (winter) time zone has the name CET.
+.IP \fI-1\fR 10
+The standard time zone is one hour east of UTC. Negative numbers are east of UTC. Positive numbers are west of UTC.
+.IP \fICEST\fR 10
+The daylight saving (summer) time zone has the name CEST.
+.IP \fIM3.5.0\fR 10
+Daylight saving time starts in the 3rd month (March) on the 5th (=last) occurence of weekday 0 (Sunday) at 2 o'clock (2 o'clock is a default value).
+.IP \fIM10.5.0/3\fR 10
+Daylight saving time ends in the 10th month (October) on the 5th (=last) occurence of weekday 0 (Sunday) at 3 o'clock.
+.RE
+.IP
+If you don't have daylight saving time, things are easier. For Chinese Standard Time for example, just use \fICST-8\fR as the time zone string.
+
+On a Linux desktop system, you can use a command like \fBstrings\ /usr/share/zoneinfo/America/New_York\ |\ tail\ -n1\fR. This should return \fIEST5EDT,M3.2.0,M11.1.0\fR. You can use the returned string for the \fBTZ=\fIposix-time-zone-string\fR parameter.
+
+.IP "\fBIPV4_CONFIG=\fRDHCP | STATIC\fR"
+This determines how you want to configure IPv4 networking. If you use \fBIPV4_CONFIG=\fRSTATIC, you must supply additional paramaters to the APPEND command line.
+
+.IP "\fBIPV4_ADDRESS=\fIipv4-address\fR/\fICIDR-mask\fR"
+Use \fIipv4-address\fR with netmask \fICIDR-mask\fR for static IPv4 configuration. The netmask must not be ommitted. For IPv4 address 192.168.12.17 with a netmask of 255.255.255.0 use \fI192.168.12.17/24\fR. For IPv4 address 10.4.0.8 with a netmask of 255.255.0.0 use 10.4.0.8/16. This paramater is ignored, if you used \fBIPV4_CONFIG=\fRDHCP.
+
+.IP "\fBIPV4_GATEWAY=\fIipv4-address\fR | NONE"
+Use \fIipv4-address\fR as the default gateway. This is usually the IPv4 address of your router. You may specify NONE explicitly for no gateway. In this case your virtual machine is only visible on its local LAN. This paramater is ignored, if you used \fBIPV4_CONFIG=\fRDHCP.
+
+.IP "\fBIPV4_DNS1=\fIipv4-address\fR | NONE"
+Use \fIipv4-address\fR as the primary name server. In home networks this is often the IPv4 address of your router. You may specify NONE explicitly. If you specified NONE for both \fBIPV4_DNS1=\fR and \fBIPV4_DNS2=\fR, your virtual machine cannot resolve host names to IP addresses. While \fBvlmcsd\fR(8) works perfectly without DNS servers, you must use IP addresses when referring to a host, e.g. for specifying an NTP server. This paramater is ignored, if you used \fBIPV4_CONFIG=\fRDHCP.
+
+.IP "\fBIPV4_DNS2=\fIipv4-address\fR | NONE"
+Use \fIipv4-address\fR as the secondary name server. It serves as a backup if the primary name server is not available. Home networks often don't have a secondary name server. In this case set this to NONE. This paramater is ignored, if you used \fBIPV4_CONFIG=\fRDHCP.
+
+.IP "\fBNTP_SERVER=\fIhost-name\fR | \fIipv4-address\fR | NONE"
+This sets the name of a time server using the NTP protocol. If your virtualization environment reliably provides time, you can set this to NONE. Don't use a public time service like pool.ntp.org or time.nist.gov if you have a (at least somewhat reliable) NTP server in your LAN.
+
+.IP "\fBHOST_NAME=\fIhost-name\fR"
+Sets the local host name for your virtual machine. It can be a single name or a fully-qualified domain name FQDN. If you used \fBIPV4_CONFIG=\fRDHCP and your DHCP server returns a domain name, the domain part of an FQDN will be replaced by that name. This host name or host part of an FQDN will not replaced by a host name returned via DHCP. The host name is not important for the operation of \fBfloppy144.vfd\fR.
+
+.IP "\fBROOT_PASSWORD=\fIpassword\fR"
+Sets the password of the root user.
+
+.IP "\fBUSER_NAME=\fIusername\fR"
+Sets the name of for a general user with no special privileges. This user can login but can't do much.
+
+.IP "\fBUSER_PASSWORD=\fIpassword\fR"
+Sets the password for the user defined by \fBUSER_NAME=\fIusername\fR.
+
+.IP "\fBGUEST_PASSWORD=\fIpassword\fR"
+Sets the password for the pre-defined guest user. This user has the same priviliges (none) as the user defined by \fBUSER_NAME=\fIusername\fR.
+
+.IP "\fBINETD=\fRY | N"
+\fBINETD=\fRY specifies that \fBinetd\fR(8) should automatically be started. That means you can telnet and ftp to your virtual machine.
+
+.SH OPERATION
+
+.SS Diskless System
+The \fBfloppy144.vfd\fR virtual machine is a diskless system that works entirely from RAM. The file system is actually a RAM disk that is created from the \fBinitrd\fR(4) file on the floppy image.
+
+Anything you'll do from inside the virtual machine, for instance editing a config file, will be lost when you reboot the machine. So, if you ever asked yourself if \fBrm -fr /\fR (root privileges required) really deletes all files from all mounted partitions, the \fBfloppy144.vfd\fR VM is the right place to test it (Yes, it does).
+
+The VM uses a RAM disk, because the Linux kernel had to be stripped down to essential features to fit on a 1.44 MB floppy. It has no floppy driver, no disk file system drivers and no block layer (cannot use disks of any type).
+
+.SS System startup
+The kernel boots up very quickly and the init script (/sbin/init) waits 5 seconds. In these 5 seconds you can:
+.IP
+Press 'm' to manually enter the time zone and the IPv4 parameters. These will be queried interactively.
+.br
+Press 't' to manually enter the time zone only.
+.br
+Press 's' to escape to a shell.
+.RE
+
+If you don't want to 5 seconds for continuing the init process, you can press any other key to speed things up. At the end of the init script you should see that\fBvlmcsd\fR(8) has started. You should also see the IP addresses and all user names and passwords.
+
+.SS Logging into the system
+There are 5 local logins provided on /dev/tty2 to /dev/tty6. To switch to these logins, simply press ALT\-F2 to ALT\-F6. To return to the console on /dev/tty1, press ALT\-F1. If \fBinetd\fR(8) is running you can also use \fBtelnet\fR(1). This allows you use a terminal program (e.g. putty) that can utilize your keyboard layout, can be resized and has full UTF-8 support. The local terminals support US keyboard layout only. Please be aware that \fBtelnet\fR(1) is unencrypted and everything including passwords is transmitted in clear text. There is not enough space for an ssh server like \fBsshd\fR(8) or \fBdropbear\fR(8).
+
+The floppy image only provides basic Unix commands. Type \fIbusybox\fR or \fIll /bin\fR to get a list. The only editor available is \fBvi\fR(1). If you don't like vi, you may transfer config files via \fBftp\fR(1) edit them with the editor of your choice and transfer them back to the \fBfloppy144.vfd\fR VM.
+
+.SS The menu system
+You'll find a menu system on /dev/tty8 (press ALT\-F8 to see it). It allows you performing some administrative tasks and to view various system information. It is mainly for users that do not have much experience with Unix commands.
+
+.IP "\fB1) (Re)start vlmcsd\fR"
+Starts or restarts \fBvlmcsd\fR(8). This is useful if you changed \fB/etc/vlmcsd.ini\fR(5).
+
+.IP "\fB2) Stop vlmcsd\fR"
+Stops \fBvlmcsd\fR(8).
+
+.IP "\fB3) (Re)start inetd\fR"
+Starts or restarts \fBinetd\fR(8). If \fBinetd\fR(8) is restarted, current clients connected via \fBtelnet\fR(1) or \fBftp\fR(1) will \fBnot\fR be dropped. They can continue their sessions. This is useful if you changed \fB/etc/inetd.conf\fR(5).
+
+.IP "\fB4) Stop inet\fR"
+Stops \fBinetd\fR(8). All clients connected via \fBtelnet\fR(1) or \fBftp\fR(1) will be dropped immediately.
+
+.IP "\fB5) Change the time zone\fR"
+Just in case you missed pressing 't' during system startup. This also restarts \fBvlmcsd\fR(8) if it was running to notify it that the time zone has changed. Restarting \fBvlmcsd\fR(8) allows currently connected clients to finish their activation.
+
+.IP "\fBk) Change keyboard layout\fR"
+This allows you to select a different keyboard layout.
+
+.IP "\fB6) Show all kernel boot parameters\fR"
+Shows all parameters passed to the kernel via syslinux.cfg. If you experience any unexpected behavior, you can use this to check if your APPEND line in syslinux.cfg is correct. The output is piped through \fBless(1)\fR. So press 'q' to return to the menu.
+
+.IP "\fB7) Show boot log (dmesg)\fR"
+Shows the boot log of the kernel. The output is piped through \fBless(1)\fR. So press 'q' to return to the menu.
+
+.IP "\fB8) Show TCP/IP configuration\fR"
+Shows the TCP/IP configuration, listening sockets and current TCP and UDP connections. Useful, if you problems with net connectivity. The output is piped through \fBless(1)\fR. So press 'q' to return to the menu.
+
+.IP "\fB9) Show running processes\fR"
+Shows all processes including memory and CPU usage. Display will updated every second. Press 'q' or CTRL-C to return to the menu.
+
+.IP "\fBs) Shutdown\fR"
+Shuts down the \fBfloppy144.vfd\fR virtual machine. Proper shutdown is not required. It is ok to use a hard power off in your virtualization program.
+
+.IP "\fBr) Reboot\fR"
+Reboots the \fBfloppy144.vfd\fR virtual machine. Proper reboot is not required. It is ok to use a hard reset in your virtualization program.
+
+.SH PERMANENT CHANGES OF INITRD
+If you want to change any file or script of the file system (e.g. the init script /sbin/init or /etc/vlmcsd.ini), you'll need to mount the floppy image, unpack the \fBinitrd\fR(4) file, make any modfications you like, create a new \fBinitrd\fR(4) file and copy it to the mounted floppy.
+
+To unpack the \fBinitrd\fR(4) file you'll need \fBxz\fR(1) (or \fBlzma\fR(1) on older unix-like OSses) and \fBcpio\fR(1). These can be installed using your package manager on all major distros. It is ok to use the BSD version of \fBcpio\fR(1). No need to get the GNU version for BSD users.
+Provided the floppy is mounted in /mnt/floppy do the following:
+.IP "Create an empty directory"
+mkdir ~/vlmcsd-floppy-initrd
+.IP "cd into that directory"
+cd ~/vlmcsd-floppy-initrd
+.IP "Unpack initrd"
+cat /mnt/floppy/initrd | unlzma | cpio -i
+
+.RE
+After applying your changes build a new \fBinitrd\fR(4) file:
+
+.IP "cd into your directory"
+cd ~/vlmcsd-floppy-initrd
+.IP "Create the packed file"
+find . | cpio -o -H newc | lzma > /mnt/floppy/initrd
+
+.RE
+Do not try to use 'lzma -9' to achive better compression. The kernel can't read the resulting file. While customizing the \fBinitrd\fR(4) file works on almost any unix-like OS, it does not work on Windows even not with Cygwin. The reason is that the NTFS file system can't handle uids and gids. These cannot be preserved when unpacking the \fBcpio\fR(1) archive to NTFS. If you use the WSL subsystem of Windows 10 Redstone (Anniversary Update) and later, you must make sure to unpack the \fBinitrd\fR(4) file to a directory on VolFs (normally everything that is \fBnot\fR mounted under /mnt). The \fBinitrd\fR(4) file can be on a VolFs or DriveFs.
+
+.SH FAQ
+.SS On what distro is the floppy image based?
+None. Besides the boot loader \fBldlinux.sys\fR, there are only three binaries: The Linux kernel \fBbzImage\fR, \fBbusybox\fR(1) and \fBvlmcsdmulti-x86-musl-static\fR. \fBbzImage\fR and \fBbusybox\fR(1) have been compiled with carefully selected configuration parameters not found in any distro. This was neccesary to fit everything on a 1.44 MB floppy.
+
+.SS Why is a rather old Linux kernel (3.12) used?
+Linux 3.12 is the last kernel that can be booted with 16 MB of RAM. Beginning with Linux 3.13 it requires much more memory (about 80 MB) to boot. The floppy image is regularly tested with newer kernels. Everything works except that you need to assign much more main memory to the virtual machine.
+
+.SS Can the floppy be booted on bare metal?
+Basically yes. However, only Intel Pro/1000 and AMD PCNET32 ethernet cards are supported by the kernel. In addition there is no USB support compiled into the kernel. That means you can only use an IBM AT or IBM PS/2 keyboard which are not available on newer hardware. 
+
+.SH FILES
+\fBsyslinux.cfg\fR, \fBvlmcsd.ini\fR(5)
+
+.SH BUGS
+IPv6 cannot be configured with static or manual parameters.
+.br
+DHCPv6 is not supported.
+.br
+\'ip route add ...' does not work. Use 'route add ...' instead.
+
+.SH AUTHOR
+\fBfloppy144.vfd\fR has been created by Hotbird64
+
+.SH CREDITS
+Linus Torvalds et al. for the Linux kernel
+.br
+Erik Andersen et al. for the original uClibc
+.br
+Waldemar Brodkorb et al. for uClibc-ng
+.br
+Denys Vlasenko et al. for BusyBox
+.br
+H. Peter Anvin et al. for SYSLINUX
+
+.SH SEE ALSO
+\fBvlmcsd\fR(8), \fBvlmcsd.ini\fR(5), \fBinitrd\fR(4), \fBbusybox\fR(1), \fBsyslinux(1)\fR

vlmcsd-floppy.7.dos.txt

@@ -0,0 +1,530 @@
+VLMCSD-FLOPPY(7)             KMS Activation Manual            VLMCSD-FLOPPY(7)
+
+
+
+NAME
+       floppy144.vfd - a bootable floppy disk with Linux and vlmcsd(8)
+
+
+DESCRIPTION
+       floppy144.vfd  is an image of a bootable floppy that contains a minimal
+       version of Linux and vlmcsd(8). It requires only 16 MB of RAM. Its pri‐
+       mary purpose is to run vlmcsd(8) in a small virtual machine which makes
+       it easy to use vlmcsd(8) to activate the virtual  machine's  host  com‐
+       puter  which is not possible in Windows 8.1 and up. The floppy image is
+       a standard 3,5" floppy with 1.44 MB storage. It  is  formatted  with  a
+       FAT12 filesystem. The floppy can be mounted to apply several customiza‐
+       tions.
+
+
+SUPPORTED HYPERVISORS
+       The floppy image has been tested with the following hypervisors:
+
+              VMWare, VirtualBox, Hyper-V and QEMU
+
+       Others are likely to work.
+
+
+SETUP
+       Create a new virtual machine. Assign 16 MB of RAM. Add a  floppy  drive
+       and  attach  floppy144.vfd  to this drive. Do not create a virtual hard
+       disk. Setup the virtual machine to boot from a floppy drive (VirtualBox
+       has  floppy  boot  disabled  by  default). If possible, setup a virtual
+       machine with plain old BIOS (not UEFI). If you created an UEFI  virtual
+       machine,  enable  the  compatibility support mode (CSM) to allow a BIOS
+       compatible boot. Set number of CPUs to 1. The Linux kernel is not capa‐
+       ble  of  SMP.  Remove  IDE, SATA, SCSI and USB support if possible. The
+       Linux kernel can't handle this and ignores  any  devices  connected  to
+       these buses.
+
+       Setup an ethernet card. The following models are supported:
+
+              Intel PRO/1000
+              AMD PCNET III
+              AMD PCNET32
+              VMWare vmxnet3 (paravirtualized driver used by VMWare)
+              virtio (paravirtualized driver used by VirtualBox, QEMU, KVM and
+              lguest)
+
+       Most hypervisors emulate an Intel PRO/1000 or AMD PCNET32  by  default.
+       Selecting  a  paravirtualized  driver slightly improves performance. In
+       VirtualBox you can simply select virtio in  the  network  configuration
+       dialog.  VMWare requires that you add or change the VMX file. Use 'eth‐
+       ernet0.virtualDev = "vmxnet3"' in your VMWare config file.
+
+       If you are using QEMU, you must also setup a TAP  adapter.  Port  redi‐
+       rection does not work to activate your own computer.
+
+
+CONFIGURATION
+       floppy144.vfd  can  be  customized  to  fit your needs. This is done by
+       editing the file syslinux.cfg on the floppy  image.  The  floppy  image
+       must  be  mounted. Under Linux you can simply attach floppy144.vfd to a
+       loop device which is mountable like any other block device. For Windows
+       you must use some software that allows mounting a floppy image, e.g.
+       OSFMount ⟨http://www.osforensics.com/tools/mount-disk-images.html⟩
+
+       OSFMount works under all Windows versions beginning with Windows XP  up
+       to Windows 10 (32- and 64-bit).
+
+       The default syslinux.cfg file looks like this:
+
+              prompt 0
+              TIMEOUT 50
+              default dhcp
+
+              LABEL dhcp
+                KERNEL bzImage
+                APPEND     vga=773    quiet    initrd=initrd    KBD=us    LIS‐
+              TEN=[::]:1688,0.0.0.0:1688       TZ=UTC0        IPV4_CONFIG=DHCP
+              NTP_SERVER=pool.ntp.org   HOST_NAME=vlmcsd  ROOT_PASSWORD=vlmcsd
+              USER_NAME=user    USER_PASSWORD=vlmcsd     GUEST_PASSWORD=vlmcsd
+              INETD=Y WINDOWS=06401-00206-271-395032-03-1033-9600.0000-1652016
+              OFFICE2010=06401-00096-199-204970-03-1033-9600.0000-1652016
+              OFFICE2013=06401-00206-234-921934-03-1033-9600.0000-1652016
+              HWID=36:4F:46:3A:88:63:D3:5F
+
+              LABEL static
+                KERNEL bzImage
+                APPEND    vga=773    quiet    initrd=initrd    KBD=fr     LIS‐
+              TEN=[::]:1688,0.0.0.0:1688         TZ=CET-1CEST,M3.5.0,M10.5.0/3
+              IPV4_CONFIG=STATIC   IPV4_ADDRESS=192.168.20.123/24   IPV4_GATE‐
+              WAY=192.168.20.2      IPV4_DNS1=192.168.20.2      IPV4_DNS2=NONE
+              NTP_SERVER=pool.ntp.org  HOST_NAME=vlmcsd   ROOT_PASSWORD=vlmcsd
+              USER_NAME=user     USER_PASSWORD=vlmcsd    GUEST_PASSWORD=vlmcsd
+              INETD=Y
+
+
+       There are two configurations in this files: dhcp (for  configuring  the
+       IPv4  network  via  DHCP) and static (for a static IPv4 configuration).
+       The kernel always boots the dhcp configuration  without  asking  (lines
+       'prompt  0' and 'default dhcp'). You can simply change the default con‐
+       figuration to static and then customize the APPEND line in  the  static
+       configuration.  For more details how to customize the syslinux.cfg file
+       see syslinux(1).
+
+       Each APPPEND line contains one or more items seperated by  spaces.  All
+       items are case-sensitive. The following parameters can be customized:
+
+
+       vga=vesa-video-mode
+              Sets  the VESA display mode for the virtual machine. The parame‐
+              ter is not optional. If you ommit it, you will not see  anything
+              on the screen. 773 means 1024x768 with 256 colors. See Wikipedia
+              ⟨https://en.wikipedia.org/wiki/
+              VESA_BIOS_Extensions#Linux_video_mode_numbers⟩  for  more  video
+              modes. Note that all 16 color (4-bit) modes will not  work.  Use
+              8-bit  (256 colors), 16-bit (65536 colors), 24-bit and 32-bit (>
+              16 Million colors) only. All modes above 1280x1024 are non-VESA-
+              standard and vary for all (virtual) graphic cards.
+
+
+       quiet  This  causes the kernel not display the its log during boot. You
+              may omit quiet but it doesn't make much sense. The boot  log  is
+              actually  very  verbose and scrolls away from screen quickly. If
+              any errors occur during boot, they will  be  displayed  even  if
+              quiet  is  present in the APPEND line. You may evaluate the com‐
+              plete boot log later by using the dmesg command or the  menu  on
+              /dev/tty8.
+
+
+       initrd=initial-ram-disk-file
+              This  defines  the  initial  ram disk that the kernel will read.
+              There is only one initial ram disk on the floppy thus leave ini‐
+              trd=initrd as it is.
+
+
+       KBD=keyboard-layout-name
+              This  allows you to select the keyboard layout. keyboard-layout-
+              name is usually the ISO 3166-1 (top level  domain)  code  for  a
+              country.  A  list of valid keyboard-layout-names can be accessed
+              via the menu system on /dev/tty8 (press ALT-F8). Note, that this
+              is  a  keyboard driver only. There is no Unicode font support in
+              floppy144.vfd (due to the fact that the kernel  uses  a  generic
+              VESA  framebuffer device only). Characters beyond ASCII work for
+              Western European languages only but not Eastern European, Greek,
+              Cyrillic,  Arabic,  Hebrew, CJK and other languages. There is no
+              need in floppy144.vfd to enter any characters outside ASCII. The
+              purpose  of  the keyboard maps are that you will find characters
+              like dash, backslash, brackets, braces, etc. at the usual  place
+              on your keyboard.
+
+
+       LISTEN=PRIVATE[:tcp-port]   |   ip-address[:tcp-port][,ip-address[:tcp-
+       port]][,...]
+              One or more combinations of IP addresses and optional  TCP  port
+              seperated  by  commas that vlmcsd(8) should listen on or PRIVATE
+              to listen on all private IP addresses only. The default port  is
+              1688.  If  you  use an explicit port number, append it to the IP
+              address seperated by a colon. If you use a port number  and  the
+              IP  address  contains colons, you must enclose the IP address in
+              brackets. For example 192.168.0.2,[fd00::dead:beef]:5678  causes
+              vlmcsd(8) to listen on 192.168.0.2 port 1688 and fd00::dead:beef
+              port 5678.
+
+
+       WINDOWS=epid
+              Defines the ePID that is used for Windows  activations.  If  you
+              ommit  this parameter, vlmcsd generates a random ePID when it is
+              started.
+
+
+       OFFICE2010=epid
+              Defines the ePID that is used for Office  2010  activations.  If
+              you ommit this parameter, vlmcsd(8) generates a random ePID when
+              it is started.
+
+
+       OFFICE2013=epid
+              Defines the ePID that is used  for  Office  (versions  2013  and
+              greater)  activations.  If  you  ommit this parameter, vlmcsd(8)
+              generates a random ePID when it is started.
+
+
+       HWID=hwid
+              Defines the HwId that is sent to clients. hwid must be specified
+              as  16  hex  digits  that are interpreted as a series of 8 bytes
+              (big endian). Any character that is not  a  hex  digit  will  be
+              ignored. This is for better readability.
+
+
+       TZ=posix-time-zone-string
+              Set  the time zone to posix-time-zone-string. It must conform to
+              the POSIX ⟨http://pubs.opengroup.org/onlinepubs/009695399/
+              basedefs/xbd_chap08.html⟩  specification.  Simplified  time zone
+              strings  like  "Europe/London"  or  "America/Detroit"  are   not
+              allowed.  This has the very simple reason that there is no space
+              on the floppy to store the time zone database.
+
+              The string CET-1CEST,M3.5.0,M10.5.0/3 (most countries in Europe)
+              reads as follows:
+
+              CET       The standard (winter) time zone has the name CET.
+
+              -1        The  standard time zone is one hour east of UTC. Nega‐
+                        tive numbers are east of  UTC.  Positive  numbers  are
+                        west of UTC.
+
+              CEST      The  daylight  saving  (summer) time zone has the name
+                        CEST.
+
+              M3.5.0    Daylight saving time starts in the 3rd  month  (March)
+                        on  the 5th (=last) occurence of weekday 0 (Sunday) at
+                        2 o'clock (2 o'clock is a default value).
+
+              M10.5.0/3 Daylight saving time ends in the 10th month  (October)
+                        on  the 5th (=last) occurence of weekday 0 (Sunday) at
+                        3 o'clock.
+
+              If you don't have daylight saving time, things are  easier.  For
+              Chinese  Standard  Time  for example, just use CST-8 as the time
+              zone string.
+
+              On  a  Linux  desktop  system,  you  can  use  a  command   like
+              strings /usr/share/zoneinfo/America/New_York | tail -n1.    This
+              should return EST5EDT,M3.2.0,M11.1.0. You can use  the  returned
+              string for the TZ=posix-time-zone-string parameter.
+
+
+       IPV4_CONFIG=DHCP | STATIC
+              This  determines  how  you want to configure IPv4 networking. If
+              you use IPV4_CONFIG=STATIC, you  must  supply  additional  para‐
+              maters to the APPEND command line.
+
+
+       IPV4_ADDRESS=ipv4-address/CIDR-mask
+              Use ipv4-address with netmask CIDR-mask for static IPv4 configu‐
+              ration. The netmask must  not  be  ommitted.  For  IPv4  address
+              192.168.12.17    with    a    netmask   of   255.255.255.0   use
+              192.168.12.17/24. For IPv4 address 10.4.0.8 with  a  netmask  of
+              255.255.0.0  use  10.4.0.8/16. This paramater is ignored, if you
+              used IPV4_CONFIG=DHCP.
+
+
+       IPV4_GATEWAY=ipv4-address | NONE
+              Use ipv4-address as the default gateway.  This  is  usually  the
+              IPv4 address of your router. You may specify NONE explicitly for
+              no gateway. In this case your virtual machine is only visible on
+              its  local LAN. This paramater is ignored, if you used IPV4_CON‐
+              FIG=DHCP.
+
+
+       IPV4_DNS1=ipv4-address | NONE
+              Use ipv4-address as the primary name server.  In  home  networks
+              this  is  often the IPv4 address of your router. You may specify
+              NONE explicitly. If you specified NONE for both  IPV4_DNS1=  and
+              IPV4_DNS2=, your virtual machine cannot resolve host names to IP
+              addresses. While vlmcsd(8) works perfectly without DNS  servers,
+              you  must  use  IP  addresses when referring to a host, e.g. for
+              specifying an NTP server. This paramater is ignored, if you used
+              IPV4_CONFIG=DHCP.
+
+
+       IPV4_DNS2=ipv4-address | NONE
+              Use  ipv4-address  as  the secondary name server. It serves as a
+              backup if the primary name server is not  available.  Home  net‐
+              works often don't have a secondary name server. In this case set
+              this to NONE. This paramater is ignored, if you  used  IPV4_CON‐
+              FIG=DHCP.
+
+
+       NTP_SERVER=host-name | ipv4-address | NONE
+              This  sets  the name of a time server using the NTP protocol. If
+              your virtualization environment reliably provides time, you  can
+              set  this  to  NONE.  Don't  use  a  public  time  service  like
+              pool.ntp.org or time.nist.gov if you have a (at  least  somewhat
+              reliable) NTP server in your LAN.
+
+
+       HOST_NAME=host-name
+              Sets  the  local host name for your virtual machine. It can be a
+              single name or a fully-qualified domain name FQDN. If  you  used
+              IPV4_CONFIG=DHCP and your DHCP server returns a domain name, the
+              domain part of an FQDN will be replaced by that name. This  host
+              name  or  host  part of an FQDN will not replaced by a host name
+              returned via DHCP. The host name is not important for the opera‐
+              tion of floppy144.vfd.
+
+
+       ROOT_PASSWORD=password
+              Sets the password of the root user.
+
+
+       USER_NAME=username
+              Sets  the name of for a general user with no special privileges.
+              This user can login but can't do much.
+
+
+       USER_PASSWORD=password
+              Sets the password for the user defined by USER_NAME=username.
+
+
+       GUEST_PASSWORD=password
+              Sets the password for the pre-defined guest user. This user  has
+              the   same   priviliges   (none)   as   the   user   defined  by
+              USER_NAME=username.
+
+
+       INETD=Y | N
+              INETD=Y specifies that inetd(8) should automatically be started.
+              That means you can telnet and ftp to your virtual machine.
+
+
+OPERATION
+   Diskless System
+       The  floppy144.vfd  virtual  machine  is  a  diskless system that works
+       entirely from RAM. The file system is actually a RAM disk that is  cre‐
+       ated from the initrd(4) file on the floppy image.
+
+       Anything  you'll do from inside the virtual machine, for instance edit‐
+       ing a config file, will be lost when you reboot the machine. So, if you
+       ever  asked  yourself  if  rm  -fr  / (root privileges required) really
+       deletes all files from all mounted partitions, the floppy144.vfd VM  is
+       the right place to test it (Yes, it does).
+
+       The  VM  uses  a  RAM disk, because the Linux kernel had to be stripped
+       down to essential features to fit on a 1.44 MB floppy. It has no floppy
+       driver,  no  disk  file  system  drivers and no block layer (cannot use
+       disks of any type).
+
+
+   System startup
+       The kernel boots up very quickly and the init script (/sbin/init) waits
+       5 seconds. In these 5 seconds you can:
+
+              Press  'm'  to manually enter the time zone and the IPv4 parame‐
+              ters. These will be queried interactively.
+              Press 't' to manually enter the time zone only.
+              Press 's' to escape to a shell.
+
+       If you don't want to 5 seconds for continuing the init process, you can
+       press  any  other key to speed things up. At the end of the init script
+       you should see thatvlmcsd(8) has started. You should also  see  the  IP
+       addresses and all user names and passwords.
+
+
+   Logging into the system
+       There  are 5 local logins provided on /dev/tty2 to /dev/tty6. To switch
+       to these logins, simply press ALT-F2 to ALT-F6. To return to  the  con‐
+       sole  on  /dev/tty1,  press ALT-F1. If inetd(8) is running you can also
+       use telnet(1). This allows you use a terminal program (e.g. putty) that
+       can  utilize  your  keyboard  layout, can be resized and has full UTF-8
+       support. The local terminals support US keyboard layout only. Please be
+       aware  that telnet(1) is unencrypted and everything including passwords
+       is transmitted in clear text. There is not  enough  space  for  an  ssh
+       server like sshd(8) or dropbear(8).
+
+       The  floppy image only provides basic Unix commands. Type busybox or ll
+       /bin to get a list. The only editor available is vi(1).  If  you  don't
+       like  vi,  you  may transfer config files via ftp(1) edit them with the
+       editor of your choice and transfer them back to the floppy144.vfd VM.
+
+
+   The menu system
+       You'll find a menu system on /dev/tty8 (press ALT-F8  to  see  it).  It
+       allows  you  performing  some  administrative tasks and to view various
+       system information. It is mainly for users that do not have much  expe‐
+       rience with Unix commands.
+
+
+       1) (Re)start vlmcsd
+              Starts  or  restarts  vlmcsd(8).  This  is useful if you changed
+              /etc/vlmcsd.ini(5).
+
+
+       2) Stop vlmcsd
+              Stops vlmcsd(8).
+
+
+       3) (Re)start inetd
+              Starts or restarts inetd(8). If inetd(8) is  restarted,  current
+              clients  connected  via telnet(1) or ftp(1) will not be dropped.
+              They can continue their sessions. This is useful if you  changed
+              /etc/inetd.conf(5).
+
+
+       4) Stop inet
+              Stops  inetd(8).  All  clients connected via telnet(1) or ftp(1)
+              will be dropped immediately.
+
+
+       5) Change the time zone
+              Just in case you missed pressing 't' during system startup. This
+              also  restarts vlmcsd(8) if it was running to notify it that the
+              time zone has changed.  Restarting  vlmcsd(8)  allows  currently
+              connected clients to finish their activation.
+
+
+       k) Change keyboard layout
+              This allows you to select a different keyboard layout.
+
+
+       6) Show all kernel boot parameters
+              Shows  all  parameters passed to the kernel via syslinux.cfg. If
+              you experience any unexpected behavior,  you  can  use  this  to
+              check if your APPEND line in syslinux.cfg is correct. The output
+              is piped through less(1). So press 'q' to return to the menu.
+
+
+       7) Show boot log (dmesg)
+              Shows the boot log of the kernel. The output  is  piped  through
+              less(1). So press 'q' to return to the menu.
+
+
+       8) Show TCP/IP configuration
+              Shows  the  TCP/IP  configuration, listening sockets and current
+              TCP and UDP connections. Useful, if you problems with  net  con‐
+              nectivity.  The output is piped through less(1). So press 'q' to
+              return to the menu.
+
+
+       9) Show running processes
+              Shows all processes including memory and CPU usage. Display will
+              updated every second. Press 'q' or CTRL-C to return to the menu.
+
+
+       s) Shutdown
+              Shuts down the floppy144.vfd virtual machine. Proper shutdown is
+              not required. It is ok to use a hard power off in your  virtual‐
+              ization program.
+
+
+       r) Reboot
+              Reboots  the floppy144.vfd virtual machine. Proper reboot is not
+              required. It is ok to use a hard reset  in  your  virtualization
+              program.
+
+
+PERMANENT CHANGES OF INITRD
+       If  you  want to change any file or script of the file system (e.g. the
+       init script /sbin/init or /etc/vlmcsd.ini), you'll need  to  mount  the
+       floppy  image,  unpack  the  initrd(4)  file, make any modfications you
+       like, create a new initrd(4) file and copy it to the mounted floppy.
+
+       To unpack the initrd(4) file you'll need xz(1)  (or  lzma(1)  on  older
+       unix-like OSses) and cpio(1). These can be installed using your package
+       manager on all major distros. It is  ok  to  use  the  BSD  version  of
+       cpio(1).  No  need  to get the GNU version for BSD users.  Provided the
+       floppy is mounted in /mnt/floppy do the following:
+
+       Create an empty directory
+              mkdir ~/vlmcsd-floppy-initrd
+
+       cd into that directory
+              cd ~/vlmcsd-floppy-initrd
+
+       Unpack initrd
+              cat /mnt/floppy/initrd | unlzma | cpio -i
+
+       After applying your changes build a new initrd(4) file:
+
+
+       cd into your directory
+              cd ~/vlmcsd-floppy-initrd
+
+       Create the packed file
+              find . | cpio -o -H newc | lzma > /mnt/floppy/initrd
+
+       Do not try to use 'lzma -9' to achive better  compression.  The  kernel
+       can't  read  the  resulting  file. While customizing the initrd(4) file
+       works on almost any unix-like OS, it does not work on Windows even  not
+       with  Cygwin. The reason is that the NTFS file system can't handle uids
+       and gids. These cannot be preserved when unpacking the cpio(1)  archive
+       to  NTFS. If you use the WSL subsystem of Windows 10 Redstone (Anniver‐
+       sary Update) and later, you must make sure to unpack the initrd(4) file
+       to  a directory on VolFs (normally everything that is not mounted under
+       /mnt). The initrd(4) file can be on a VolFs or DriveFs.
+
+
+FAQ
+   On what distro is the floppy image based?
+       None. Besides the boot loader ldlinux.sys, there are only  three  bina‐
+       ries:  The  Linux  kernel bzImage, busybox(1) and vlmcsdmulti-x86-musl-
+       static. bzImage  and  busybox(1)  have  been  compiled  with  carefully
+       selected  configuration  parameters  not  found in any distro. This was
+       neccesary to fit everything on a 1.44 MB floppy.
+
+
+   Why is a rather old Linux kernel (3.12) used?
+       Linux 3.12 is the last kernel that can be booted with  16  MB  of  RAM.
+       Beginning with Linux 3.13 it requires much more memory (about 80 MB) to
+       boot. The floppy image is regularly tested with newer  kernels.  Every‐
+       thing works except that you need to assign much more main memory to the
+       virtual machine.
+
+
+   Can the floppy be booted on bare metal?
+       Basically yes. However, only Intel Pro/1000 and  AMD  PCNET32  ethernet
+       cards  are supported by the kernel. In addition there is no USB support
+       compiled into the kernel. That means you can only use an IBM AT or  IBM
+       PS/2 keyboard which are not available on newer hardware.
+
+
+FILES
+       syslinux.cfg, vlmcsd.ini(5)
+
+
+BUGS
+       IPv6 cannot be configured with static or manual parameters.
+       DHCPv6 is not supported.
+       ´ip route add ...' does not work. Use 'route add ...' instead.
+
+
+AUTHOR
+       floppy144.vfd has been created by Hotbird64
+
+
+CREDITS
+       Linus Torvalds et al. for the Linux kernel
+       Erik Andersen et al. for the original uClibc
+       Waldemar Brodkorb et al. for uClibc-ng
+       Denys Vlasenko et al. for BusyBox
+       H. Peter Anvin et al. for SYSLINUX
+
+
+SEE ALSO
+       vlmcsd(8), vlmcsd.ini(5), initrd(4), busybox(1), syslinux(1)
+
+
+
+Hotbird64                          June 2016                  VLMCSD-FLOPPY(7)

vlmcsd-floppy.7.html

@@ -0,0 +1,809 @@
+<!-- Creator     : groff version 1.22.3 -->
+<!-- CreationDate: Wed Jul 13 12:34:02 2016 -->
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
+"http://www.w3.org/TR/html4/loose.dtd">
+<html>
+<head>
+<meta name="generator" content="groff -Thtml, see www.gnu.org">
+<meta http-equiv="Content-Type" content="text/html; charset=US-ASCII">
+<meta name="Content-Style" content="text/css">
+<style type="text/css">
+       p       { margin-top: 0; margin-bottom: 0; vertical-align: top }
+       pre     { margin-top: 0; margin-bottom: 0; vertical-align: top }
+       table   { margin-top: 0; margin-bottom: 0; vertical-align: top }
+       h1      { text-align: center }
+</style>
+<title>VLMCSD-FLOPPY</title>
+
+</head>
+<body>
+
+<h1 align="center">VLMCSD-FLOPPY</h1>
+
+<a href="#NAME">NAME</a><br>
+<a href="#DESCRIPTION">DESCRIPTION</a><br>
+<a href="#SUPPORTED HYPERVISORS">SUPPORTED HYPERVISORS</a><br>
+<a href="#SETUP">SETUP</a><br>
+<a href="#CONFIGURATION">CONFIGURATION</a><br>
+<a href="#OPERATION">OPERATION</a><br>
+<a href="#PERMANENT CHANGES OF INITRD">PERMANENT CHANGES OF INITRD</a><br>
+<a href="#FAQ">FAQ</a><br>
+<a href="#FILES">FILES</a><br>
+<a href="#BUGS">BUGS</a><br>
+<a href="#AUTHOR">AUTHOR</a><br>
+<a href="#CREDITS">CREDITS</a><br>
+<a href="#SEE ALSO">SEE ALSO</a><br>
+
+<hr>
+
+
+<h2>NAME
+<a name="NAME"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em">floppy144.vfd
+&minus; a bootable floppy disk with Linux and
+<b>vlmcsd</b>(8)</p>
+
+<h2>DESCRIPTION
+<a name="DESCRIPTION"></a>
+</h2>
+
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>floppy144.vfd</b>
+is an image of a bootable floppy that contains a minimal
+version of Linux and <b>vlmcsd</b>(8). It requires only 16
+MB of RAM. Its primary purpose is to run <b>vlmcsd</b>(8) in
+a small virtual machine which makes it easy to use
+<b>vlmcsd</b>(8) to activate the virtual machine&rsquo;s
+host computer which is not possible in Windows 8.1 and up.
+The floppy image is a standard 3,5&quot; floppy with 1.44 MB
+storage. It is formatted with a FAT12 filesystem. The floppy
+can be mounted to apply several customizations.</p>
+
+<h2>SUPPORTED HYPERVISORS
+<a name="SUPPORTED HYPERVISORS"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em">The floppy
+image has been tested with the following hypervisors:</p>
+
+<p style="margin-left:22%; margin-top: 1em">VMWare,
+VirtualBox, Hyper-V and QEMU</p>
+
+<p style="margin-left:11%; margin-top: 1em">Others are
+likely to work.</p>
+
+<h2>SETUP
+<a name="SETUP"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em">Create a new
+virtual machine. Assign 16 MB of RAM. Add a floppy drive and
+attach <b>floppy144.vfd</b> to this drive. Do not create a
+virtual hard disk. Setup the virtual machine to boot from a
+floppy drive (VirtualBox has floppy boot disabled by
+default). If possible, setup a virtual machine with plain
+old BIOS (not UEFI). If you created an UEFI virtual machine,
+enable the compatibility support mode (CSM) to allow a BIOS
+compatible boot. Set number of CPUs to 1. The Linux kernel
+is not capable of SMP. Remove IDE, SATA, SCSI and USB
+support if possible. The Linux kernel can&rsquo;t handle
+this and ignores any devices connected to these buses.</p>
+
+<p style="margin-left:11%; margin-top: 1em">Setup an
+ethernet card. The following models are supported:</p>
+
+<p style="margin-left:22%; margin-top: 1em">Intel PRO/1000
+<br>
+AMD PCNET III <br>
+AMD PCNET32 <br>
+VMWare vmxnet3 (paravirtualized driver used by VMWare) <br>
+virtio (paravirtualized driver used by VirtualBox, QEMU, KVM
+and lguest)</p>
+
+<p style="margin-left:11%; margin-top: 1em">Most
+hypervisors emulate an Intel PRO/1000 or AMD PCNET32 by
+default. Selecting a paravirtualized driver slightly
+improves performance. In VirtualBox you can simply select
+virtio in the network configuration dialog. VMWare requires
+that you add or change the VMX file. Use
+&rsquo;ethernet0.virtualDev&nbsp;=&nbsp;&quot;vmxnet3&quot;&rsquo;
+in your VMWare config file.</p>
+
+<p style="margin-left:11%; margin-top: 1em">If you are
+using QEMU, you must also setup a TAP adapter. Port
+redirection does not work to activate your own computer.</p>
+
+<h2>CONFIGURATION
+<a name="CONFIGURATION"></a>
+</h2>
+
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>floppy144.vfd</b>
+can be customized to fit your needs. This is done by editing
+the file syslinux.cfg on the floppy image. The floppy image
+must be mounted. Under Linux you can simply attach
+<b>floppy144.vfd</b> to a loop device which is mountable
+like any other block device. For Windows you must use some
+software that allows mounting a floppy image, e.g.
+<a href="http://www.osforensics.com/tools/mount-disk-images.html">OSFMount</a></p>
+
+<p style="margin-left:11%; margin-top: 1em">OSFMount works
+under all Windows versions beginning with Windows XP up to
+Windows 10 (32- and 64-bit).</p>
+
+<p style="margin-left:11%; margin-top: 1em">The default
+syslinux.cfg file looks like this:</p>
+
+<p style="margin-left:22%; margin-top: 1em"><small>prompt 0
+<br>
+TIMEOUT 50 <br>
+default dhcp</small></p>
+
+<p style="margin-left:22%; margin-top: 1em"><small>LABEL
+dhcp <br>
+KERNEL bzImage <br>
+APPEND vga=773 quiet initrd=initrd KBD=us
+LISTEN=[::]:1688,0.0.0.0:1688 TZ=UTC0 IPV4_CONFIG=DHCP
+NTP_SERVER=pool.ntp.org HOST_NAME=vlmcsd
+ROOT_PASSWORD=vlmcsd USER_NAME=user USER_PASSWORD=vlmcsd
+GUEST_PASSWORD=vlmcsd INETD=Y
+WINDOWS=06401-00206-271-395032-03-1033-9600.0000-1652016
+OFFICE2010=06401-00096-199-204970-03-1033-9600.0000-1652016
+OFFICE2013=06401-00206-234-921934-03-1033-9600.0000-1652016
+HWID=36:4F:46:3A:88:63:D3:5F</small></p>
+
+<p style="margin-left:22%; margin-top: 1em"><small>LABEL
+static <br>
+KERNEL bzImage <br>
+APPEND vga=773 quiet initrd=initrd KBD=fr
+LISTEN=[::]:1688,0.0.0.0:1688 TZ=CET-1CEST,M3.5.0,M10.5.0/3
+IPV4_CONFIG=STATIC IPV4_ADDRESS=192.168.20.123/24
+IPV4_GATEWAY=192.168.20.2 IPV4_DNS1=192.168.20.2
+IPV4_DNS2=NONE NTP_SERVER=pool.ntp.org HOST_NAME=vlmcsd
+ROOT_PASSWORD=vlmcsd USER_NAME=user USER_PASSWORD=vlmcsd
+GUEST_PASSWORD=vlmcsd INETD=Y</small></p>
+
+<p style="margin-left:11%; margin-top: 1em">There are two
+configurations in this files: <i>dhcp</i> (for configuring
+the IPv4 network via DHCP) and <i>static</i> (for a static
+IPv4 configuration). The kernel always boots the <i>dhcp</i>
+configuration without asking (lines &rsquo;prompt 0&rsquo;
+and &rsquo;default dhcp&rsquo;). You can simply change the
+default configuration to <i>static</i> and then customize
+the APPEND line in the <i>static</i> configuration. For more
+details how to customize the syslinux.cfg file see
+<b>syslinux</b>(1).</p>
+
+<p style="margin-left:11%; margin-top: 1em">Each APPPEND
+line contains one or more items seperated by spaces. <b>All
+items are case-sensitive</b>. The following parameters can
+be customized: <b><br>
+vga=</b><i>vesa-video-mode</i></p>
+
+<p style="margin-left:22%;">Sets the VESA display mode for
+the virtual machine. The parameter is not optional. If you
+ommit it, you will not see anything on the screen. 773 means
+1024x768 with 256 colors. See
+<a href="https://en.wikipedia.org/wiki/VESA_BIOS_Extensions#Linux_video_mode_numbers">Wikipedia</a>
+for more video modes. Note that all 16 color (4-bit) modes
+will not work. Use 8-bit (256 colors), 16-bit (65536
+colors), 24-bit and 32-bit (&gt; 16 Million colors) only.
+All modes above 1280x1024 are non-VESA-standard and vary for
+all (virtual) graphic cards.</p>
+
+<table width="100%" border="0" rules="none" frame="void"
+       cellspacing="0" cellpadding="0">
+<tr valign="top" align="left">
+<td width="11%"></td>
+<td width="7%">
+
+
+<p><b>quiet</b></p></td>
+<td width="4%"></td>
+<td width="78%">
+
+
+<p>This causes the kernel not display the its log during
+boot. You may omit <b>quiet</b> but it doesn&rsquo;t make
+much sense. The boot log is actually very verbose and
+scrolls away from screen quickly. If any errors occur during
+boot, they will be displayed even if <b>quiet</b> is present
+in the APPEND line. You may evaluate the complete boot log
+later by using the dmesg command or the menu on
+/dev/tty8.</p> </td></tr>
+</table>
+
+
+<p style="margin-left:11%;"><b>initrd=</b><i>initial-ram-disk-file</i></p>
+
+<p style="margin-left:22%;">This defines the initial ram
+disk that the kernel will read. There is only one initial
+ram disk on the floppy thus leave <i>initrd=initrd</i> as it
+is.</p>
+
+
+<p style="margin-left:11%;"><b>KBD=</b><i>keyboard-layout-name</i></p>
+
+<p style="margin-left:22%;">This allows you to select the
+keyboard layout. <i>keyboard-layout-name</i> is usually the
+ISO 3166-1 (top level domain) code for a country. A list of
+valid <i>keyboard-layout-name</i>s can be accessed via the
+menu system on /dev/tty8 (press ALT-F8). Note, that this is
+a keyboard driver only. There is no Unicode font support in
+<b>floppy144.vfd</b> (due to the fact that the kernel uses a
+generic VESA framebuffer device only). Characters beyond
+ASCII work for Western European languages only but not
+Eastern European, Greek, Cyrillic, Arabic, Hebrew, CJK and
+other languages. There is no need in <b>floppy144.vfd</b> to
+enter any characters outside ASCII. The purpose of the
+keyboard maps are that you will find characters like dash,
+backslash, brackets, braces, etc. at the usual place on your
+keyboard.</p>
+
+
+<p style="margin-left:11%;"><b>LISTEN=</b>PRIVATE[:<i>tcp-port</i>]
+| <i><br>
+
+ip-address</i>[:<i>tcp-port</i>][,<i>ip-address</i>[:<i>tcp-port</i>]][,...]</p>
+
+<p style="margin-left:22%;">One or more combinations of IP
+addresses and optional TCP port seperated by commas that
+<b>vlmcsd</b>(8) should listen on or PRIVATE to listen on
+all private IP addresses only. The default port is 1688. If
+you use an explicit port number, append it to the IP address
+seperated by a colon. If you use a port number and the IP
+address contains colons, you must enclose the IP address in
+brackets. For example
+<i>192.168.0.2,[fd00::dead:beef]:5678</i> causes
+<b>vlmcsd</b>(8) to listen on 192.168.0.2 port 1688 and
+fd00::dead:beef port 5678.</p>
+
+<p style="margin-left:11%;"><b>WINDOWS=</b><i>epid</i></p>
+
+<p style="margin-left:22%;">Defines the ePID that is used
+for Windows activations. If you ommit this parameter, vlmcsd
+generates a random ePID when it is started.</p>
+
+
+<p style="margin-left:11%;"><b>OFFICE2010=</b><i>epid</i></p>
+
+<p style="margin-left:22%;">Defines the ePID that is used
+for Office 2010 activations. If you ommit this parameter,
+<b>vlmcsd</b>(8) generates a random ePID when it is
+started.</p>
+
+
+<p style="margin-left:11%;"><b>OFFICE2013=</b><i>epid</i></p>
+
+<p style="margin-left:22%;">Defines the ePID that is used
+for Office (versions 2013 and greater) activations. If you
+ommit this parameter, <b>vlmcsd</b>(8) generates a random
+ePID when it is started.</p>
+
+<p style="margin-left:11%;"><b>HWID=</b><i>hwid</i></p>
+
+<p style="margin-left:22%;">Defines the HwId that is sent
+to clients. <i>hwid</i> must be specified as 16 hex digits
+that are interpreted as a series of 8 bytes (big endian).
+Any character that is not a hex digit will be ignored. This
+is for better readability.</p>
+
+
+<p style="margin-left:11%;"><b>TZ=</b><i>posix-time-zone-string</i></p>
+
+<p style="margin-left:22%;">Set the time zone to
+<i>posix-time-zone-string</i>. It must conform to the
+<a href="http://pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap08.html">POSIX</a>
+specification. Simplified time zone strings like
+&quot;Europe/London&quot; or &quot;America/Detroit&quot; are
+not allowed. This has the very simple reason that there is
+no space on the floppy to store the time zone database.</p>
+
+<p style="margin-left:22%; margin-top: 1em">The string
+<i>CET-1CEST,M3.5.0,M10.5.0/3</i> (most countries in Europe)
+reads as follows:</p>
+
+<table width="100%" border="0" rules="none" frame="void"
+       cellspacing="0" cellpadding="0">
+<tr valign="top" align="left">
+<td width="22%"></td>
+<td width="13%">
+
+
+<p><i>CET</i></p></td>
+<td width="2%"></td>
+<td width="63%">
+
+
+<p>The standard (winter) time zone has the name CET.</p></td></tr>
+<tr valign="top" align="left">
+<td width="22%"></td>
+<td width="13%">
+
+
+<p><i>-1</i></p></td>
+<td width="2%"></td>
+<td width="63%">
+
+
+<p>The standard time zone is one hour east of UTC. Negative
+numbers are east of UTC. Positive numbers are west of
+UTC.</p> </td></tr>
+<tr valign="top" align="left">
+<td width="22%"></td>
+<td width="13%">
+
+
+<p><i>CEST</i></p></td>
+<td width="2%"></td>
+<td width="63%">
+
+
+<p>The daylight saving (summer) time zone has the name
+CEST.</p> </td></tr>
+<tr valign="top" align="left">
+<td width="22%"></td>
+<td width="13%">
+
+
+<p><i>M3.5.0</i></p></td>
+<td width="2%"></td>
+<td width="63%">
+
+
+<p>Daylight saving time starts in the 3rd month (March) on
+the 5th (=last) occurence of weekday 0 (Sunday) at 2
+o&rsquo;clock (2 o&rsquo;clock is a default value).</p></td></tr>
+<tr valign="top" align="left">
+<td width="22%"></td>
+<td width="13%">
+
+
+<p><i>M10.5.0/3</i></p></td>
+<td width="2%"></td>
+<td width="63%">
+
+
+<p>Daylight saving time ends in the 10th month (October) on
+the 5th (=last) occurence of weekday 0 (Sunday) at 3
+o&rsquo;clock.</p> </td></tr>
+</table>
+
+<p style="margin-left:22%; margin-top: 1em">If you
+don&rsquo;t have daylight saving time, things are easier.
+For Chinese Standard Time for example, just use <i>CST-8</i>
+as the time zone string.</p>
+
+<p style="margin-left:22%; margin-top: 1em">On a Linux
+desktop system, you can use a command like
+<b>strings&nbsp;/usr/share/zoneinfo/America/New_York&nbsp;|&nbsp;tail&nbsp;-n1</b>.
+This should return <i>EST5EDT,M3.2.0,M11.1.0</i>. You can
+use the returned string for the
+<b>TZ=</b><i>posix-time-zone-string</i> parameter.</p>
+
+<p style="margin-left:11%;"><b>IPV4_CONFIG=</b>DHCP |
+STATIC</p>
+
+<p style="margin-left:22%;">This determines how you want to
+configure IPv4 networking. If you use
+<b>IPV4_CONFIG=</b>STATIC, you must supply additional
+paramaters to the APPEND command line.</p>
+
+
+<p style="margin-left:11%;"><b>IPV4_ADDRESS=</b><i>ipv4-address</i>/<i>CIDR-mask</i></p>
+
+<p style="margin-left:22%;">Use <i>ipv4-address</i> with
+netmask <i>CIDR-mask</i> for static IPv4 configuration. The
+netmask must not be ommitted. For IPv4 address 192.168.12.17
+with a netmask of 255.255.255.0 use <i>192.168.12.17/24</i>.
+For IPv4 address 10.4.0.8 with a netmask of 255.255.0.0 use
+10.4.0.8/16. This paramater is ignored, if you used
+<b>IPV4_CONFIG=</b>DHCP.</p>
+
+
+<p style="margin-left:11%;"><b>IPV4_GATEWAY=</b><i>ipv4-address</i>
+| NONE</p>
+
+<p style="margin-left:22%;">Use <i>ipv4-address</i> as the
+default gateway. This is usually the IPv4 address of your
+router. You may specify NONE explicitly for no gateway. In
+this case your virtual machine is only visible on its local
+LAN. This paramater is ignored, if you used
+<b>IPV4_CONFIG=</b>DHCP.</p>
+
+
+<p style="margin-left:11%;"><b>IPV4_DNS1=</b><i>ipv4-address</i>
+| NONE</p>
+
+<p style="margin-left:22%;">Use <i>ipv4-address</i> as the
+primary name server. In home networks this is often the IPv4
+address of your router. You may specify NONE explicitly. If
+you specified NONE for both <b>IPV4_DNS1=</b> and
+<b>IPV4_DNS2=</b>, your virtual machine cannot resolve host
+names to IP addresses. While <b>vlmcsd</b>(8) works
+perfectly without DNS servers, you must use IP addresses
+when referring to a host, e.g. for specifying an NTP server.
+This paramater is ignored, if you used
+<b>IPV4_CONFIG=</b>DHCP.</p>
+
+
+<p style="margin-left:11%;"><b>IPV4_DNS2=</b><i>ipv4-address</i>
+| NONE</p>
+
+<p style="margin-left:22%;">Use <i>ipv4-address</i> as the
+secondary name server. It serves as a backup if the primary
+name server is not available. Home networks often
+don&rsquo;t have a secondary name server. In this case set
+this to NONE. This paramater is ignored, if you used
+<b>IPV4_CONFIG=</b>DHCP.</p>
+
+
+<p style="margin-left:11%;"><b>NTP_SERVER=</b><i>host-name</i>
+| <i>ipv4-address</i> | NONE</p>
+
+<p style="margin-left:22%;">This sets the name of a time
+server using the NTP protocol. If your virtualization
+environment reliably provides time, you can set this to
+NONE. Don&rsquo;t use a public time service like
+pool.ntp.org or time.nist.gov if you have a (at least
+somewhat reliable) NTP server in your LAN.</p>
+
+
+<p style="margin-left:11%;"><b>HOST_NAME=</b><i>host-name</i></p>
+
+<p style="margin-left:22%;">Sets the local host name for
+your virtual machine. It can be a single name or a
+fully-qualified domain name FQDN. If you used
+<b>IPV4_CONFIG=</b>DHCP and your DHCP server returns a
+domain name, the domain part of an FQDN will be replaced by
+that name. This host name or host part of an FQDN will not
+replaced by a host name returned via DHCP. The host name is
+not important for the operation of <b>floppy144.vfd</b>.</p>
+
+
+<p style="margin-left:11%;"><b>ROOT_PASSWORD=</b><i>password</i></p>
+
+<p style="margin-left:22%;">Sets the password of the root
+user.</p>
+
+
+<p style="margin-left:11%;"><b>USER_NAME=</b><i>username</i></p>
+
+<p style="margin-left:22%;">Sets the name of for a general
+user with no special privileges. This user can login but
+can&rsquo;t do much.</p>
+
+
+<p style="margin-left:11%;"><b>USER_PASSWORD=</b><i>password</i></p>
+
+<p style="margin-left:22%;">Sets the password for the user
+defined by <b>USER_NAME=</b><i>username</i>.</p>
+
+
+<p style="margin-left:11%;"><b>GUEST_PASSWORD=</b><i>password</i></p>
+
+<p style="margin-left:22%;">Sets the password for the
+pre-defined guest user. This user has the same priviliges
+(none) as the user defined by
+<b>USER_NAME=</b><i>username</i>.</p>
+
+<p style="margin-left:11%;"><b>INETD=</b>Y | N</p>
+
+<p style="margin-left:22%;"><b>INETD=</b>Y specifies that
+<b>inetd</b>(8) should automatically be started. That means
+you can telnet and ftp to your virtual machine.</p>
+
+<h2>OPERATION
+<a name="OPERATION"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>Diskless
+System</b> <br>
+The <b>floppy144.vfd</b> virtual machine is a diskless
+system that works entirely from RAM. The file system is
+actually a RAM disk that is created from the
+<b>initrd</b>(4) file on the floppy image.</p>
+
+<p style="margin-left:11%; margin-top: 1em">Anything
+you&rsquo;ll do from inside the virtual machine, for
+instance editing a config file, will be lost when you reboot
+the machine. So, if you ever asked yourself if <b>rm -fr
+/</b> (root privileges required) really deletes all files
+from all mounted partitions, the <b>floppy144.vfd</b> VM is
+the right place to test it (Yes, it does).</p>
+
+<p style="margin-left:11%; margin-top: 1em">The VM uses a
+RAM disk, because the Linux kernel had to be stripped down
+to essential features to fit on a 1.44 MB floppy. It has no
+floppy driver, no disk file system drivers and no block
+layer (cannot use disks of any type).</p>
+
+<p style="margin-left:11%; margin-top: 1em"><b>System
+startup</b> <br>
+The kernel boots up very quickly and the init script
+(/sbin/init) waits 5 seconds. In these 5 seconds you
+can:</p>
+
+<p style="margin-left:22%; margin-top: 1em">Press
+&rsquo;m&rsquo; to manually enter the time zone and the IPv4
+parameters. These will be queried interactively. <br>
+Press &rsquo;t&rsquo; to manually enter the time zone only.
+<br>
+Press &rsquo;s&rsquo; to escape to a shell.</p>
+
+<p style="margin-left:11%; margin-top: 1em">If you
+don&rsquo;t want to 5 seconds for continuing the init
+process, you can press any other key to speed things up. At
+the end of the init script you should see
+that<b>vlmcsd</b>(8) has started. You should also see the IP
+addresses and all user names and passwords.</p>
+
+<p style="margin-left:11%; margin-top: 1em"><b>Logging into
+the system</b> <br>
+There are 5 local logins provided on /dev/tty2 to /dev/tty6.
+To switch to these logins, simply press ALT&minus;F2 to
+ALT&minus;F6. To return to the console on /dev/tty1, press
+ALT&minus;F1. If <b>inetd</b>(8) is running you can also use
+<b>telnet</b>(1). This allows you use a terminal program
+(e.g. putty) that can utilize your keyboard layout, can be
+resized and has full UTF-8 support. The local terminals
+support US keyboard layout only. Please be aware that
+<b>telnet</b>(1) is unencrypted and everything including
+passwords is transmitted in clear text. There is not enough
+space for an ssh server like <b>sshd</b>(8) or
+<b>dropbear</b>(8).</p>
+
+<p style="margin-left:11%; margin-top: 1em">The floppy
+image only provides basic Unix commands. Type <i>busybox</i>
+or <i>ll /bin</i> to get a list. The only editor available
+is <b>vi</b>(1). If you don&rsquo;t like vi, you may
+transfer config files via <b>ftp</b>(1) edit them with the
+editor of your choice and transfer them back to the
+<b>floppy144.vfd</b> VM.</p>
+
+<p style="margin-left:11%; margin-top: 1em"><b>The menu
+system</b> <br>
+You&rsquo;ll find a menu system on /dev/tty8 (press
+ALT&minus;F8 to see it). It allows you performing some
+administrative tasks and to view various system information.
+It is mainly for users that do not have much experience with
+Unix commands. <b><br>
+1) (Re)start vlmcsd</b></p>
+
+<p style="margin-left:22%;">Starts or restarts
+<b>vlmcsd</b>(8). This is useful if you changed
+<b>/etc/vlmcsd.ini</b>(5).</p>
+
+<p style="margin-left:11%;"><b>2) Stop vlmcsd</b></p>
+
+<p style="margin-left:22%;">Stops <b>vlmcsd</b>(8).</p>
+
+<p style="margin-left:11%;"><b>3) (Re)start inetd</b></p>
+
+<p style="margin-left:22%;">Starts or restarts
+<b>inetd</b>(8). If <b>inetd</b>(8) is restarted, current
+clients connected via <b>telnet</b>(1) or <b>ftp</b>(1) will
+<b>not</b> be dropped. They can continue their sessions.
+This is useful if you changed <b>/etc/inetd.conf</b>(5).</p>
+
+<p style="margin-left:11%;"><b>4) Stop inet</b></p>
+
+<p style="margin-left:22%;">Stops <b>inetd</b>(8). All
+clients connected via <b>telnet</b>(1) or <b>ftp</b>(1) will
+be dropped immediately.</p>
+
+<p style="margin-left:11%;"><b>5) Change the time
+zone</b></p>
+
+<p style="margin-left:22%;">Just in case you missed
+pressing &rsquo;t&rsquo; during system startup. This also
+restarts <b>vlmcsd</b>(8) if it was running to notify it
+that the time zone has changed. Restarting <b>vlmcsd</b>(8)
+allows currently connected clients to finish their
+activation.</p>
+
+<p style="margin-left:11%;"><b>k) Change keyboard
+layout</b></p>
+
+<p style="margin-left:22%;">This allows you to select a
+different keyboard layout.</p>
+
+<p style="margin-left:11%;"><b>6) Show all kernel boot
+parameters</b></p>
+
+<p style="margin-left:22%;">Shows all parameters passed to
+the kernel via syslinux.cfg. If you experience any
+unexpected behavior, you can use this to check if your
+APPEND line in syslinux.cfg is correct. The output is piped
+through <b>less(1)</b>. So press &rsquo;q&rsquo; to return
+to the menu.</p>
+
+<p style="margin-left:11%;"><b>7) Show boot log
+(dmesg)</b></p>
+
+<p style="margin-left:22%;">Shows the boot log of the
+kernel. The output is piped through <b>less(1)</b>. So press
+&rsquo;q&rsquo; to return to the menu.</p>
+
+<p style="margin-left:11%;"><b>8) Show TCP/IP
+configuration</b></p>
+
+<p style="margin-left:22%;">Shows the TCP/IP configuration,
+listening sockets and current TCP and UDP connections.
+Useful, if you problems with net connectivity. The output is
+piped through <b>less(1)</b>. So press &rsquo;q&rsquo; to
+return to the menu.</p>
+
+<p style="margin-left:11%;"><b>9) Show running
+processes</b></p>
+
+<p style="margin-left:22%;">Shows all processes including
+memory and CPU usage. Display will updated every second.
+Press &rsquo;q&rsquo; or CTRL-C to return to the menu.</p>
+
+<p style="margin-left:11%;"><b>s) Shutdown</b></p>
+
+<p style="margin-left:22%;">Shuts down the
+<b>floppy144.vfd</b> virtual machine. Proper shutdown is not
+required. It is ok to use a hard power off in your
+virtualization program.</p>
+
+<p style="margin-left:11%;"><b>r) Reboot</b></p>
+
+<p style="margin-left:22%;">Reboots the
+<b>floppy144.vfd</b> virtual machine. Proper reboot is not
+required. It is ok to use a hard reset in your
+virtualization program.</p>
+
+<h2>PERMANENT CHANGES OF INITRD
+<a name="PERMANENT CHANGES OF INITRD"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em">If you want to
+change any file or script of the file system (e.g. the init
+script /sbin/init or /etc/vlmcsd.ini), you&rsquo;ll need to
+mount the floppy image, unpack the <b>initrd</b>(4) file,
+make any modfications you like, create a new
+<b>initrd</b>(4) file and copy it to the mounted floppy.</p>
+
+<p style="margin-left:11%; margin-top: 1em">To unpack the
+<b>initrd</b>(4) file you&rsquo;ll need <b>xz</b>(1) (or
+<b>lzma</b>(1) on older unix-like OSses) and <b>cpio</b>(1).
+These can be installed using your package manager on all
+major distros. It is ok to use the BSD version of
+<b>cpio</b>(1). No need to get the GNU version for BSD
+users. Provided the floppy is mounted in /mnt/floppy do the
+following: <br>
+Create an empty directory</p>
+
+<p style="margin-left:22%;">mkdir
+~/vlmcsd-floppy-initrd</p>
+
+<p style="margin-left:11%;">cd into that directory</p>
+
+<p style="margin-left:22%;">cd ~/vlmcsd-floppy-initrd</p>
+
+<p style="margin-left:11%;">Unpack initrd</p>
+
+<p style="margin-left:22%;">cat /mnt/floppy/initrd | unlzma
+| cpio -i</p>
+
+<p style="margin-left:11%; margin-top: 1em">After applying
+your changes build a new <b>initrd</b>(4) file: <br>
+cd into your directory</p>
+
+<p style="margin-left:22%;">cd ~/vlmcsd-floppy-initrd</p>
+
+<p style="margin-left:11%;">Create the packed file</p>
+
+<p style="margin-left:22%;">find . | cpio -o -H newc | lzma
+&gt; /mnt/floppy/initrd</p>
+
+<p style="margin-left:11%; margin-top: 1em">Do not try to
+use &rsquo;lzma -9&rsquo; to achive better compression. The
+kernel can&rsquo;t read the resulting file. While
+customizing the <b>initrd</b>(4) file works on almost any
+unix-like OS, it does not work on Windows even not with
+Cygwin. The reason is that the NTFS file system can&rsquo;t
+handle uids and gids. These cannot be preserved when
+unpacking the <b>cpio</b>(1) archive to NTFS. If you use the
+WSL subsystem of Windows 10 Redstone (Anniversary Update)
+and later, you must make sure to unpack the <b>initrd</b>(4)
+file to a directory on VolFs (normally everything that is
+<b>not</b> mounted under /mnt). The <b>initrd</b>(4) file
+can be on a VolFs or DriveFs.</p>
+
+<h2>FAQ
+<a name="FAQ"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>On what
+distro is the floppy image based?</b> <br>
+None. Besides the boot loader <b>ldlinux.sys</b>, there are
+only three binaries: The Linux kernel <b>bzImage</b>,
+<b>busybox</b>(1) and <b>vlmcsdmulti-x86-musl-static</b>.
+<b>bzImage</b> and <b>busybox</b>(1) have been compiled with
+carefully selected configuration parameters not found in any
+distro. This was neccesary to fit everything on a 1.44 MB
+floppy.</p>
+
+<p style="margin-left:11%; margin-top: 1em"><b>Why is a
+rather old Linux kernel (3.12) used?</b> <br>
+Linux 3.12 is the last kernel that can be booted with 16 MB
+of RAM. Beginning with Linux 3.13 it requires much more
+memory (about 80 MB) to boot. The floppy image is regularly
+tested with newer kernels. Everything works except that you
+need to assign much more main memory to the virtual
+machine.</p>
+
+<p style="margin-left:11%; margin-top: 1em"><b>Can the
+floppy be booted on bare metal?</b> <br>
+Basically yes. However, only Intel Pro/1000 and AMD PCNET32
+ethernet cards are supported by the kernel. In addition
+there is no USB support compiled into the kernel. That means
+you can only use an IBM AT or IBM PS/2 keyboard which are
+not available on newer hardware.</p>
+
+<h2>FILES
+<a name="FILES"></a>
+</h2>
+
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>syslinux.cfg</b>,
+<b>vlmcsd.ini</b>(5)</p>
+
+<h2>BUGS
+<a name="BUGS"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em">IPv6 cannot be
+configured with static or manual parameters. <br>
+DHCPv6 is not supported. <br>
+&acute;ip route add ...&rsquo; does not work. Use
+&rsquo;route add ...&rsquo; instead.</p>
+
+<h2>AUTHOR
+<a name="AUTHOR"></a>
+</h2>
+
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>floppy144.vfd</b>
+has been created by Hotbird64</p>
+
+<h2>CREDITS
+<a name="CREDITS"></a>
+</h2>
+
+
+<p style="margin-left:11%; margin-top: 1em">Linus Torvalds
+et al. for the Linux kernel <br>
+Erik Andersen et al. for the original uClibc <br>
+Waldemar Brodkorb et al. for uClibc-ng <br>
+Denys Vlasenko et al. for BusyBox <br>
+H. Peter Anvin et al. for SYSLINUX</p>
+
+<h2>SEE ALSO
+<a name="SEE ALSO"></a>
+</h2>
+
+
+
+<p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b>(8),
+<b>vlmcsd.ini</b>(5), <b>initrd</b>(4), <b>busybox</b>(1),
+<b>syslinux(1)</b></p>
+<hr>
+</body>
+</html>

vlmcsd-floppy.7.unix.txt

@@ -0,0 +1,530 @@
+VLMCSD-FLOPPY(7)             KMS Activation Manual            VLMCSD-FLOPPY(7)
+
+
+
+NAME
+       floppy144.vfd - a bootable floppy disk with Linux and vlmcsd(8)
+
+
+DESCRIPTION
+       floppy144.vfd  is an image of a bootable floppy that contains a minimal
+       version of Linux and vlmcsd(8). It requires only 16 MB of RAM. Its pri‐
+       mary purpose is to run vlmcsd(8) in a small virtual machine which makes
+       it easy to use vlmcsd(8) to activate the virtual  machine's  host  com‐
+       puter  which is not possible in Windows 8.1 and up. The floppy image is
+       a standard 3,5" floppy with 1.44 MB storage. It  is  formatted  with  a
+       FAT12 filesystem. The floppy can be mounted to apply several customiza‐
+       tions.
+
+
+SUPPORTED HYPERVISORS
+       The floppy image has been tested with the following hypervisors:
+
+              VMWare, VirtualBox, Hyper-V and QEMU
+
+       Others are likely to work.
+
+
+SETUP
+       Create a new virtual machine. Assign 16 MB of RAM. Add a  floppy  drive
+       and  attach  floppy144.vfd  to this drive. Do not create a virtual hard
+       disk. Setup the virtual machine to boot from a floppy drive (VirtualBox
+       has  floppy  boot  disabled  by  default). If possible, setup a virtual
+       machine with plain old BIOS (not UEFI). If you created an UEFI  virtual
+       machine,  enable  the  compatibility support mode (CSM) to allow a BIOS
+       compatible boot. Set number of CPUs to 1. The Linux kernel is not capa‐
+       ble  of  SMP.  Remove  IDE, SATA, SCSI and USB support if possible. The
+       Linux kernel can't handle this and ignores  any  devices  connected  to
+       these buses.
+
+       Setup an ethernet card. The following models are supported:
+
+              Intel PRO/1000
+              AMD PCNET III
+              AMD PCNET32
+              VMWare vmxnet3 (paravirtualized driver used by VMWare)
+              virtio (paravirtualized driver used by VirtualBox, QEMU, KVM and
+              lguest)
+
+       Most hypervisors emulate an Intel PRO/1000 or AMD PCNET32  by  default.
+       Selecting  a  paravirtualized  driver slightly improves performance. In
+       VirtualBox you can simply select virtio in  the  network  configuration
+       dialog.  VMWare requires that you add or change the VMX file. Use 'eth‐
+       ernet0.virtualDev = "vmxnet3"' in your VMWare config file.
+
+       If you are using QEMU, you must also setup a TAP  adapter.  Port  redi‐
+       rection does not work to activate your own computer.
+
+
+CONFIGURATION
+       floppy144.vfd  can  be  customized  to  fit your needs. This is done by
+       editing the file syslinux.cfg on the floppy  image.  The  floppy  image
+       must  be  mounted. Under Linux you can simply attach floppy144.vfd to a
+       loop device which is mountable like any other block device. For Windows
+       you must use some software that allows mounting a floppy image, e.g.
+       OSFMount ⟨http://www.osforensics.com/tools/mount-disk-images.html⟩
+
+       OSFMount works under all Windows versions beginning with Windows XP  up
+       to Windows 10 (32- and 64-bit).
+
+       The default syslinux.cfg file looks like this:
+
+              prompt 0
+              TIMEOUT 50
+              default dhcp
+
+              LABEL dhcp
+                KERNEL bzImage
+                APPEND     vga=773    quiet    initrd=initrd    KBD=us    LIS‐
+              TEN=[::]:1688,0.0.0.0:1688       TZ=UTC0        IPV4_CONFIG=DHCP
+              NTP_SERVER=pool.ntp.org   HOST_NAME=vlmcsd  ROOT_PASSWORD=vlmcsd
+              USER_NAME=user    USER_PASSWORD=vlmcsd     GUEST_PASSWORD=vlmcsd
+              INETD=Y WINDOWS=06401-00206-271-395032-03-1033-9600.0000-1652016
+              OFFICE2010=06401-00096-199-204970-03-1033-9600.0000-1652016
+              OFFICE2013=06401-00206-234-921934-03-1033-9600.0000-1652016
+              HWID=36:4F:46:3A:88:63:D3:5F
+
+              LABEL static
+                KERNEL bzImage
+                APPEND    vga=773    quiet    initrd=initrd    KBD=fr     LIS‐
+              TEN=[::]:1688,0.0.0.0:1688         TZ=CET-1CEST,M3.5.0,M10.5.0/3
+              IPV4_CONFIG=STATIC   IPV4_ADDRESS=192.168.20.123/24   IPV4_GATE‐
+              WAY=192.168.20.2      IPV4_DNS1=192.168.20.2      IPV4_DNS2=NONE
+              NTP_SERVER=pool.ntp.org  HOST_NAME=vlmcsd   ROOT_PASSWORD=vlmcsd
+              USER_NAME=user     USER_PASSWORD=vlmcsd    GUEST_PASSWORD=vlmcsd
+              INETD=Y
+
+
+       There are two configurations in this files: dhcp (for  configuring  the
+       IPv4  network  via  DHCP) and static (for a static IPv4 configuration).
+       The kernel always boots the dhcp configuration  without  asking  (lines
+       'prompt  0' and 'default dhcp'). You can simply change the default con‐
+       figuration to static and then customize the APPEND line in  the  static
+       configuration.  For more details how to customize the syslinux.cfg file
+       see syslinux(1).
+
+       Each APPPEND line contains one or more items seperated by  spaces.  All
+       items are case-sensitive. The following parameters can be customized:
+
+
+       vga=vesa-video-mode
+              Sets  the VESA display mode for the virtual machine. The parame‐
+              ter is not optional. If you ommit it, you will not see  anything
+              on the screen. 773 means 1024x768 with 256 colors. See Wikipedia
+              ⟨https://en.wikipedia.org/wiki/
+              VESA_BIOS_Extensions#Linux_video_mode_numbers⟩  for  more  video
+              modes. Note that all 16 color (4-bit) modes will not  work.  Use
+              8-bit  (256 colors), 16-bit (65536 colors), 24-bit and 32-bit (>
+              16 Million colors) only. All modes above 1280x1024 are non-VESA-
+              standard and vary for all (virtual) graphic cards.
+
+
+       quiet  This  causes the kernel not display the its log during boot. You
+              may omit quiet but it doesn't make much sense. The boot  log  is
+              actually  very  verbose and scrolls away from screen quickly. If
+              any errors occur during boot, they will  be  displayed  even  if
+              quiet  is  present in the APPEND line. You may evaluate the com‐
+              plete boot log later by using the dmesg command or the  menu  on
+              /dev/tty8.
+
+
+       initrd=initial-ram-disk-file
+              This  defines  the  initial  ram disk that the kernel will read.
+              There is only one initial ram disk on the floppy thus leave ini‐
+              trd=initrd as it is.
+
+
+       KBD=keyboard-layout-name
+              This  allows you to select the keyboard layout. keyboard-layout-
+              name is usually the ISO 3166-1 (top level  domain)  code  for  a
+              country.  A  list of valid keyboard-layout-names can be accessed
+              via the menu system on /dev/tty8 (press ALT-F8). Note, that this
+              is  a  keyboard driver only. There is no Unicode font support in
+              floppy144.vfd (due to the fact that the kernel  uses  a  generic
+              VESA  framebuffer device only). Characters beyond ASCII work for
+              Western European languages only but not Eastern European, Greek,
+              Cyrillic,  Arabic,  Hebrew, CJK and other languages. There is no
+              need in floppy144.vfd to enter any characters outside ASCII. The
+              purpose  of  the keyboard maps are that you will find characters
+              like dash, backslash, brackets, braces, etc. at the usual  place
+              on your keyboard.
+
+
+       LISTEN=PRIVATE[:tcp-port]   |   ip-address[:tcp-port][,ip-address[:tcp-
+       port]][,...]
+              One or more combinations of IP addresses and optional  TCP  port
+              seperated  by  commas that vlmcsd(8) should listen on or PRIVATE
+              to listen on all private IP addresses only. The default port  is
+              1688.  If  you  use an explicit port number, append it to the IP
+              address seperated by a colon. If you use a port number  and  the
+              IP  address  contains colons, you must enclose the IP address in
+              brackets. For example 192.168.0.2,[fd00::dead:beef]:5678  causes
+              vlmcsd(8) to listen on 192.168.0.2 port 1688 and fd00::dead:beef
+              port 5678.
+
+
+       WINDOWS=epid
+              Defines the ePID that is used for Windows  activations.  If  you
+              ommit  this parameter, vlmcsd generates a random ePID when it is
+              started.
+
+
+       OFFICE2010=epid
+              Defines the ePID that is used for Office  2010  activations.  If
+              you ommit this parameter, vlmcsd(8) generates a random ePID when
+              it is started.
+
+
+       OFFICE2013=epid
+              Defines the ePID that is used  for  Office  (versions  2013  and
+              greater)  activations.  If  you  ommit this parameter, vlmcsd(8)
+              generates a random ePID when it is started.
+
+
+       HWID=hwid
+              Defines the HwId that is sent to clients. hwid must be specified
+              as  16  hex  digits  that are interpreted as a series of 8 bytes
+              (big endian). Any character that is not  a  hex  digit  will  be
+              ignored. This is for better readability.
+
+
+       TZ=posix-time-zone-string
+              Set  the time zone to posix-time-zone-string. It must conform to
+              the POSIX ⟨http://pubs.opengroup.org/onlinepubs/009695399/
+              basedefs/xbd_chap08.html⟩  specification.  Simplified  time zone
+              strings  like  "Europe/London"  or  "America/Detroit"  are   not
+              allowed.  This has the very simple reason that there is no space
+              on the floppy to store the time zone database.
+
+              The string CET-1CEST,M3.5.0,M10.5.0/3 (most countries in Europe)
+              reads as follows:
+
+              CET       The standard (winter) time zone has the name CET.
+
+              -1        The  standard time zone is one hour east of UTC. Nega‐
+                        tive numbers are east of  UTC.  Positive  numbers  are
+                        west of UTC.
+
+              CEST      The  daylight  saving  (summer) time zone has the name
+                        CEST.
+
+              M3.5.0    Daylight saving time starts in the 3rd  month  (March)
+                        on  the 5th (=last) occurence of weekday 0 (Sunday) at
+                        2 o'clock (2 o'clock is a default value).
+
+              M10.5.0/3 Daylight saving time ends in the 10th month  (October)
+                        on  the 5th (=last) occurence of weekday 0 (Sunday) at
+                        3 o'clock.
+
+              If you don't have daylight saving time, things are  easier.  For
+              Chinese  Standard  Time  for example, just use CST-8 as the time
+              zone string.
+
+              On  a  Linux  desktop  system,  you  can  use  a  command   like
+              strings /usr/share/zoneinfo/America/New_York | tail -n1.    This
+              should return EST5EDT,M3.2.0,M11.1.0. You can use  the  returned
+              string for the TZ=posix-time-zone-string parameter.
+
+
+       IPV4_CONFIG=DHCP | STATIC
+              This  determines  how  you want to configure IPv4 networking. If
+              you use IPV4_CONFIG=STATIC, you  must  supply  additional  para‐
+              maters to the APPEND command line.
+
+
+       IPV4_ADDRESS=ipv4-address/CIDR-mask
+              Use ipv4-address with netmask CIDR-mask for static IPv4 configu‐
+              ration. The netmask must  not  be  ommitted.  For  IPv4  address
+              192.168.12.17    with    a    netmask   of   255.255.255.0   use
+              192.168.12.17/24. For IPv4 address 10.4.0.8 with  a  netmask  of
+              255.255.0.0  use  10.4.0.8/16. This paramater is ignored, if you
+              used IPV4_CONFIG=DHCP.
+
+
+       IPV4_GATEWAY=ipv4-address | NONE
+              Use ipv4-address as the default gateway.  This  is  usually  the
+              IPv4 address of your router. You may specify NONE explicitly for
+              no gateway. In this case your virtual machine is only visible on
+              its  local LAN. This paramater is ignored, if you used IPV4_CON‐
+              FIG=DHCP.
+
+
+       IPV4_DNS1=ipv4-address | NONE
+              Use ipv4-address as the primary name server.  In  home  networks
+              this  is  often the IPv4 address of your router. You may specify
+              NONE explicitly. If you specified NONE for both  IPV4_DNS1=  and
+              IPV4_DNS2=, your virtual machine cannot resolve host names to IP
+              addresses. While vlmcsd(8) works perfectly without DNS  servers,
+              you  must  use  IP  addresses when referring to a host, e.g. for
+              specifying an NTP server. This paramater is ignored, if you used
+              IPV4_CONFIG=DHCP.
+
+
+       IPV4_DNS2=ipv4-address | NONE
+              Use  ipv4-address  as  the secondary name server. It serves as a
+              backup if the primary name server is not  available.  Home  net‐
+              works often don't have a secondary name server. In this case set
+              this to NONE. This paramater is ignored, if you  used  IPV4_CON‐
+              FIG=DHCP.
+
+
+       NTP_SERVER=host-name | ipv4-address | NONE
+              This  sets  the name of a time server using the NTP protocol. If
+              your virtualization environment reliably provides time, you  can
+              set  this  to  NONE.  Don't  use  a  public  time  service  like
+              pool.ntp.org or time.nist.gov if you have a (at  least  somewhat
+              reliable) NTP server in your LAN.
+
+
+       HOST_NAME=host-name
+              Sets  the  local host name for your virtual machine. It can be a
+              single name or a fully-qualified domain name FQDN. If  you  used
+              IPV4_CONFIG=DHCP and your DHCP server returns a domain name, the
+              domain part of an FQDN will be replaced by that name. This  host
+              name  or  host  part of an FQDN will not replaced by a host name
+              returned via DHCP. The host name is not important for the opera‐
+              tion of floppy144.vfd.
+
+
+       ROOT_PASSWORD=password
+              Sets the password of the root user.
+
+
+       USER_NAME=username
+              Sets  the name of for a general user with no special privileges.
+              This user can login but can't do much.
+
+
+       USER_PASSWORD=password
+              Sets the password for the user defined by USER_NAME=username.
+
+
+       GUEST_PASSWORD=password
+              Sets the password for the pre-defined guest user. This user  has
+              the   same   priviliges   (none)   as   the   user   defined  by
+              USER_NAME=username.
+
+
+       INETD=Y | N
+              INETD=Y specifies that inetd(8) should automatically be started.
+              That means you can telnet and ftp to your virtual machine.
+
+
+OPERATION
+   Diskless System
+       The  floppy144.vfd  virtual  machine  is  a  diskless system that works
+       entirely from RAM. The file system is actually a RAM disk that is  cre‐
+       ated from the initrd(4) file on the floppy image.
+
+       Anything  you'll do from inside the virtual machine, for instance edit‐
+       ing a config file, will be lost when you reboot the machine. So, if you
+       ever  asked  yourself  if  rm  -fr  / (root privileges required) really
+       deletes all files from all mounted partitions, the floppy144.vfd VM  is
+       the right place to test it (Yes, it does).
+
+       The  VM  uses  a  RAM disk, because the Linux kernel had to be stripped
+       down to essential features to fit on a 1.44 MB floppy. It has no floppy
+       driver,  no  disk  file  system  drivers and no block layer (cannot use
+       disks of any type).
+
+
+   System startup
+       The kernel boots up very quickly and the init script (/sbin/init) waits
+       5 seconds. In these 5 seconds you can:
+
+              Press  'm'  to manually enter the time zone and the IPv4 parame‐
+              ters. These will be queried interactively.
+              Press 't' to manually enter the time zone only.
+              Press 's' to escape to a shell.
+
+       If you don't want to 5 seconds for continuing the init process, you can
+       press  any  other key to speed things up. At the end of the init script
+       you should see thatvlmcsd(8) has started. You should also  see  the  IP
+       addresses and all user names and passwords.
+
+
+   Logging into the system
+       There  are 5 local logins provided on /dev/tty2 to /dev/tty6. To switch
+       to these logins, simply press ALT-F2 to ALT-F6. To return to  the  con‐
+       sole  on  /dev/tty1,  press ALT-F1. If inetd(8) is running you can also
+       use telnet(1). This allows you use a terminal program (e.g. putty) that
+       can  utilize  your  keyboard  layout, can be resized and has full UTF-8
+       support. The local terminals support US keyboard layout only. Please be
+       aware  that telnet(1) is unencrypted and everything including passwords
+       is transmitted in clear text. There is not  enough  space  for  an  ssh
+       server like sshd(8) or dropbear(8).
+
+       The  floppy image only provides basic Unix commands. Type busybox or ll
+       /bin to get a list. The only editor available is vi(1).  If  you  don't
+       like  vi,  you  may transfer config files via ftp(1) edit them with the
+       editor of your choice and transfer them back to the floppy144.vfd VM.
+
+
+   The menu system
+       You'll find a menu system on /dev/tty8 (press ALT-F8  to  see  it).  It
+       allows  you  performing  some  administrative tasks and to view various
+       system information. It is mainly for users that do not have much  expe‐
+       rience with Unix commands.
+
+
+       1) (Re)start vlmcsd
+              Starts  or  restarts  vlmcsd(8).  This  is useful if you changed
+              /etc/vlmcsd.ini(5).
+
+
+       2) Stop vlmcsd
+              Stops vlmcsd(8).
+
+
+       3) (Re)start inetd
+              Starts or restarts inetd(8). If inetd(8) is  restarted,  current
+              clients  connected  via telnet(1) or ftp(1) will not be dropped.
+              They can continue their sessions. This is useful if you  changed
+              /etc/inetd.conf(5).
+
+
+       4) Stop inet
+              Stops  inetd(8).  All  clients connected via telnet(1) or ftp(1)
+              will be dropped immediately.
+
+
+       5) Change the time zone
+              Just in case you missed pressing 't' during system startup. This
+              also  restarts vlmcsd(8) if it was running to notify it that the
+              time zone has changed.  Restarting  vlmcsd(8)  allows  currently
+              connected clients to finish their activation.
+
+
+       k) Change keyboard layout
+              This allows you to select a different keyboard layout.
+
+
+       6) Show all kernel boot parameters
+              Shows  all  parameters passed to the kernel via syslinux.cfg. If
+              you experience any unexpected behavior,  you  can  use  this  to
+              check if your APPEND line in syslinux.cfg is correct. The output
+              is piped through less(1). So press 'q' to return to the menu.
+
+
+       7) Show boot log (dmesg)
+              Shows the boot log of the kernel. The output  is  piped  through
+              less(1). So press 'q' to return to the menu.
+
+
+       8) Show TCP/IP configuration
+              Shows  the  TCP/IP  configuration, listening sockets and current
+              TCP and UDP connections. Useful, if you problems with  net  con‐
+              nectivity.  The output is piped through less(1). So press 'q' to
+              return to the menu.
+
+
+       9) Show running processes
+              Shows all processes including memory and CPU usage. Display will
+              updated every second. Press 'q' or CTRL-C to return to the menu.
+
+
+       s) Shutdown
+              Shuts down the floppy144.vfd virtual machine. Proper shutdown is
+              not required. It is ok to use a hard power off in your  virtual‐
+              ization program.
+
+
+       r) Reboot
+              Reboots  the floppy144.vfd virtual machine. Proper reboot is not
+              required. It is ok to use a hard reset  in  your  virtualization
+              program.
+
+
+PERMANENT CHANGES OF INITRD
+       If  you  want to change any file or script of the file system (e.g. the
+       init script /sbin/init or /etc/vlmcsd.ini), you'll need  to  mount  the
+       floppy  image,  unpack  the  initrd(4)  file, make any modfications you
+       like, create a new initrd(4) file and copy it to the mounted floppy.
+
+       To unpack the initrd(4) file you'll need xz(1)  (or  lzma(1)  on  older
+       unix-like OSses) and cpio(1). These can be installed using your package
+       manager on all major distros. It is  ok  to  use  the  BSD  version  of
+       cpio(1).  No  need  to get the GNU version for BSD users.  Provided the
+       floppy is mounted in /mnt/floppy do the following:
+
+       Create an empty directory
+              mkdir ~/vlmcsd-floppy-initrd
+
+       cd into that directory
+              cd ~/vlmcsd-floppy-initrd
+
+       Unpack initrd
+              cat /mnt/floppy/initrd | unlzma | cpio -i
+
+       After applying your changes build a new initrd(4) file:
+
+
+       cd into your directory
+              cd ~/vlmcsd-floppy-initrd
+
+       Create the packed file
+              find . | cpio -o -H newc | lzma > /mnt/floppy/initrd
+
+       Do not try to use 'lzma -9' to achive better  compression.  The  kernel
+       can't  read  the  resulting  file. While customizing the initrd(4) file
+       works on almost any unix-like OS, it does not work on Windows even  not
+       with  Cygwin. The reason is that the NTFS file system can't handle uids
+       and gids. These cannot be preserved when unpacking the cpio(1)  archive
+       to  NTFS. If you use the WSL subsystem of Windows 10 Redstone (Anniver‐
+       sary Update) and later, you must make sure to unpack the initrd(4) file
+       to  a directory on VolFs (normally everything that is not mounted under
+       /mnt). The initrd(4) file can be on a VolFs or DriveFs.
+
+
+FAQ
+   On what distro is the floppy image based?
+       None. Besides the boot loader ldlinux.sys, there are only  three  bina‐
+       ries:  The  Linux  kernel bzImage, busybox(1) and vlmcsdmulti-x86-musl-
+       static. bzImage  and  busybox(1)  have  been  compiled  with  carefully
+       selected  configuration  parameters  not  found in any distro. This was
+       neccesary to fit everything on a 1.44 MB floppy.
+
+
+   Why is a rather old Linux kernel (3.12) used?
+       Linux 3.12 is the last kernel that can be booted with  16  MB  of  RAM.
+       Beginning with Linux 3.13 it requires much more memory (about 80 MB) to
+       boot. The floppy image is regularly tested with newer  kernels.  Every‐
+       thing works except that you need to assign much more main memory to the
+       virtual machine.
+
+
+   Can the floppy be booted on bare metal?
+       Basically yes. However, only Intel Pro/1000 and  AMD  PCNET32  ethernet
+       cards  are supported by the kernel. In addition there is no USB support
+       compiled into the kernel. That means you can only use an IBM AT or  IBM
+       PS/2 keyboard which are not available on newer hardware.
+
+
+FILES
+       syslinux.cfg, vlmcsd.ini(5)
+
+
+BUGS
+       IPv6 cannot be configured with static or manual parameters.
+       DHCPv6 is not supported.
+       ´ip route add ...' does not work. Use 'route add ...' instead.
+
+
+AUTHOR
+       floppy144.vfd has been created by Hotbird64
+
+
+CREDITS
+       Linus Torvalds et al. for the Linux kernel
+       Erik Andersen et al. for the original uClibc
+       Waldemar Brodkorb et al. for uClibc-ng
+       Denys Vlasenko et al. for BusyBox
+       H. Peter Anvin et al. for SYSLINUX
+
+
+SEE ALSO
+       vlmcsd(8), vlmcsd.ini(5), initrd(4), busybox(1), syslinux(1)
+
+
+
+Hotbird64                          June 2016                  VLMCSD-FLOPPY(7)

vlmcsd.7.html

@@ -1,5 +1,5 @@
 <!-- Creator     : groff version 1.22.3 -->
-<!-- CreationDate: Sun Jun  5 14:31:10 2016 -->
+<!-- CreationDate: Wed Jul 13 12:34:01 2016 -->
 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd">
 <html>

vlmcsd.8

@@ -1,5 +1,5 @@
 .mso www.tmac
-.TH VLMCSD 8 "June 2016" "Hotbird64" "KMS Activation Manual"
+.TH VLMCSD 8 "July 2016" "Hotbird64" "KMS Activation Manual"
 .LO 8
 
 .SH NAME
@@ -39,6 +39,31 @@ If no port is specified, vlmcsd uses the default port according to a preceding \
 .IP
 If you specify a link local IPv6 address (fe80::/10, usually starting with fe80::), it must be followed by a percent sign (%) and a scope id (=network interface name or number) on most unixoid OSses including Linux, Android, MacOS X and iOS, e.g. fe80::1234:56ff:fe78:9abc\fB%eth0\fR or [fe80::1234:56ff:fe78:9abc\fB%2\fR]:1688. Windows (including cygwin) does not require a scope id unless the same link local address is used on more than one network interface. Windows does not accept a name and the scope id must be a number.
 
+.IP "\fB-o \fIlevel\fR"
+Sets the \fIlevel\fR of protection against activations from public IP addresses. The default is \fB-o0\fR for no protection.
+
+\fB-o1\fR causes vlmcsd not to listen on all IP addresses but on private IP addresses only. IPv4 addresses in the 100.64.0.0/10 range (see RFC6598) are not treated as private since they can be reached from other users of your ISP. Private IPv4 addresses are 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16 and 127.0.0.0/8. vlmcsd treats all IPv6 addresses not within 2000::/3 as private addresses.
+
+If \fB-o1\fR is combined with \fB-L\fR, it will listen on all private IP addresses plus the ones specified by one or more \fB-L\fR statements. If \fB-o1\fR is combined with \fB-P\fR, only the last \fB-P\fR statement will be used.
+
+Using \fB-o1\fR does not protect you if you enable NAT port forwarding on your router to your vlmcsd machine. It is identical to using multiple -L statements with all of your private IP addresses. What \fB-o1\fR does for you, is automatically enumerating your private IP addresses.
+
+\fB-o2\fR does not affect the interfaces, vlmcsd is listening on. When a clients connects, vlmcsd immediately drops the connection if the client has a public IP address. Unlike \fB-o1\fR clients will be able to establish a TCP connection but it will be closed without a single byte sent over the connection. This protects against clients with public IP addresses even if NAT port forwarding is used. While \fB-o2\fR offers a higher level of protection than \fB-o1\fR, the client sees that the KMS TCP port (1688 by default) is actually accepting connections.
+
+\fB-o3\fR combines \fB-o1\fR and \fB-o2\fR. vlmcsd listens on private interfaces only and if a public client manages to connect anyway due to NAT port forwarding, it will be immediately dropped.
+
+If you use any form of TCP level port forwarding (e.g. \fBnc\fR(1), \fBnetcat\fR(1), \fBssh\fR(1) port forwarding or similar) to redirect KMS requests to vlmcsd, there will be no protection even if you use \fB-o2\fR or \fB-o3\fR. This is due to the simple fact that vlmcsd sees the IP address of the redirector and not the IP address of the client.
+
+\fB-o1\fR (and thus \fB-o3\fR) is not (yet) available in some scenarios:
+
+.RS 12
+FreeBSD: There is a longtime unfixed
+.URL https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=178881 bug ""
+in the 32-bit ABI of the 64-bit kernel. If you have a 64-bit FreeBSD kernel, you must run the 64-bit version of vlmcsd if you use \fB-o1\fR or \fB-o3\fR. The 32-bit version causes undefined behavior up to crashing vlmcsd. Other BSDs (NetBSD, OpenBSD, Dragonfly and Mac OS X) work correctly.
+
+If vlmcsd was started by an internet superserver or was compiled to use Microsoft RPC (Windows only) or simple sockets, \fB-o1\fR and \fB-o3\fR are not available by design.
+.RE
+
 .IP "\fB-P\fR \fIport"
 Use TCP \fIport\fR for all subsequent \fB-L\fR statements that do not include an optional port. If you use \fB-P\fR and \fB-L\fR, \fB-P\fR must be specified before \fB-L\fR.
 
@@ -70,6 +95,9 @@ type tail -f \fIfile\fR.
 .IP
 If you use the special \fIfilename\fR "syslog", vlmcsd uses \fBsyslog\fR(3) for logging. If your system has no syslog service (/dev/log) installed, logging output will go to /dev/console. Syslog logging is not available in the native Windows version. The Cygwin version does support syslog logging.
 
+.IP "\fB-T0\fR and \fB-T1\fR"
+Disable (\fB-T0\fR) or enable (\fB-T1\fR) the inclusion of date and time in each line of the log. The default is \fB-T1\fR. \fB-T0\fR is useful if you log to \fBstdout\fR(3) which is redirected to another logging mechanism that already includes date and time in its output, for instance \fBsystemd-journald\fR(8). If you log to \fBsyslog\fR(3), \fB-T1\fR is ignored and date and time will never be included in the output sent to \fBsyslog\fR(3).
+
 .IP "\fB-D\fR"
 Normally vlmcsd daemonizes and runs in background (except the native Windows version). If \fB-D\fR is specified, vlmcsd does not daemonize and runs in foreground. This is useful for testing and allows you to simply press <Ctrl-C> to exit vlmcsd.
 .PP
@@ -225,7 +253,7 @@ Office, Project and Visio must be volume license versions.
 .IP "\fBvlmcsd.ini\fR(5)"
 
 .SH EXAMPLES
-.IP "\fBvlmcsd -f\fR"
+.IP "\fBvlmcsd -De\fR"
 Starts \fBvlmcsd\fR in foreground. Useful if you use it for the first time and want to see what's happening when a client requests activation.
 
 .IP "\fBvlmcsd -l /var/log/vlmcsd.log\fR"

vlmcsd.8.dos.txt

@@ -84,55 +84,114 @@ OPTIONS
               accept a name and the scope id must be a number.
 
 
+       -o level
+              Sets the level of protection against activations from public  IP
+              addresses. The default is -o0 for no protection.
+
+              -o1  causes vlmcsd not to listen on all IP addresses but on pri‐
+              vate IP addresses only.  IPv4  addresses  in  the  100.64.0.0/10
+              range (see RFC6598) are not treated as private since they can be
+              reached from other users of your ISP. Private IPv4 addresses are
+              10.0.0.0/8,  172.16.0.0/12,  192.168.0.0/16,  169.254.0.0/16 and
+              127.0.0.0/8.  vlmcsd  treats  all  IPv6  addresses  not   within
+              2000::/3 as private addresses.
+
+              If  -o1  is  combined  with -L, it will listen on all private IP
+              addresses plus the ones specified by one or more -L  statements.
+              If  -o1  is combined with -P, only the last -P statement will be
+              used.
+
+              Using -o1 does not protect you if you enable NAT port forwarding
+              on  your router to your vlmcsd machine. It is identical to using
+              multiple -L statements with all of your  private  IP  addresses.
+              What -o1 does for you, is automatically enumerating your private
+              IP addresses.
+
+              -o2 does not affect the interfaces, vlmcsd is listening on. When
+              a  clients  connects, vlmcsd immediately drops the connection if
+              the client has a public IP address. Unlike -o1 clients  will  be
+              able to establish a TCP connection but it will be closed without
+              a single byte sent over the connection.  This  protects  against
+              clients  with public IP addresses even if NAT port forwarding is
+              used. While -o2 offers a higher level of  protection  than  -o1,
+              the client sees that the KMS TCP port (1688 by default) is actu‐
+              ally accepting connections.
+
+              -o3 combines -o1 and -o2. vlmcsd listens on  private  interfaces
+              only and if a public client manages to connect anyway due to NAT
+              port forwarding, it will be immediately dropped.
+
+              If you use any form of TCP level port  forwarding  (e.g.  nc(1),
+              netcat(1),  ssh(1)  port  forwarding or similar) to redirect KMS
+              requests to vlmcsd, there will be no protection even if you  use
+              -o2  or -o3. This is due to the simple fact that vlmcsd sees the
+              IP address of the redirector and  not  the  IP  address  of  the
+              client.
+
+              -o1 (and thus -o3) is not (yet) available in some scenarios:
+
+                   FreeBSD: There is a longtime unfixed bug ⟨https://
+                   bugs.freebsd.org/bugzilla/show_bug.cgi?id=178881⟩  in   the
+                   32-bit ABI of the 64-bit kernel. If you have a 64-bit Free‐
+                   BSD kernel, you must run the 64-bit version  of  vlmcsd  if
+                   you  use  -o1  or  -o3. The 32-bit version causes undefined
+                   behavior up to crashing vlmcsd. Other BSDs  (NetBSD,  Open‐
+                   BSD, Dragonfly and Mac OS X) work correctly.
+
+                   If  vlmcsd  was  started  by an internet superserver or was
+                   compiled to use Microsoft  RPC  (Windows  only)  or  simple
+                   sockets, -o1 and -o3 are not available by design.
+
+
        -P port
-              Use TCP port for  all  subsequent  -L  statements  that  do  not
+              Use  TCP  port  for  all  subsequent  -L  statements that do not
               include an optional port. If you use -P and -L, -P must be spec‐
               ified before -L.
 
 
        -F0 and -F1
-              Allow (-F1) or disallow (-F0) binding to IP addresses  that  are
+              Allow  (-F1)  or disallow (-F0) binding to IP addresses that are
               currently not configured on your system. The default is -F0. -F1
               allows you to bind to an IP address that may be configured after
-              you  started  vlmcsd. vlmcsd will listen on that address as soon
+              you started vlmcsd. vlmcsd will listen on that address  as  soon
-              as it becomes available. This feature is  only  available  under
+              as  it  becomes  available. This feature is only available under
-              Linux  (IPv4  and  IPv6) and FreeBSD (IPv4 only). FreeBSD allows
+              Linux (IPv4 and IPv6) and FreeBSD (IPv4  only).  FreeBSD  allows
-              this feature only for the root user (more  correctly:  processes
+              this  feature  only for the root user (more correctly: processes
-              that  have  the  PRIV_NETINET_BINDANY privilege). Linux does not
+              that have the PRIV_NETINET_BINDANY privilege).  Linux  does  not
               require a capability for this.
 
 
        -t seconds
-              Timeout the TCP connection with the client  after  seconds  sec‐
+              Timeout  the  TCP  connection with the client after seconds sec‐
-              onds.  After  sending  an  activation request. RPC keeps the TCP
+              onds. After sending an activation request.  RPC  keeps  the  TCP
               connection for a while. The default is 30 seconds. You may spec‐
-              ify  a  shorter period to free ressources on your device faster.
+              ify a shorter period to free ressources on your  device  faster.
-              This is useful for devices with limited main memory  or  if  you
+              This  is  useful  for devices with limited main memory or if you
               used -m to limit the concurrent clients that may request activa‐
-              tion. Microsoft RPC  clients  disconnect  after  30  seconds  by
+              tion.  Microsoft  RPC  clients  disconnect  after  30 seconds by
-              default.  Setting  seconds to a greater value does not make much
+              default. Setting seconds to a greater value does not  make  much
               sense.
 
 
        -m concurrent-clients
-              Limit the number of clients that will be  handled  concurrently.
+              Limit  the  number of clients that will be handled concurrently.
               This is useful for devices with limited ressources or if you are
-              experiencing DoS attacks that  spawn  thousands  of  threads  or
+              experiencing  DoS  attacks  that  spawn  thousands of threads or
-              forked  processes. If additional clients connect to vlmcsd, they
+              forked processes. If additional clients connect to vlmcsd,  they
-              need to wait until another client disconnects. If you  set  con‐
+              need  to  wait until another client disconnects. If you set con‐
               current-clients to a small value ( <10 ), you should also select
-              a reasonable timeout of 2 or 3 seconds with -t. The  default  is
+              a  reasonable  timeout of 2 or 3 seconds with -t. The default is
               no limit.
 
 
-       -d     Disconnect  each client after processing one activation request.
+       -d     Disconnect each client after processing one activation  request.
-              This is a direct violation of  DCE  RPC  but  may  help  if  you
+              This  is  a  direct  violation  of  DCE  RPC but may help if you
-              receive  malicous  fake  RPC requests that block your threads or
+              receive malicous fake RPC requests that block  your  threads  or
-              forked processes. Some other KMS emulators (e.g. py-kms)  behave
+              forked  processes. Some other KMS emulators (e.g. py-kms) behave
               this way.
 
 
-       -k     Do   not  disconnect  clients  after  processing  an  activation
+       -k     Do  not  disconnect  clients  after  processing  an   activation
               request. This selects the default behavior. -k is useful only if
               you used an ini file (see vlmcsd.ini(5) and -i). If the ini file
               contains the line "DisconnectClientsImmediately = true", you can
@@ -140,103 +199,113 @@ OPTIONS
 
 
        -N0 and -N1
-              Disables  (-N0)  or  enables (-N1) the use of the NDR64 transfer
+              Disables (-N0) or enables (-N1) the use of  the  NDR64  transfer
-              syntax in the RPC protocol.  Unlike  Microsoft  vlmcsd  supports
+              syntax  in  the  RPC  protocol. Unlike Microsoft vlmcsd supports
               NDR64 on 32-bit operating systems. Microsoft introduced NDR64 in
-              Windows Vista but their KMS servers started using it  with  Win‐
+              Windows  Vista  but their KMS servers started using it with Win‐
-              dows  8.  Thus  if  you  choose random ePIDs, vlmcsd will select
+              dows 8. Thus if you choose  random  ePIDs,  vlmcsd  will  select
-              ePIDs with build numbers 9200 and 9600 if you enable  NDR64  and
+              ePIDs  with  build numbers 9200 and 9600 if you enable NDR64 and
               build numbers 6002 and 7601 if you disable NDR64. The default is
               to enable NDR64.
 
 
        -B0 and -B1
-              Disables (-B0) or enables (-B1) bind  time  feature  negotiation
+              Disables  (-B0)  or  enables (-B1) bind time feature negotiation
               (BTFN) in the RPC protocol. All Windows operating systems start‐
-              ing with Vista support BTFN and try to negotiate it when  initi‐
+              ing  with Vista support BTFN and try to negotiate it when initi‐
               ating an RPC connection. Thus consider turning it off as a debug
               / troubleshooting feature only. Some older firewalls that selec‐
-              tively  block or redirect RPC traffic may get confused when they
+              tively block or redirect RPC traffic may get confused when  they
               detect NDR64 or BTFN.
 
 
        -l filename
               Use filename as a log file. The log file records all activations
-              with  IP  address,  Windows  workstation  name  (no  reverse DNS
+              with IP  address,  Windows  workstation  name  (no  reverse  DNS
-              lookup), activated product, KMS protocol, time and date. If  you
+              lookup),  activated product, KMS protocol, time and date. If you
               do not specify a log file, no log is created. For a live view of
               the log file type tail -f file.
 
-              If you use the special filename "syslog", vlmcsd uses  syslog(3)
+              If  you use the special filename "syslog", vlmcsd uses syslog(3)
-              for  logging.  If  your  system has no syslog service (/dev/log)
+              for logging. If your system has  no  syslog  service  (/dev/log)
-              installed, logging output will go to /dev/console.  Syslog  log‐
+              installed,  logging  output will go to /dev/console. Syslog log‐
-              ging  is not available in the native Windows version. The Cygwin
+              ging is not available in the native Windows version. The  Cygwin
               version does support syslog logging.
 
 
-       -D     Normally vlmcsd daemonizes and runs in  background  (except  the
+       -T0 and -T1
-              native  Windows  version).  If  -D is specified, vlmcsd does not
+              Disable  (-T0) or enable (-T1) the inclusion of date and time in
+              each line of the log. The default is -T1. -T0 is useful  if  you
+              log  to  stdout(3) which is redirected to another logging mecha‐
+              nism that already includes date and  time  in  its  output,  for
+              instance  systemd-journald(8).  If  you log to syslog(3), -T1 is
+              ignored and date and time will never be included in  the  output
+              sent to syslog(3).
+
+
+       -D     Normally  vlmcsd  daemonizes  and runs in background (except the
+              native Windows version). If -D is  specified,  vlmcsd  does  not
               daemonize and runs in foreground. This is useful for testing and
               allows you to simply press <Ctrl-C> to exit vlmcsd.
 
-              The  native  Windows version never daemonizes and always behaves
+              The native Windows version never daemonizes and  always  behaves
               as if -D had been specified. You may want to install vlmcsd as a
               service instead. See -s.
 
 
        -e     If specified, vlmcsd ignores -l and writes all logging output to
-              stdout(3). This is mainly useful for testing and  debugging  and
+              stdout(3).  This  is mainly useful for testing and debugging and
               often combined with -D.
 
 
-       -v     Use  verbose  logging.  Logs every parameter of the base request
+       -v     Use verbose logging. Logs every parameter of  the  base  request
-              and the base response. It also logs the HWID of the  KMS  server
+              and  the  base response. It also logs the HWID of the KMS server
-              if  KMS  protocol  version  6 is used. This option is mainly for
+              if KMS protocol version 6 is used. This  option  is  mainly  for
-              debugging purposes. It only has an effect if some form  of  log‐
+              debugging  purposes.  It only has an effect if some form of log‐
-              ging  is  used. Thus -v does not make sense if not used with -l,
+              ging is used. Thus -v does not make sense if not used  with  -l,
               -e or -f.
 
 
-       -q     Do not use verbose logging. This is actually the default  behav‐
+       -q     Do  not use verbose logging. This is actually the default behav‐
               ior. It only makes sense if you use vlmcsd with an ini file (see
-              -i and  vlmcsd.ini(5)).  If  the  ini  file  contains  the  line
+              -i  and  vlmcsd.ini(5)).  If  the  ini  file  contains  the line
               "LogVerbose = true" you can use -q to restore the default behav‐
               ior.
 
 
        -p filename
               Create pid file filename. This has nothing to do with KMS ePIDs.
-              A  pid  file  is  a file where vlmcsd writes its own process id.
+              A pid file is a file where vlmcsd writes  its  own  process  id.
-              This is used  by  standard  init  scripts  (typically  found  in
+              This  is  used  by  standard  init  scripts  (typically found in
               /etc/init.d). The default is not to write a pid file.
 
 
        -u user and -g group
-              Causes  vlmcsd  to  run in the specified user and group security
+              Causes vlmcsd to run in the specified user  and  group  security
-              context. The main purpose for this is to  drop  root  privileges
+              context.  The  main  purpose for this is to drop root privileges
-              after  it  has  been  started from the root account. To use this
+              after it has been started from the root  account.  To  use  this
-              feature from cygwin you must run cyglsa-config and  the  account
+              feature  from  cygwin you must run cyglsa-config and the account
-              from  which  vlmcsd is started must have the rights "Act as part
+              from which vlmcsd is started must have the rights "Act  as  part
-              of the operating system" and "Replace a  process  level  token".
+              of  the  operating  system" and "Replace a process level token".
               The native Windows version does not support these options.
 
-              The  actual  security  context switch is performed after the TCP
+              The actual security context switch is performed  after  the  TCP
-              sockets have been created. This allows  you  to  use  privileged
+              sockets  have  been  created.  This allows you to use privileged
               ports (< 1024) when you start vlmcsd from the root account.
 
               However if you use an ini, pid or log file, you must ensure that
-              the unprivileged user has access to these files. You can  always
+              the  unprivileged user has access to these files. You can always
-              log  to syslog(3) from an unprivileged account on most platforms
+              log to syslog(3) from an unprivileged account on most  platforms
               (see -l).
 
 
        -w ePID
-              Use ePID as Windows ePID. If specified, -r  is  disregarded  for
+              Use  ePID  as  Windows ePID. If specified, -r is disregarded for
               Windows.
 
 
        -0 ePID
-              Use  ePID  as Office 2010 ePID (including Project and Visio). If
+              Use ePID as Office 2010 ePID (including Project and  Visio).  If
               specified, -r is disregarded for Office 2010.
 
 
@@ -246,14 +315,14 @@ OPTIONS
 
 
        -H HwId
-              Use  HwId  for  all products. All HWIDs in the ini file (see -i)
+              Use HwId for all products. All HWIDs in the ini  file  (see  -i)
               will not be used. In an ini file you can specify a seperate HWID
-              for  each application-guid. This is not possible when entering a
+              for each application-guid. This is not possible when entering  a
               HWID from the command line.
 
-              HwId must be specified as 16 hex digits that are interpreted  as
+              HwId  must be specified as 16 hex digits that are interpreted as
-              a  series  of  8 bytes (big endian). Any character that is not a
+              a series of 8 bytes (big endian). Any character that  is  not  a
-              hex digit will be ignored. This is for better  readability.  The
+              hex  digit  will be ignored. This is for better readability. The
               following commands are identical:
 
               vlmcsd -H 0123456789ABCDEF
@@ -262,14 +331,14 @@ OPTIONS
 
 
        -i filename
-              Use  configuration file (aka ini file) filename. Most configura‐
+              Use configuration file (aka ini file) filename. Most  configura‐
               tion parameters can be set either via the command line or an ini
-              file.  The command line always has precedence over configuration
+              file. The command line always has precedence over  configuration
-              items in the ini file. See vlmcsd.ini(5) for the format  of  the
+              items  in  the ini file. See vlmcsd.ini(5) for the format of the
               configuration file.
 
-              If  vlmcsd has been compiled to use a default configuration file
+              If vlmcsd has been compiled to use a default configuration  file
-              (often /etc/vlmcsd.ini), you may use -i- to ignore  the  default
+              (often  /etc/vlmcsd.ini),  you may use -i- to ignore the default
               configuration file.
 
 
@@ -282,118 +351,118 @@ OPTIONS
               - the file specified by -i does not contain the application-guid
               for the KMS request
 
-              -r0 means there  are  no  random  ePIDs.  vlmcsd  simply  issues
+              -r0  means  there  are  no  random  ePIDs.  vlmcsd simply issues
-              default  ePIDs  that  are built into the binary at compile time.
+              default ePIDs that are built into the binary  at  compile  time.
-              Pro: behaves like real KMS server that also  always  issues  the
+              Pro:  behaves  like  real KMS server that also always issues the
-              same  ePID.  Con: Microsoft may start blacklisting again and the
+              same ePID. Con: Microsoft may start blacklisting again  and  the
               default ePID may not work any longer.
 
-              -r1 instructs vlmcsd to generate random ePIDs when  the  program
+              -r1  instructs  vlmcsd to generate random ePIDs when the program
               starts or receives a SIGHUP signal and uses these ePIDs until it
-              is stopped or receives another SIGHUP. Most other KMS  emulators
+              is  stopped or receives another SIGHUP. Most other KMS emulators
-              generate  a  new  ePID  on  every  KMS  request.  This is easily
+              generate a new  ePID  on  every  KMS  request.  This  is  easily
               detectable. Microsoft could just modify sppsvc.exe in a way that
-              it  always  sends two identical KMS requests in two RPC requests
+              it always sends two identical KMS requests in two  RPC  requests
-              but over the same TCP connection. If both KMS responses  contain
+              but  over the same TCP connection. If both KMS responses contain
-              the  different  ePIDs, the KMS server is not genuine. -r1 is the
+              the different ePIDs, the KMS server is not genuine. -r1  is  the
-              default mode. -r1 also ensures that all  three  ePIDs  (Windows,
+              default  mode.  -r1  also ensures that all three ePIDs (Windows,
-              Office  2010  and  Office 2013) use the same OS build number and
+              Office 2010 and Office 2013) use the same OS  build  number  and
               LCID (language id).
 
               If vlmcsd has been started by an internet superserver, -r1 works
-              identically  to  -r2. This is simply due to the fact that vlmcsd
+              identically to -r2. This is simply due to the fact  that  vlmcsd
               is started upon a connection request and does not stay in memory
               after servicing a KMS request.
 
-              -r2  behaves  like  most  other KMS server emulators with random
+              -r2 behaves like most other KMS  server  emulators  with  random
-              support and generates a new random ePID on  every  request.  Use
+              support  and  generates  a new random ePID on every request. Use
-              this  mode  with  "care". However since Microsoft currently does
+              this mode with "care". However since  Microsoft  currently  does
               not seem to do any verification of the ePID, you currently don't
               need to pay attention to ePIDs at all.
 
 
        -C LCID
-              Do  not  randomize  the  locale id part of the ePID and use LCID
+              Do not randomize the locale id part of the  ePID  and  use  LCID
-              instead. The LCID must be specified as a  decimal  number,  e.g.
+              instead.  The  LCID  must be specified as a decimal number, e.g.
-              1049  for  "Russian  - Russia". This option has no effect if the
+              1049 for "Russian - Russia". This option has no  effect  if  the
-              ePID is not randomized at all, e.g. if it is selected  from  the
+              ePID  is  not randomized at all, e.g. if it is selected from the
               command line or an ini file.
 
               By default vlmcsd generates a valid locale id that is recognized
-              by .NET Framework 4.0. This may lead to a  locale  id  which  is
+              by  .NET  Framework  4.0.  This may lead to a locale id which is
               unlikely to occur in your country, for instance 2155 for "Quecha
               - Ecuador". You may want to select the locale id of your country
               instead. See MSDN ⟨http://msdn.microsoft.com/en-us/goglobal/
-              bb964664.aspx⟩ for a list of valid LCIDs. Please note that  some
+              bb964664.aspx⟩  for a list of valid LCIDs. Please note that some
               of them are not recognized by .NET Framework 4.0.
 
-              Most  other  KMS  emulators  use a fixed LCID of 1033 (English -
+              Most other KMS emulators use a fixed LCID  of  1033  (English  -
               US). To achive the same behavior in vlmcsd use -C 1033.
 
 
        -R renewal-interval
-              Instructs clients to renew  activation  every  renewal-interval.
+              Instructs  clients  to  renew activation every renewal-interval.
               The renewal-interval is a number optionally immediately followed
-              by a letter indicating the unit. Valid unit letters are s  (sec‐
+              by  a letter indicating the unit. Valid unit letters are s (sec‐
               onds), m (minutes), h (hours), d (days) and w (weeks). If you do
               not specify a letter, minutes is assumed.
 
-              -R3d for instance instructs clients to renew activation every  3
+              -R3d  for instance instructs clients to renew activation every 3
               days. The default renewal-interval is 10080 (identical to 7d and
               1w).
 
               Due to poor implementation of Microsofts KMS Client it cannot be
               guaranteed that activation is renewed on time as specfied by the
-              -R option. Don't care  about  that.  Renewal  will  happen  well
+              -R  option.  Don't  care  about  that.  Renewal will happen well
               before your activation expires (usually 180 days).
 
-              Even  though  you  can  specify seconds, the granularity of this
+              Even though you can specify seconds,  the  granularity  of  this
-              option is 1 minute. Seconds are rounded down to the next  multi‐
+              option  is 1 minute. Seconds are rounded down to the next multi‐
               ple of 60.
 
 
        -A activation-interval
-              Instructs  clients to retry activation every activation-interval
+              Instructs clients to retry activation every  activation-interval
-              if it was unsuccessful, e.g. because  it  could  not  reach  the
+              if  it  was  unsuccessful,  e.g.  because it could not reach the
-              server.  The default is 120 (identical to 2h). activation-inter‐
+              server. The default is 120 (identical to 2h).  activation-inter‐
-              val follows the  same  syntax  as  renewal-interval  in  the  -R
+              val  follows  the  same  syntax  as  renewal-interval  in the -R
               option.
 
 
-       -s     Installs  vlmcsd  as  a  Windows service. This option only works
+       -s     Installs vlmcsd as a Windows service.  This  option  only  works
-              with the native Windows version  and  Cygwin.  Combine  -s  with
+              with  the  native  Windows  version  and Cygwin. Combine -s with
-              other  command  line  options.  These will be in effect when you
+              other command line options. These will be  in  effect  when  you
-              start the service. The service  automatically  starts  when  you
+              start  the  service.  The  service automatically starts when you
-              reboot  your machine. To start it manually, type "net start vlm‐
+              reboot your machine. To start it manually, type "net start  vlm‐
               csd".
 
-              If you use Cygwin, you  must  include  your  Cygwin  system  DLL
+              If  you  use  Cygwin,  you  must  include your Cygwin system DLL
-              directory  (usually  C:\Cygwin\bin  or C:\Cygwin64\bin) into the
+              directory (usually C:\Cygwin\bin or  C:\Cygwin64\bin)  into  the
               PATH environment variable or the service will not start.
 
-              You can reinstall the service anytime  using  vlmcsd  -s  again,
+              You  can  reinstall  the  service anytime using vlmcsd -s again,
-              e.g.  with  a different command line. If the service is running,
+              e.g. with a different command line. If the service  is  running,
               it will be restarted with the new command line.
 
-              When using -s the command  line  is  checked  for  basic  syntax
+              When  using  -s  the  command  line  is checked for basic syntax
               errors only. For example "vlmcsd -s -L 1.2.3.4" reports no error
-              but the service will not start if 1.2.3.4 is not an  IP  address
+              but  the  service will not start if 1.2.3.4 is not an IP address
               on your system.
 
 
-       -S     Uninstalls  the  vlmcsd service. Works only with the native Win‐
+       -S     Uninstalls the vlmcsd service. Works only with the  native  Win‐
-              dows version and Cygwin. All other options will  be  ignored  if
+              dows  version  and  Cygwin. All other options will be ignored if
               you include -S in the command line.
 
 
        -U [domain\]username
-              Can  only be used together with -s. Starts the service as a dif‐
+              Can only be used together with -s. Starts the service as a  dif‐
-              ferent user than the local SYSTEM account. This is used  to  run
+              ferent  user  than the local SYSTEM account. This is used to run
-              the  service  under  an account with low privileges. If you omit
+              the service under an account with low privileges.  If  you  omit
               the domain, an account from the local computer will be used.
 
               You may use "NT AUTHORITY\NetworkService". This is a pseudo user
-              with  low  privileges.  You may also use "NT AUTHORITY\LocalSer‐
+              with low privileges. You may also  use  "NT  AUTHORITY\LocalSer‐
               vice" which has more privileges but these are of no use for run‐
               ning vlmcsd.
 
@@ -401,20 +470,20 @@ OPTIONS
               sion for your executable. "NT AUTHORITY\NetworkService" normally
               has no permission to run binaries from your home directory.
 
-              For  your convenience you can use the special username "/l" as a
+              For your convenience you can use the special username "/l" as  a
               shortcut  for  "NT  AUTHORITY\LocalService"  and  "/n"  for  "NT
-              AUTHORITY\NetworkService".  "vlmcsd -s -U /n"  installs the ser‐
+              AUTHORITY\NetworkService". "vlmcsd -s -U /n" installs  the  ser‐
               vice to run as "NT AUTHORITY\NetworkService".
 
 
        -W password
-              Can only be used together with -s. Specifies a password for  the
+              Can  only be used together with -s. Specifies a password for the
-              corresponding  username  you  use  with  -U. SYSTEM, "NT AUTHOR‐
+              corresponding username you use  with  -U.  SYSTEM,  "NT  AUTHOR‐
-              ITY\NetworkService", "NT AUTHORITY\LocalService" do not  require
+              ITY\NetworkService",  "NT AUTHORITY\LocalService" do not require
               a password.
 
-              If  you  specify  a  user  with  even  lower privileges than "NT
+              If you specify a  user  with  even  lower  privileges  than  "NT
-              AUTHORITY\NetworkService", you must specify  its  password.  You
+              AUTHORITY\NetworkService",  you  must  specify its password. You
               also have to grant the "Log on as a service" right to that user.
 
 
@@ -423,50 +492,50 @@ SIGNALS
 
 
        SIGTERM, SIGINT
-              These  signals cause vlmcsd to exit gracefully. All global sema‐
+              These signals cause vlmcsd to exit gracefully. All global  sema‐
-              phores and shared memory pages will be released,  the  pid  file
+              phores  and  shared  memory pages will be released, the pid file
-              will  be  unlinked  (deleted)  and  a  shutdown  message will be
+              will be unlinked  (deleted)  and  a  shutdown  message  will  be
               logged.
 
 
-       SIGHUP Causes vlmcsd to be restarted completely. This is useful if  you
+       SIGHUP Causes  vlmcsd to be restarted completely. This is useful if you
-              started  vlmcsd  with  an  ini file. You can modify the ini file
+              started vlmcsd with an ini file. You can  modify  the  ini  file
-              while vlmcsd is running and then sending SIGHUP, e.g. by  typing
+              while  vlmcsd is running and then sending SIGHUP, e.g. by typing
-              "killall  -SIGHUP  vlmcsd"  or  "kill -SIGHUP `cat /var/run/vlm‐
+              "killall -SIGHUP vlmcsd" or  "kill  -SIGHUP  `cat  /var/run/vlm‐
               csd.pid`".
 
               The SIGHUP handler has been implemented relatively simple. It is
-              virtually  the  same  as  stopping  vlmcsd and starting it again
+              virtually the same as stopping  vlmcsd  and  starting  it  again
               immediately with the following exceptions:
 
 
               —  The new process does not get a new process id.
 
-              —  If you used a pid file,  it  is  not  deleted  and  recreated
+              —  If  you  used  a  pid  file,  it is not deleted and recreated
                  because the process id stays the same.
 
-              —  If  you  used  the  'user' and/or 'group' directive in an ini
+              —  If you used the 'user' and/or 'group'  directive  in  an  ini
-                 file these are ignored. This is because once you switched  to
+                 file  these are ignored. This is because once you switched to
                  lower privileged users and groups, there is no way back. Any‐
                  thing else would be a severe security flaw in the OS.
 
-       Signaling is not available in the native Windows  version  and  in  the
+       Signaling  is  not  available  in the native Windows version and in the
        Cygwin version when it runs as Windows service.
 
 
 SUPPORTED OPERATING SYSTEMS
-       vlmcsd  compiles  and  runs  on  Linux, Windows (no Cygwin required but
+       vlmcsd compiles and runs on Linux,  Windows  (no  Cygwin  required  but
-       explicitly supported), Mac OS X, FreeBSD,  NetBSD,  OpenBSD,  Dragonfly
+       explicitly  supported),  Mac  OS X, FreeBSD, NetBSD, OpenBSD, Dragonfly
-       BSD,  Minix,  Solaris,  OpenIndiana,  Android  and  iOS. Other POSIX or
+       BSD, Minix, Solaris, OpenIndiana,  Android  and  iOS.  Other  POSIX  or
-       unixoid OSses may work with unmodified sources  or  may  require  minor
+       unixoid  OSses  may  work  with unmodified sources or may require minor
        porting efforts.
 
 
 SUPPORTED PRODUCTS
-       vlmcsd  can answer activation requests for the following products: Win‐
+       vlmcsd can answer activation requests for the following products:  Win‐
-       dows Vista, Windows 7, Windows 8,  Windows  8.1,  Windows  10,  Windows
+       dows  Vista,  Windows  7,  Windows  8, Windows 8.1, Windows 10, Windows
-       Server  2008,  Windows  Server  2008  R2,  Windows Server 2012, Windows
+       Server 2008, Windows Server  2008  R2,  Windows  Server  2012,  Windows
-       Server 2012 R2, Office 2010, Project 2010,  Visio  2010,  Office  2013,
+       Server  2012  R2,  Office  2010, Project 2010, Visio 2010, Office 2013,
        Project 2013, Visio 2013, Office 2016, Project 2016, Visio 2016.
 
        Office, Project and Visio must be volume license versions.
@@ -477,25 +546,25 @@ FILES
 
 
 EXAMPLES
-       vlmcsd -f
+       vlmcsd -De
-              Starts  vlmcsd in foreground. Useful if you use it for the first
+              Starts vlmcsd in foreground. Useful if you use it for the  first
-              time and want to see what's happening  when  a  client  requests
+              time  and  want  to  see what's happening when a client requests
               activation.
 
 
        vlmcsd -l /var/log/vlmcsd.log
-              Starts  vlmcsd  as a daemon and logs everything to /var/log/vlm‐
+              Starts vlmcsd as a daemon and logs everything  to  /var/log/vlm‐
               csd.log.
 
 
        vlmcsd -L 192.168.1.17
               Starts vlmcsd as a daemon and listens on IP address 192.168.1.17
-              only.  This  is useful for routers that have a public and a pri‐
+              only. This is useful for routers that have a public and  a  pri‐
               vate IP address to prevent your KMS server from becoming public.
 
 
        vlmcsd -s -U /n -l C:\logs\vlmcsd.log
-              Installs vlmcsd as a Windows service  with  low  privileges  and
+              Installs  vlmcsd  as  a  Windows service with low privileges and
               logs  everything  to  C:\logs\vlmcsd.log  when  the  service  is
               started with "net start vlmcsd".
 
@@ -503,18 +572,18 @@ EXAMPLES
 BUGS
        An ePID specified in an ini file must not contain spaces.
 
-       The maximum number of -L options in the command line or  listen  state‐
+       The  maximum  number of -L options in the command line or listen state‐
        ments in the inifile is the platform default for FD_SETSIZE. This is 64
        on Windows and 1024 on most Unixes.
 
 
 AUTHOR
-       Written by crony12, Hotbird64 and vityan666.  With  contributions  from
+       Written  by  crony12, Hotbird64 and vityan666.  With contributions from
        DougQaid.
 
 
 CREDITS
-       Thanks  to  CODYQX4,  deagles,  eIcn, mikmik38, nosferati87, qad, Rati‐
+       Thanks to CODYQX4, deagles, eIcn,  mikmik38,  nosferati87,  qad,  Rati‐
        borus, ...
 
 
@@ -523,4 +592,4 @@ SEE ALSO
 
 
 
-Hotbird64                          June 2016                         VLMCSD(8)
+Hotbird64                          July 2016                         VLMCSD(8)

vlmcsd.8.html

@@ -1,5 +1,5 @@
 <!-- Creator     : groff version 1.22.3 -->
-<!-- CreationDate: Sun Jun  5 14:31:10 2016 -->
+<!-- CreationDate: Wed Jul 13 12:34:01 2016 -->
 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd">
 <html>
@@ -163,6 +163,80 @@ same link local address is used on more than one network
 interface. Windows does not accept a name and the scope id
 must be a number.</p>
 
+<p style="margin-left:11%;"><b>-o</b> <i>level</i></p>
+
+<p style="margin-left:22%;">Sets the <i>level</i> of
+protection against activations from public IP addresses. The
+default is <b>-o0</b> for no protection.</p>
+
+<p style="margin-left:22%; margin-top: 1em"><b>-o1</b>
+causes vlmcsd not to listen on all IP addresses but on
+private IP addresses only. IPv4 addresses in the
+100.64.0.0/10 range (see RFC6598) are not treated as private
+since they can be reached from other users of your ISP.
+Private IPv4 addresses are 10.0.0.0/8, 172.16.0.0/12,
+192.168.0.0/16, 169.254.0.0/16 and 127.0.0.0/8. vlmcsd
+treats all IPv6 addresses not within 2000::/3 as private
+addresses.</p>
+
+<p style="margin-left:22%; margin-top: 1em">If <b>-o1</b>
+is combined with <b>-L</b>, it will listen on all private IP
+addresses plus the ones specified by one or more <b>-L</b>
+statements. If <b>-o1</b> is combined with <b>-P</b>, only
+the last <b>-P</b> statement will be used.</p>
+
+<p style="margin-left:22%; margin-top: 1em">Using
+<b>-o1</b> does not protect you if you enable NAT port
+forwarding on your router to your vlmcsd machine. It is
+identical to using multiple -L statements with all of your
+private IP addresses. What <b>-o1</b> does for you, is
+automatically enumerating your private IP addresses.</p>
+
+<p style="margin-left:22%; margin-top: 1em"><b>-o2</b> does
+not affect the interfaces, vlmcsd is listening on. When a
+clients connects, vlmcsd immediately drops the connection if
+the client has a public IP address. Unlike <b>-o1</b>
+clients will be able to establish a TCP connection but it
+will be closed without a single byte sent over the
+connection. This protects against clients with public IP
+addresses even if NAT port forwarding is used. While
+<b>-o2</b> offers a higher level of protection than
+<b>-o1</b>, the client sees that the KMS TCP port (1688 by
+default) is actually accepting connections.</p>
+
+<p style="margin-left:22%; margin-top: 1em"><b>-o3</b>
+combines <b>-o1</b> and <b>-o2</b>. vlmcsd listens on
+private interfaces only and if a public client manages to
+connect anyway due to NAT port forwarding, it will be
+immediately dropped.</p>
+
+<p style="margin-left:22%; margin-top: 1em">If you use any
+form of TCP level port forwarding (e.g. <b>nc</b>(1),
+<b>netcat</b>(1), <b>ssh</b>(1) port forwarding or similar)
+to redirect KMS requests to vlmcsd, there will be no
+protection even if you use <b>-o2</b> or <b>-o3</b>. This is
+due to the simple fact that vlmcsd sees the IP address of
+the redirector and not the IP address of the client.</p>
+
+<p style="margin-left:22%; margin-top: 1em"><b>-o1</b> (and
+thus <b>-o3</b>) is not (yet) available in some
+scenarios:</p>
+
+<p style="margin-left:29%; margin-top: 1em">FreeBSD: There
+is a longtime unfixed
+<a href="https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=178881">bug</a>
+in the 32-bit ABI of the 64-bit kernel. If you have a 64-bit
+FreeBSD kernel, you must run the 64-bit version of vlmcsd if
+you use <b>-o1</b> or <b>-o3</b>. The 32-bit version causes
+undefined behavior up to crashing vlmcsd. Other BSDs
+(NetBSD, OpenBSD, Dragonfly and Mac OS X) work
+correctly.</p>
+
+<p style="margin-left:29%; margin-top: 1em">If vlmcsd was
+started by an internet superserver or was compiled to use
+Microsoft RPC (Windows only) or simple sockets, <b>-o1</b>
+and <b>-o3</b> are not available by design.</p>
+
 <p style="margin-left:11%;"><b>-P</b> <i>port</i></p>
 
 <p style="margin-left:22%;">Use TCP <i>port</i> for all
@@ -286,6 +360,18 @@ service (/dev/log) installed, logging output will go to
 Windows version. The Cygwin version does support syslog
 logging.</p>
 
+<p style="margin-left:11%;"><b>-T0</b> and <b>-T1</b></p>
+
+<p style="margin-left:22%;">Disable (<b>-T0</b>) or enable
+(<b>-T1</b>) the inclusion of date and time in each line of
+the log. The default is <b>-T1</b>. <b>-T0</b> is useful if
+you log to <b>stdout</b>(3) which is redirected to another
+logging mechanism that already includes date and time in its
+output, for instance <b>systemd-journald</b>(8). If you log
+to <b>syslog</b>(3), <b>-T1</b> is ignored and date and time
+will never be included in the output sent to
+<b>syslog</b>(3).</p>
+
 <table width="100%" border="0" rules="none" frame="void"
        cellspacing="0" cellpadding="0">
 <tr valign="top" align="left">
@@ -777,7 +863,7 @@ and Visio must be volume license versions.</p>
 
 
 <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd
--f</b></p>
+-De</b></p>
 
 <p style="margin-left:22%;">Starts <b>vlmcsd</b> in
 foreground. Useful if you use it for the first time and want

vlmcsd.8.unix.txt

@@ -84,55 +84,114 @@ OPTIONS
               accept a name and the scope id must be a number.
 
 
+       -o level
+              Sets the level of protection against activations from public  IP
+              addresses. The default is -o0 for no protection.
+
+              -o1  causes vlmcsd not to listen on all IP addresses but on pri‐
+              vate IP addresses only.  IPv4  addresses  in  the  100.64.0.0/10
+              range (see RFC6598) are not treated as private since they can be
+              reached from other users of your ISP. Private IPv4 addresses are
+              10.0.0.0/8,  172.16.0.0/12,  192.168.0.0/16,  169.254.0.0/16 and
+              127.0.0.0/8.  vlmcsd  treats  all  IPv6  addresses  not   within
+              2000::/3 as private addresses.
+
+              If  -o1  is  combined  with -L, it will listen on all private IP
+              addresses plus the ones specified by one or more -L  statements.
+              If  -o1  is combined with -P, only the last -P statement will be
+              used.
+
+              Using -o1 does not protect you if you enable NAT port forwarding
+              on  your router to your vlmcsd machine. It is identical to using
+              multiple -L statements with all of your  private  IP  addresses.
+              What -o1 does for you, is automatically enumerating your private
+              IP addresses.
+
+              -o2 does not affect the interfaces, vlmcsd is listening on. When
+              a  clients  connects, vlmcsd immediately drops the connection if
+              the client has a public IP address. Unlike -o1 clients  will  be
+              able to establish a TCP connection but it will be closed without
+              a single byte sent over the connection.  This  protects  against
+              clients  with public IP addresses even if NAT port forwarding is
+              used. While -o2 offers a higher level of  protection  than  -o1,
+              the client sees that the KMS TCP port (1688 by default) is actu‐
+              ally accepting connections.
+
+              -o3 combines -o1 and -o2. vlmcsd listens on  private  interfaces
+              only and if a public client manages to connect anyway due to NAT
+              port forwarding, it will be immediately dropped.
+
+              If you use any form of TCP level port  forwarding  (e.g.  nc(1),
+              netcat(1),  ssh(1)  port  forwarding or similar) to redirect KMS
+              requests to vlmcsd, there will be no protection even if you  use
+              -o2  or -o3. This is due to the simple fact that vlmcsd sees the
+              IP address of the redirector and  not  the  IP  address  of  the
+              client.
+
+              -o1 (and thus -o3) is not (yet) available in some scenarios:
+
+                   FreeBSD: There is a longtime unfixed bug ⟨https://
+                   bugs.freebsd.org/bugzilla/show_bug.cgi?id=178881⟩  in   the
+                   32-bit ABI of the 64-bit kernel. If you have a 64-bit Free‐
+                   BSD kernel, you must run the 64-bit version  of  vlmcsd  if
+                   you  use  -o1  or  -o3. The 32-bit version causes undefined
+                   behavior up to crashing vlmcsd. Other BSDs  (NetBSD,  Open‐
+                   BSD, Dragonfly and Mac OS X) work correctly.
+
+                   If  vlmcsd  was  started  by an internet superserver or was
+                   compiled to use Microsoft  RPC  (Windows  only)  or  simple
+                   sockets, -o1 and -o3 are not available by design.
+
+
        -P port
-              Use TCP port for  all  subsequent  -L  statements  that  do  not
+              Use  TCP  port  for  all  subsequent  -L  statements that do not
               include an optional port. If you use -P and -L, -P must be spec‐
               ified before -L.
 
 
        -F0 and -F1
-              Allow (-F1) or disallow (-F0) binding to IP addresses  that  are
+              Allow  (-F1)  or disallow (-F0) binding to IP addresses that are
               currently not configured on your system. The default is -F0. -F1
               allows you to bind to an IP address that may be configured after
-              you  started  vlmcsd. vlmcsd will listen on that address as soon
+              you started vlmcsd. vlmcsd will listen on that address  as  soon
-              as it becomes available. This feature is  only  available  under
+              as  it  becomes  available. This feature is only available under
-              Linux  (IPv4  and  IPv6) and FreeBSD (IPv4 only). FreeBSD allows
+              Linux (IPv4 and IPv6) and FreeBSD (IPv4  only).  FreeBSD  allows
-              this feature only for the root user (more  correctly:  processes
+              this  feature  only for the root user (more correctly: processes
-              that  have  the  PRIV_NETINET_BINDANY privilege). Linux does not
+              that have the PRIV_NETINET_BINDANY privilege).  Linux  does  not
               require a capability for this.
 
 
        -t seconds
-              Timeout the TCP connection with the client  after  seconds  sec‐
+              Timeout  the  TCP  connection with the client after seconds sec‐
-              onds.  After  sending  an  activation request. RPC keeps the TCP
+              onds. After sending an activation request.  RPC  keeps  the  TCP
               connection for a while. The default is 30 seconds. You may spec‐
-              ify  a  shorter period to free ressources on your device faster.
+              ify a shorter period to free ressources on your  device  faster.
-              This is useful for devices with limited main memory  or  if  you
+              This  is  useful  for devices with limited main memory or if you
               used -m to limit the concurrent clients that may request activa‐
-              tion. Microsoft RPC  clients  disconnect  after  30  seconds  by
+              tion.  Microsoft  RPC  clients  disconnect  after  30 seconds by
-              default.  Setting  seconds to a greater value does not make much
+              default. Setting seconds to a greater value does not  make  much
               sense.
 
 
        -m concurrent-clients
-              Limit the number of clients that will be  handled  concurrently.
+              Limit  the  number of clients that will be handled concurrently.
               This is useful for devices with limited ressources or if you are
-              experiencing DoS attacks that  spawn  thousands  of  threads  or
+              experiencing  DoS  attacks  that  spawn  thousands of threads or
-              forked  processes. If additional clients connect to vlmcsd, they
+              forked processes. If additional clients connect to vlmcsd,  they
-              need to wait until another client disconnects. If you  set  con‐
+              need  to  wait until another client disconnects. If you set con‐
               current-clients to a small value ( <10 ), you should also select
-              a reasonable timeout of 2 or 3 seconds with -t. The  default  is
+              a  reasonable  timeout of 2 or 3 seconds with -t. The default is
               no limit.
 
 
-       -d     Disconnect  each client after processing one activation request.
+       -d     Disconnect each client after processing one activation  request.
-              This is a direct violation of  DCE  RPC  but  may  help  if  you
+              This  is  a  direct  violation  of  DCE  RPC but may help if you
-              receive  malicous  fake  RPC requests that block your threads or
+              receive malicous fake RPC requests that block  your  threads  or
-              forked processes. Some other KMS emulators (e.g. py-kms)  behave
+              forked  processes. Some other KMS emulators (e.g. py-kms) behave
               this way.
 
 
-       -k     Do   not  disconnect  clients  after  processing  an  activation
+       -k     Do  not  disconnect  clients  after  processing  an   activation
               request. This selects the default behavior. -k is useful only if
               you used an ini file (see vlmcsd.ini(5) and -i). If the ini file
               contains the line "DisconnectClientsImmediately = true", you can
@@ -140,103 +199,113 @@ OPTIONS
 
 
        -N0 and -N1
-              Disables  (-N0)  or  enables (-N1) the use of the NDR64 transfer
+              Disables (-N0) or enables (-N1) the use of  the  NDR64  transfer
-              syntax in the RPC protocol.  Unlike  Microsoft  vlmcsd  supports
+              syntax  in  the  RPC  protocol. Unlike Microsoft vlmcsd supports
               NDR64 on 32-bit operating systems. Microsoft introduced NDR64 in
-              Windows Vista but their KMS servers started using it  with  Win‐
+              Windows  Vista  but their KMS servers started using it with Win‐
-              dows  8.  Thus  if  you  choose random ePIDs, vlmcsd will select
+              dows 8. Thus if you choose  random  ePIDs,  vlmcsd  will  select
-              ePIDs with build numbers 9200 and 9600 if you enable  NDR64  and
+              ePIDs  with  build numbers 9200 and 9600 if you enable NDR64 and
               build numbers 6002 and 7601 if you disable NDR64. The default is
               to enable NDR64.
 
 
        -B0 and -B1
-              Disables (-B0) or enables (-B1) bind  time  feature  negotiation
+              Disables  (-B0)  or  enables (-B1) bind time feature negotiation
               (BTFN) in the RPC protocol. All Windows operating systems start‐
-              ing with Vista support BTFN and try to negotiate it when  initi‐
+              ing  with Vista support BTFN and try to negotiate it when initi‐
               ating an RPC connection. Thus consider turning it off as a debug
               / troubleshooting feature only. Some older firewalls that selec‐
-              tively  block or redirect RPC traffic may get confused when they
+              tively block or redirect RPC traffic may get confused when  they
               detect NDR64 or BTFN.
 
 
        -l filename
               Use filename as a log file. The log file records all activations
-              with  IP  address,  Windows  workstation  name  (no  reverse DNS
+              with IP  address,  Windows  workstation  name  (no  reverse  DNS
-              lookup), activated product, KMS protocol, time and date. If  you
+              lookup),  activated product, KMS protocol, time and date. If you
               do not specify a log file, no log is created. For a live view of
               the log file type tail -f file.
 
-              If you use the special filename "syslog", vlmcsd uses  syslog(3)
+              If  you use the special filename "syslog", vlmcsd uses syslog(3)
-              for  logging.  If  your  system has no syslog service (/dev/log)
+              for logging. If your system has  no  syslog  service  (/dev/log)
-              installed, logging output will go to /dev/console.  Syslog  log‐
+              installed,  logging  output will go to /dev/console. Syslog log‐
-              ging  is not available in the native Windows version. The Cygwin
+              ging is not available in the native Windows version. The  Cygwin
               version does support syslog logging.
 
 
-       -D     Normally vlmcsd daemonizes and runs in  background  (except  the
+       -T0 and -T1
-              native  Windows  version).  If  -D is specified, vlmcsd does not
+              Disable  (-T0) or enable (-T1) the inclusion of date and time in
+              each line of the log. The default is -T1. -T0 is useful  if  you
+              log  to  stdout(3) which is redirected to another logging mecha‐
+              nism that already includes date and  time  in  its  output,  for
+              instance  systemd-journald(8).  If  you log to syslog(3), -T1 is
+              ignored and date and time will never be included in  the  output
+              sent to syslog(3).
+
+
+       -D     Normally  vlmcsd  daemonizes  and runs in background (except the
+              native Windows version). If -D is  specified,  vlmcsd  does  not
               daemonize and runs in foreground. This is useful for testing and
               allows you to simply press <Ctrl-C> to exit vlmcsd.
 
-              The  native  Windows version never daemonizes and always behaves
+              The native Windows version never daemonizes and  always  behaves
               as if -D had been specified. You may want to install vlmcsd as a
               service instead. See -s.
 
 
        -e     If specified, vlmcsd ignores -l and writes all logging output to
-              stdout(3). This is mainly useful for testing and  debugging  and
+              stdout(3).  This  is mainly useful for testing and debugging and
               often combined with -D.
 
 
-       -v     Use  verbose  logging.  Logs every parameter of the base request
+       -v     Use verbose logging. Logs every parameter of  the  base  request
-              and the base response. It also logs the HWID of the  KMS  server
+              and  the  base response. It also logs the HWID of the KMS server
-              if  KMS  protocol  version  6 is used. This option is mainly for
+              if KMS protocol version 6 is used. This  option  is  mainly  for
-              debugging purposes. It only has an effect if some form  of  log‐
+              debugging  purposes.  It only has an effect if some form of log‐
-              ging  is  used. Thus -v does not make sense if not used with -l,
+              ging is used. Thus -v does not make sense if not used  with  -l,
               -e or -f.
 
 
-       -q     Do not use verbose logging. This is actually the default  behav‐
+       -q     Do  not use verbose logging. This is actually the default behav‐
               ior. It only makes sense if you use vlmcsd with an ini file (see
-              -i and  vlmcsd.ini(5)).  If  the  ini  file  contains  the  line
+              -i  and  vlmcsd.ini(5)).  If  the  ini  file  contains  the line
               "LogVerbose = true" you can use -q to restore the default behav‐
               ior.
 
 
        -p filename
               Create pid file filename. This has nothing to do with KMS ePIDs.
-              A  pid  file  is  a file where vlmcsd writes its own process id.
+              A pid file is a file where vlmcsd writes  its  own  process  id.
-              This is used  by  standard  init  scripts  (typically  found  in
+              This  is  used  by  standard  init  scripts  (typically found in
               /etc/init.d). The default is not to write a pid file.
 
 
        -u user and -g group
-              Causes  vlmcsd  to  run in the specified user and group security
+              Causes vlmcsd to run in the specified user  and  group  security
-              context. The main purpose for this is to  drop  root  privileges
+              context.  The  main  purpose for this is to drop root privileges
-              after  it  has  been  started from the root account. To use this
+              after it has been started from the root  account.  To  use  this
-              feature from cygwin you must run cyglsa-config and  the  account
+              feature  from  cygwin you must run cyglsa-config and the account
-              from  which  vlmcsd is started must have the rights "Act as part
+              from which vlmcsd is started must have the rights "Act  as  part
-              of the operating system" and "Replace a  process  level  token".
+              of  the  operating  system" and "Replace a process level token".
               The native Windows version does not support these options.
 
-              The  actual  security  context switch is performed after the TCP
+              The actual security context switch is performed  after  the  TCP
-              sockets have been created. This allows  you  to  use  privileged
+              sockets  have  been  created.  This allows you to use privileged
               ports (< 1024) when you start vlmcsd from the root account.
 
               However if you use an ini, pid or log file, you must ensure that
-              the unprivileged user has access to these files. You can  always
+              the  unprivileged user has access to these files. You can always
-              log  to syslog(3) from an unprivileged account on most platforms
+              log to syslog(3) from an unprivileged account on most  platforms
               (see -l).
 
 
        -w ePID
-              Use ePID as Windows ePID. If specified, -r  is  disregarded  for
+              Use  ePID  as  Windows ePID. If specified, -r is disregarded for
               Windows.
 
 
        -0 ePID
-              Use  ePID  as Office 2010 ePID (including Project and Visio). If
+              Use ePID as Office 2010 ePID (including Project and  Visio).  If
               specified, -r is disregarded for Office 2010.
 
 
@@ -246,14 +315,14 @@ OPTIONS
 
 
        -H HwId
-              Use  HwId  for  all products. All HWIDs in the ini file (see -i)
+              Use HwId for all products. All HWIDs in the ini  file  (see  -i)
               will not be used. In an ini file you can specify a seperate HWID
-              for  each application-guid. This is not possible when entering a
+              for each application-guid. This is not possible when entering  a
               HWID from the command line.
 
-              HwId must be specified as 16 hex digits that are interpreted  as
+              HwId  must be specified as 16 hex digits that are interpreted as
-              a  series  of  8 bytes (big endian). Any character that is not a
+              a series of 8 bytes (big endian). Any character that  is  not  a
-              hex digit will be ignored. This is for better  readability.  The
+              hex  digit  will be ignored. This is for better readability. The
               following commands are identical:
 
               vlmcsd -H 0123456789ABCDEF
@@ -262,14 +331,14 @@ OPTIONS
 
 
        -i filename
-              Use  configuration file (aka ini file) filename. Most configura‐
+              Use configuration file (aka ini file) filename. Most  configura‐
               tion parameters can be set either via the command line or an ini
-              file.  The command line always has precedence over configuration
+              file. The command line always has precedence over  configuration
-              items in the ini file. See vlmcsd.ini(5) for the format  of  the
+              items  in  the ini file. See vlmcsd.ini(5) for the format of the
               configuration file.
 
-              If  vlmcsd has been compiled to use a default configuration file
+              If vlmcsd has been compiled to use a default configuration  file
-              (often /etc/vlmcsd.ini), you may use -i- to ignore  the  default
+              (often  /etc/vlmcsd.ini),  you may use -i- to ignore the default
               configuration file.
 
 
@@ -282,118 +351,118 @@ OPTIONS
               - the file specified by -i does not contain the application-guid
               for the KMS request
 
-              -r0 means there  are  no  random  ePIDs.  vlmcsd  simply  issues
+              -r0  means  there  are  no  random  ePIDs.  vlmcsd simply issues
-              default  ePIDs  that  are built into the binary at compile time.
+              default ePIDs that are built into the binary  at  compile  time.
-              Pro: behaves like real KMS server that also  always  issues  the
+              Pro:  behaves  like  real KMS server that also always issues the
-              same  ePID.  Con: Microsoft may start blacklisting again and the
+              same ePID. Con: Microsoft may start blacklisting again  and  the
               default ePID may not work any longer.
 
-              -r1 instructs vlmcsd to generate random ePIDs when  the  program
+              -r1  instructs  vlmcsd to generate random ePIDs when the program
               starts or receives a SIGHUP signal and uses these ePIDs until it
-              is stopped or receives another SIGHUP. Most other KMS  emulators
+              is  stopped or receives another SIGHUP. Most other KMS emulators
-              generate  a  new  ePID  on  every  KMS  request.  This is easily
+              generate a new  ePID  on  every  KMS  request.  This  is  easily
               detectable. Microsoft could just modify sppsvc.exe in a way that
-              it  always  sends two identical KMS requests in two RPC requests
+              it always sends two identical KMS requests in two  RPC  requests
-              but over the same TCP connection. If both KMS responses  contain
+              but  over the same TCP connection. If both KMS responses contain
-              the  different  ePIDs, the KMS server is not genuine. -r1 is the
+              the different ePIDs, the KMS server is not genuine. -r1  is  the
-              default mode. -r1 also ensures that all  three  ePIDs  (Windows,
+              default  mode.  -r1  also ensures that all three ePIDs (Windows,
-              Office  2010  and  Office 2013) use the same OS build number and
+              Office 2010 and Office 2013) use the same OS  build  number  and
               LCID (language id).
 
               If vlmcsd has been started by an internet superserver, -r1 works
-              identically  to  -r2. This is simply due to the fact that vlmcsd
+              identically to -r2. This is simply due to the fact  that  vlmcsd
               is started upon a connection request and does not stay in memory
               after servicing a KMS request.
 
-              -r2  behaves  like  most  other KMS server emulators with random
+              -r2 behaves like most other KMS  server  emulators  with  random
-              support and generates a new random ePID on  every  request.  Use
+              support  and  generates  a new random ePID on every request. Use
-              this  mode  with  "care". However since Microsoft currently does
+              this mode with "care". However since  Microsoft  currently  does
               not seem to do any verification of the ePID, you currently don't
               need to pay attention to ePIDs at all.
 
 
        -C LCID
-              Do  not  randomize  the  locale id part of the ePID and use LCID
+              Do not randomize the locale id part of the  ePID  and  use  LCID
-              instead. The LCID must be specified as a  decimal  number,  e.g.
+              instead.  The  LCID  must be specified as a decimal number, e.g.
-              1049  for  "Russian  - Russia". This option has no effect if the
+              1049 for "Russian - Russia". This option has no  effect  if  the
-              ePID is not randomized at all, e.g. if it is selected  from  the
+              ePID  is  not randomized at all, e.g. if it is selected from the
               command line or an ini file.
 
               By default vlmcsd generates a valid locale id that is recognized
-              by .NET Framework 4.0. This may lead to a  locale  id  which  is
+              by  .NET  Framework  4.0.  This may lead to a locale id which is
               unlikely to occur in your country, for instance 2155 for "Quecha
               - Ecuador". You may want to select the locale id of your country
               instead. See MSDN ⟨http://msdn.microsoft.com/en-us/goglobal/
-              bb964664.aspx⟩ for a list of valid LCIDs. Please note that  some
+              bb964664.aspx⟩  for a list of valid LCIDs. Please note that some
               of them are not recognized by .NET Framework 4.0.
 
-              Most  other  KMS  emulators  use a fixed LCID of 1033 (English -
+              Most other KMS emulators use a fixed LCID  of  1033  (English  -
               US). To achive the same behavior in vlmcsd use -C 1033.
 
 
        -R renewal-interval
-              Instructs clients to renew  activation  every  renewal-interval.
+              Instructs  clients  to  renew activation every renewal-interval.
               The renewal-interval is a number optionally immediately followed
-              by a letter indicating the unit. Valid unit letters are s  (sec‐
+              by  a letter indicating the unit. Valid unit letters are s (sec‐
               onds), m (minutes), h (hours), d (days) and w (weeks). If you do
               not specify a letter, minutes is assumed.
 
-              -R3d for instance instructs clients to renew activation every  3
+              -R3d  for instance instructs clients to renew activation every 3
               days. The default renewal-interval is 10080 (identical to 7d and
               1w).
 
               Due to poor implementation of Microsofts KMS Client it cannot be
               guaranteed that activation is renewed on time as specfied by the
-              -R option. Don't care  about  that.  Renewal  will  happen  well
+              -R  option.  Don't  care  about  that.  Renewal will happen well
               before your activation expires (usually 180 days).
 
-              Even  though  you  can  specify seconds, the granularity of this
+              Even though you can specify seconds,  the  granularity  of  this
-              option is 1 minute. Seconds are rounded down to the next  multi‐
+              option  is 1 minute. Seconds are rounded down to the next multi‐
               ple of 60.
 
 
        -A activation-interval
-              Instructs  clients to retry activation every activation-interval
+              Instructs clients to retry activation every  activation-interval
-              if it was unsuccessful, e.g. because  it  could  not  reach  the
+              if  it  was  unsuccessful,  e.g.  because it could not reach the
-              server.  The default is 120 (identical to 2h). activation-inter‐
+              server. The default is 120 (identical to 2h).  activation-inter‐
-              val follows the  same  syntax  as  renewal-interval  in  the  -R
+              val  follows  the  same  syntax  as  renewal-interval  in the -R
               option.
 
 
-       -s     Installs  vlmcsd  as  a  Windows service. This option only works
+       -s     Installs vlmcsd as a Windows service.  This  option  only  works
-              with the native Windows version  and  Cygwin.  Combine  -s  with
+              with  the  native  Windows  version  and Cygwin. Combine -s with
-              other  command  line  options.  These will be in effect when you
+              other command line options. These will be  in  effect  when  you
-              start the service. The service  automatically  starts  when  you
+              start  the  service.  The  service automatically starts when you
-              reboot  your machine. To start it manually, type "net start vlm‐
+              reboot your machine. To start it manually, type "net start  vlm‐
               csd".
 
-              If you use Cygwin, you  must  include  your  Cygwin  system  DLL
+              If  you  use  Cygwin,  you  must  include your Cygwin system DLL
-              directory  (usually  C:\Cygwin\bin  or C:\Cygwin64\bin) into the
+              directory (usually C:\Cygwin\bin or  C:\Cygwin64\bin)  into  the
               PATH environment variable or the service will not start.
 
-              You can reinstall the service anytime  using  vlmcsd  -s  again,
+              You  can  reinstall  the  service anytime using vlmcsd -s again,
-              e.g.  with  a different command line. If the service is running,
+              e.g. with a different command line. If the service  is  running,
               it will be restarted with the new command line.
 
-              When using -s the command  line  is  checked  for  basic  syntax
+              When  using  -s  the  command  line  is checked for basic syntax
               errors only. For example "vlmcsd -s -L 1.2.3.4" reports no error
-              but the service will not start if 1.2.3.4 is not an  IP  address
+              but  the  service will not start if 1.2.3.4 is not an IP address
               on your system.
 
 
-       -S     Uninstalls  the  vlmcsd service. Works only with the native Win‐
+       -S     Uninstalls the vlmcsd service. Works only with the  native  Win‐
-              dows version and Cygwin. All other options will  be  ignored  if
+              dows  version  and  Cygwin. All other options will be ignored if
               you include -S in the command line.
 
 
        -U [domain\]username
-              Can  only be used together with -s. Starts the service as a dif‐
+              Can only be used together with -s. Starts the service as a  dif‐
-              ferent user than the local SYSTEM account. This is used  to  run
+              ferent  user  than the local SYSTEM account. This is used to run
-              the  service  under  an account with low privileges. If you omit
+              the service under an account with low privileges.  If  you  omit
               the domain, an account from the local computer will be used.
 
               You may use "NT AUTHORITY\NetworkService". This is a pseudo user
-              with  low  privileges.  You may also use "NT AUTHORITY\LocalSer‐
+              with low privileges. You may also  use  "NT  AUTHORITY\LocalSer‐
               vice" which has more privileges but these are of no use for run‐
               ning vlmcsd.
 
@@ -401,20 +470,20 @@ OPTIONS
               sion for your executable. "NT AUTHORITY\NetworkService" normally
               has no permission to run binaries from your home directory.
 
-              For  your convenience you can use the special username "/l" as a
+              For your convenience you can use the special username "/l" as  a
               shortcut  for  "NT  AUTHORITY\LocalService"  and  "/n"  for  "NT
-              AUTHORITY\NetworkService".  "vlmcsd -s -U /n"  installs the ser‐
+              AUTHORITY\NetworkService". "vlmcsd -s -U /n" installs  the  ser‐
               vice to run as "NT AUTHORITY\NetworkService".
 
 
        -W password
-              Can only be used together with -s. Specifies a password for  the
+              Can  only be used together with -s. Specifies a password for the
-              corresponding  username  you  use  with  -U. SYSTEM, "NT AUTHOR‐
+              corresponding username you use  with  -U.  SYSTEM,  "NT  AUTHOR‐
-              ITY\NetworkService", "NT AUTHORITY\LocalService" do not  require
+              ITY\NetworkService",  "NT AUTHORITY\LocalService" do not require
               a password.
 
-              If  you  specify  a  user  with  even  lower privileges than "NT
+              If you specify a  user  with  even  lower  privileges  than  "NT
-              AUTHORITY\NetworkService", you must specify  its  password.  You
+              AUTHORITY\NetworkService",  you  must  specify its password. You
               also have to grant the "Log on as a service" right to that user.
 
 
@@ -423,50 +492,50 @@ SIGNALS
 
 
        SIGTERM, SIGINT
-              These  signals cause vlmcsd to exit gracefully. All global sema‐
+              These signals cause vlmcsd to exit gracefully. All global  sema‐
-              phores and shared memory pages will be released,  the  pid  file
+              phores  and  shared  memory pages will be released, the pid file
-              will  be  unlinked  (deleted)  and  a  shutdown  message will be
+              will be unlinked  (deleted)  and  a  shutdown  message  will  be
               logged.
 
 
-       SIGHUP Causes vlmcsd to be restarted completely. This is useful if  you
+       SIGHUP Causes  vlmcsd to be restarted completely. This is useful if you
-              started  vlmcsd  with  an  ini file. You can modify the ini file
+              started vlmcsd with an ini file. You can  modify  the  ini  file
-              while vlmcsd is running and then sending SIGHUP, e.g. by  typing
+              while  vlmcsd is running and then sending SIGHUP, e.g. by typing
-              "killall  -SIGHUP  vlmcsd"  or  "kill -SIGHUP `cat /var/run/vlm‐
+              "killall -SIGHUP vlmcsd" or  "kill  -SIGHUP  `cat  /var/run/vlm‐
               csd.pid`".
 
               The SIGHUP handler has been implemented relatively simple. It is
-              virtually  the  same  as  stopping  vlmcsd and starting it again
+              virtually the same as stopping  vlmcsd  and  starting  it  again
               immediately with the following exceptions:
 
 
               —  The new process does not get a new process id.
 
-              —  If you used a pid file,  it  is  not  deleted  and  recreated
+              —  If  you  used  a  pid  file,  it is not deleted and recreated
                  because the process id stays the same.
 
-              —  If  you  used  the  'user' and/or 'group' directive in an ini
+              —  If you used the 'user' and/or 'group'  directive  in  an  ini
-                 file these are ignored. This is because once you switched  to
+                 file  these are ignored. This is because once you switched to
                  lower privileged users and groups, there is no way back. Any‐
                  thing else would be a severe security flaw in the OS.
 
-       Signaling is not available in the native Windows  version  and  in  the
+       Signaling  is  not  available  in the native Windows version and in the
        Cygwin version when it runs as Windows service.
 
 
 SUPPORTED OPERATING SYSTEMS
-       vlmcsd  compiles  and  runs  on  Linux, Windows (no Cygwin required but
+       vlmcsd compiles and runs on Linux,  Windows  (no  Cygwin  required  but
-       explicitly supported), Mac OS X, FreeBSD,  NetBSD,  OpenBSD,  Dragonfly
+       explicitly  supported),  Mac  OS X, FreeBSD, NetBSD, OpenBSD, Dragonfly
-       BSD,  Minix,  Solaris,  OpenIndiana,  Android  and  iOS. Other POSIX or
+       BSD, Minix, Solaris, OpenIndiana,  Android  and  iOS.  Other  POSIX  or
-       unixoid OSses may work with unmodified sources  or  may  require  minor
+       unixoid  OSses  may  work  with unmodified sources or may require minor
        porting efforts.
 
 
 SUPPORTED PRODUCTS
-       vlmcsd  can answer activation requests for the following products: Win‐
+       vlmcsd can answer activation requests for the following products:  Win‐
-       dows Vista, Windows 7, Windows 8,  Windows  8.1,  Windows  10,  Windows
+       dows  Vista,  Windows  7,  Windows  8, Windows 8.1, Windows 10, Windows
-       Server  2008,  Windows  Server  2008  R2,  Windows Server 2012, Windows
+       Server 2008, Windows Server  2008  R2,  Windows  Server  2012,  Windows
-       Server 2012 R2, Office 2010, Project 2010,  Visio  2010,  Office  2013,
+       Server  2012  R2,  Office  2010, Project 2010, Visio 2010, Office 2013,
        Project 2013, Visio 2013, Office 2016, Project 2016, Visio 2016.
 
        Office, Project and Visio must be volume license versions.
@@ -477,25 +546,25 @@ FILES
 
 
 EXAMPLES
-       vlmcsd -f
+       vlmcsd -De
-              Starts  vlmcsd in foreground. Useful if you use it for the first
+              Starts vlmcsd in foreground. Useful if you use it for the  first
-              time and want to see what's happening  when  a  client  requests
+              time  and  want  to  see what's happening when a client requests
               activation.
 
 
        vlmcsd -l /var/log/vlmcsd.log
-              Starts  vlmcsd  as a daemon and logs everything to /var/log/vlm‐
+              Starts vlmcsd as a daemon and logs everything  to  /var/log/vlm‐
               csd.log.
 
 
        vlmcsd -L 192.168.1.17
               Starts vlmcsd as a daemon and listens on IP address 192.168.1.17
-              only.  This  is useful for routers that have a public and a pri‐
+              only. This is useful for routers that have a public and  a  pri‐
               vate IP address to prevent your KMS server from becoming public.
 
 
        vlmcsd -s -U /n -l C:\logs\vlmcsd.log
-              Installs vlmcsd as a Windows service  with  low  privileges  and
+              Installs  vlmcsd  as  a  Windows service with low privileges and
               logs  everything  to  C:\logs\vlmcsd.log  when  the  service  is
               started with "net start vlmcsd".
 
@@ -503,18 +572,18 @@ EXAMPLES
 BUGS
        An ePID specified in an ini file must not contain spaces.
 
-       The maximum number of -L options in the command line or  listen  state‐
+       The  maximum  number of -L options in the command line or listen state‐
        ments in the inifile is the platform default for FD_SETSIZE. This is 64
        on Windows and 1024 on most Unixes.
 
 
 AUTHOR
-       Written by crony12, Hotbird64 and vityan666.  With  contributions  from
+       Written  by  crony12, Hotbird64 and vityan666.  With contributions from
        DougQaid.
 
 
 CREDITS
-       Thanks  to  CODYQX4,  deagles,  eIcn, mikmik38, nosferati87, qad, Rati‐
+       Thanks to CODYQX4, deagles, eIcn,  mikmik38,  nosferati87,  qad,  Rati‐
        borus, ...
 
 
@@ -523,4 +592,4 @@ SEE ALSO
 
 
 
-Hotbird64                          June 2016                         VLMCSD(8)
+Hotbird64                          July 2016                         VLMCSD(8)

vlmcsd.c

@@ -43,7 +43,9 @@
 #include <unistd.h>
 #include <fcntl.h>
 #include <sys/stat.h>
+#ifndef NO_LIMIT
 #include <semaphore.h>
+#endif // NO_LIMIT
 #endif // !_WIN32
 
 #if __APPLE__
@@ -70,19 +72,11 @@
 #include "ntservice.h"
 #include "helpers.h"
 
-#ifdef ENABLE_DEPRECATED_OPTIONS
+static const char* const optstring = "N:B:m:t:w:0:3:H:A:R:u:g:L:p:i:P:l:r:U:W:C:F:o:T:SseDdVvqkZ";
-static const char* const optstring = "N:B:m:t:w:0:3:H:A:R:u:g:L:p:i:P:l:r:U:W:C:F:SsfeDd46VvIqkZ";
-#else // !ENABLE_DEPRECATED_OPTIONS
-static const char* const optstring = "N:B:m:t:w:0:3:H:A:R:u:g:L:p:i:P:l:r:U:W:C:F:SseDdVvqkZ";
-#endif // !ENABLE_DEPRECATED_OPTIONS
 
 #if !defined(NO_SOCKETS) && !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 static uint_fast8_t maxsockets = 0;
 
-#ifdef ENABLE_DEPRECATED_OPTIONS
-static int_fast8_t v6required = 0;
-static int_fast8_t v4required = 0;
-#endif // ENABLE_DEPRECATED_OPTIONS
 #endif // !defined(NO_SOCKETS) && !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 
 #ifdef _NTSERVICE
@@ -113,7 +107,7 @@ static IniFileParameter_t IniFileParameterList[] =
 		{ "RandomizationLevel", INI_PARAM_RANDOMIZATION_LEVEL },
 		{ "LCID", INI_PARAM_LCID },
 #	endif // NO_RANDOM_EPID
-#	if !defined(NO_SOCKETS) && (defined(USE_MSRPC) || defined(SIMPLE_SOCKETS))
+#	if !defined(NO_SOCKETS) && (defined(USE_MSRPC) || defined(SIMPLE_SOCKETS) || defined(HAVE_GETIFADDR))
 		{ "Port", INI_PARAM_PORT },
 #	endif // defined(USE_MSRPC) || defined(SIMPLE_SOCKETS)
 #	if !defined(NO_SOCKETS) && !defined(USE_MSRPC)
@@ -139,6 +133,7 @@ static IniFileParameter_t IniFileParameterList[] =
 		{ "PIDFile", INI_PARAM_PID_FILE },
 #	endif // NO_PID_FILE
 #	ifndef NO_LOG
+		{ "LogDateAndTime", INI_PARAM_LOG_DATE_AND_TIME },
 		{ "LogFile", INI_PARAM_LOG_FILE },
 #	ifndef NO_VERBOSE_LOG
 		{ "LogVerbose", INI_PARAM_LOG_VERBOSE },
@@ -152,6 +147,9 @@ static IniFileParameter_t IniFileParameterList[] =
 		{ "user", INI_PARAM_UID },
 		{ "group", INI_PARAM_GID},
 #	endif // !defined(NO_USER_SWITCH) && !defined(_WIN32)
+#	if !defined(NO_PRIVATE_IP_DETECT)
+		{"PublicIPProtectionLevel", INI_PARAM_PUBLIC_IP_PROTECTION_LEVEL },
+#	endif
 };
 
 #endif // NO_INI_FILE
@@ -277,6 +275,13 @@ static __noreturn void usage()
 			"  -r 0|1|2\t\tset ePID randomization level (default 1)\n"
 			"  -C <LCID>\t\tuse fixed <LCID> in random ePIDs\n"
 			#endif // NO_RANDOM_EPID
+			#if !defined(NO_PRIVATE_IP_DETECT)
+			#if HAVE_GETIFADDR
+			"  -o 0|1|2|3\t\tset protection level against clients with public IP addresses (default 0)\n"
+			#else // !HAVE_GETIFADDR
+			"  -o 0|2\t\tset protection level against clients with public IP addresses (default 0)\n"
+			#endif // !HAVE_GETIFADDR
+			#endif // !defined(NO_PRIVATE_IP_DETECT)
 			#ifndef NO_SOCKETS
 			#if !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 			"  -L <address>[:<port>]\tlisten on IP address <address> with optional <port>\n"
@@ -333,6 +338,7 @@ static __noreturn void usage()
 			"  -l syslog		log to syslog\n"
 			#endif // _WIN32
 			"  -l <file>		log to <file>\n"
+			"  -T0, -T1\t\tdisable/enable logging with time and date (default -T1)\n"
 			#ifndef NO_VERBOSE_LOG
 			"  -v\t\t\tlog verbose\n"
 			"  -q\t\t\tdon't log verbose (default)\n"
@@ -518,13 +524,13 @@ static BOOL setIniFileParameter(uint_fast8_t id, const char *const iniarg)
 
 #	endif // NO_RANDOM_EPID
 
-#	if (defined(USE_MSRPC) || defined(SIMPLE_SOCKETS)) && !defined(NO_SOCKETS)
+#	if (defined(USE_MSRPC) || defined(SIMPLE_SOCKETS) || defined(HAVE_GETIFADDR)) && !defined(NO_SOCKETS)
 
 		case INI_PARAM_PORT:
 			defaultport = allocateStringArgument(iniarg);
 			break;
 
-#	endif // (defined(USE_MSRPC) || defined(SIMPLE_SOCKETS)) && !defined(NO_SOCKETS
+#	endif // (defined(USE_MSRPC) || defined(SIMPLE_SOCKETS) || defined(HAVE_GETIFADDR)) && !defined(NO_SOCKETS)
 
 #	if !defined(NO_SOCKETS) && !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 
@@ -533,7 +539,7 @@ static BOOL setIniFileParameter(uint_fast8_t id, const char *const iniarg)
 			return TRUE;
 
 #	endif // !defined(NO_SOCKETS) && !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
-#	if !defined(NO_LIMIT) && !__minix__
+#	if !defined(NO_LIMIT) && !defined(NO_SOCKETS) && !__minix__
 
 		case INI_PARAM_MAX_WORKERS:
 #			ifdef USE_MSRPC
@@ -543,7 +549,7 @@ static BOOL setIniFileParameter(uint_fast8_t id, const char *const iniarg)
 #			endif // !USE_MSRPC
 			break;
 
-#	endif // !defined(NO_LIMIT) && !__minix__
+#	endif // !defined(NO_LIMIT) && !defined(NO_SOCKETS) && !__minix__
 
 #	ifndef NO_PID_FILE
 
@@ -559,6 +565,10 @@ static BOOL setIniFileParameter(uint_fast8_t id, const char *const iniarg)
 			fn_log = allocateStringArgument(iniarg);
 			break;
 
+		case INI_PARAM_LOG_DATE_AND_TIME:
+			success = getIniFileArgumentBool(&LogDateAndTime, iniarg);
+			break;
+
 #	ifndef NO_VERBOSE_LOG
 		case INI_PARAM_LOG_VERBOSE:
 			success = getIniFileArgumentBool(&logverbose, iniarg);
@@ -612,6 +622,23 @@ static BOOL setIniFileParameter(uint_fast8_t id, const char *const iniarg)
 
 #	endif // HAVE_FREEBIND
 
+#	if !defined(NO_PRIVATE_IP_DETECT)
+
+		case INI_PARAM_PUBLIC_IP_PROTECTION_LEVEL:
+			success = getIniFileArgumentInt(&PublicIPProtectionLevel, iniarg, 0, 3);
+
+#			if !HAVE_GETIFADDR
+			if (PublicIPProtectionLevel & 1)
+			{
+				IniFileErrorMessage = "Must be 0 or 2";
+				success = FALSE;
+			}
+#			endif // !HAVE_GETIFADDR
+
+			break;
+
+#	endif // !defined(NO_PRIVATE_IP_DETECT)
+
 		default:
 			return FALSE;
 	}
@@ -1083,29 +1110,14 @@ static void parseGeneralArguments() {
 
 		#ifndef NO_SOCKETS
 
-		#ifndef USE_MSRPC
-		#ifdef ENABLE_DEPRECATED_OPTIONS
-		#ifndef SIMPLE_SOCKETS
-		case '4':
-		case '6':
-			printerrorf("Warning: Option -%c is deprecated. Use -L instead.\n", o);
-			/* no break */
-		#endif // SIMPLE_SOCKETS
-		#endif // ENABLE_DEPRECATED_OPTIONS
 		case 'P':
-			if (o == 'P') defaultport = optarg;
-			#ifdef SIMPLE_SOCKETS
 			ignoreIniFileParameter(INI_PARAM_PORT);
-			#else // !SIMPLE_SOCKETS
+			#if !defined(SIMPLE_SOCKETS) && !defined(USE_MSRPC)
 			ignoreIniFileParameter(INI_PARAM_LISTEN);
+			#else
+			defaultport = optarg;
 			#endif // !SIMPLE_SOCKETS
 			break;
-		#else // USE_MSRPC
-		case 'P':
-			defaultport = optarg;
-			ignoreIniFileParameter(INI_PARAM_PORT);
-			break;
-		#endif // USE_MSRPC
 
 		#if !defined(NO_LIMIT) && !__minix__
 
@@ -1143,6 +1155,12 @@ static void parseGeneralArguments() {
 		#endif
 
 		#ifndef NO_LOG
+
+		case 'T':
+			if (!getArgumentBool(&LogDateAndTime, optarg)) usage();
+			ignoreIniFileParameter(INI_PARAM_LOG_DATE_AND_TIME);
+			break;
+
 		case 'l':
 			fn_log = getCommandLineArg(optarg);
 			ignoreIniFileParameter(INI_PARAM_LOG_FILE);
@@ -1158,6 +1176,18 @@ static void parseGeneralArguments() {
 		#endif // NO_VERBOSE_LOG
 		#endif // NO_LOG
 
+		#if !defined(NO_PRIVATE_IP_DETECT)
+		case 'o':
+			ignoreIniFileParameter(INI_PARAM_PUBLIC_IP_PROTECTION_LEVEL);
+			PublicIPProtectionLevel = getOptionArgumentInt(o, 0, 3);
+
+			#if !HAVE_GETIFADDR
+			if (PublicIPProtectionLevel & 1) usage();
+			#endif // !HAVE_GETIFADDR
+
+			break;
+		#endif // !defined(NO_PRIVATE_IP_DETECT)
+
 		#ifndef NO_SOCKETS
 		#if !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 		case 'L':
@@ -1172,32 +1202,6 @@ static void parseGeneralArguments() {
 		#endif // HAVE_FREEBIND
 		#endif // !defined(USE_MSRPC) && !defined(SIMPLE_SOCKETS)
 
-		#if defined(ENABLE_DEPRECATED_OPTIONS)
-		case 'f':
-			#if !defined(_WIN32) || !defined(NO_LOG)
-			printerrorf
-			(
-				"Warning: Option -f is deprecated. Use -"
-			#ifdef _WIN32
-				"e"
-			#else // !_WIN32
-				"de"
-			#endif // !_WIN32
-				" instead.\n"
-			);
-			#ifndef _WIN32
-			nodaemon = 1;
-			#endif // _WIN32
-			#ifndef NO_LOG
-			logstdout = 1;
-			#endif
-			#if defined(_PEDANTIC) && defined(_WIN32) && defined(NO_LOG)
-			printerrorf("Warning: Option -f has no effect in a Windows version of vlmcsd that has been compiled with logging disabled.\n");
-			#endif // defined(_PEDANTIC) && defined(_WIN32) && defined(NO_LOG)
-			#endif // !defined(_WIN32) || !defined(NO_LOG)
-			break;
-		#endif // ENABLE_DEPRECATED_OPTIONS
-
 		#ifdef _NTSERVICE
 		case 'U':
 			ServiceUser = optarg;
@@ -1230,17 +1234,14 @@ static void parseGeneralArguments() {
 			break;
 
 		#ifndef NO_LOG
+
 		case 'e':
 			logstdout = 1;
 			break;
+
 		#endif // NO_LOG
 		#endif // NO_SOCKETS
 
-		#if !defined(_WIN32) && defined(ENABLE_DEPRECATED_OPTIONS)
-		case 'I': // Backward compatibility with svn681 and earlier
-			break;
-		#endif // !defined(_WIN32) && defined(ENABLE_DEPRECATED_OPTIONS)
-
 		#ifndef NO_RANDOM_EPID
 		case 'r':
 			RandomizationLevel = (int_fast8_t)getOptionArgumentInt(o, 0, 2);
@@ -1503,7 +1504,14 @@ static void allocateSemaphore(void)
 int setupListeningSockets()
 {
 	int o;
+#	if HAVE_GETIFADDR
+	char** privateIPList;
+	int numPrivateIPs = 0;
+	if (PublicIPProtectionLevel & 1) getPrivateIPAddresses(&numPrivateIPs, &privateIPList);
+	uint_fast8_t allocsockets = maxsockets ? (maxsockets + numPrivateIPs) : ((PublicIPProtectionLevel & 1) ? numPrivateIPs : 2);
+#	else // !HAVE_GETIFADDR
 	uint_fast8_t allocsockets = maxsockets ? maxsockets : 2;
+#	endif // !HAVE_GETIFADDR
 
 	SocketList = (SOCKET*)vlmcsd_malloc((size_t)allocsockets * sizeof(SOCKET));
 
@@ -1515,42 +1523,16 @@ int setupListeningSockets()
 
 	for (opterr = 0; ( o = getopt(global_argc, (char* const*)global_argv, optstring) ) > 0; ) switch (o)
 	{
-#	ifdef ENABLE_DEPRECATED_OPTIONS
+		case 'P':
+			defaultport = optarg;
+			break;
 
-	case '4':
+		case 'L':
+			addListeningSocket(optarg);
+			break;
 
-		if (!haveIPv4Stack)
+		default:
-		{
+			break;
-			printerrorf("Fatal: Your system does not support %s.\n", cIPv4);
-			return !0;
-		}
-		v4required = 1;
-		break;
-
-	case '6':
-
-		if (!haveIPv6Stack)
-		{
-			printerrorf("Fatal: Your system does not support %s.\n", cIPv6);
-			return !0;
-		}
-		v6required = 1;
-		break;
-
-#	endif // ENABLE_DEPRECATED_OPTIONS
-
-	case 'P':
-
-		defaultport = optarg;
-		break;
-
-	case 'L':
-
-		addListeningSocket(optarg);
-		break;
-
-	default:
-		break;
 	}
 
 
@@ -1567,17 +1549,31 @@ int setupListeningSockets()
 	}
 #	endif
 
+#	if HAVE_GETIFADDR
+	if (PublicIPProtectionLevel & 1)
+	{
+		int i;
+		for (i = 0; i < numPrivateIPs; i++)
+		{
+			addListeningSocket(privateIPList[i]);
+			free(privateIPList[i]);
+		}
+
+		free(privateIPList);
+	}
+#	endif // HAVE_GETIFADDR
+
 	// if -L hasn't been specified on the command line, use default sockets (all IP addresses)
 	// maxsocket results from first pass parsing the arguments
 	if (!maxsockets)
 	{
-#		ifdef ENABLE_DEPRECATED_OPTIONS
+#		if HAVE_GETIFADDR
-		if (haveIPv6Stack && (v6required || !v4required)) addListeningSocket("::");
+		if (!(PublicIPProtectionLevel & 1) && haveIPv6Stack) addListeningSocket("::");
-		if (haveIPv4Stack && (v4required || !v6required)) addListeningSocket("0.0.0.0");
+		if (!(PublicIPProtectionLevel & 1) && haveIPv4Stack) addListeningSocket("0.0.0.0");
-#		else // !ENABLE_DEPRECATED_OPTIONS
+#		else // !HAVE_GETIFADDR
 		if (haveIPv6Stack) addListeningSocket("::");
 		if (haveIPv4Stack) addListeningSocket("0.0.0.0");
-#		endif // !ENABLE_DEPRECATED_OPTIONS
+#		endif // !HAVE_GETIFADDR
 	}
 
 	if (!numsockets)

vlmcsd.h

@@ -48,6 +48,8 @@ int server_main(int argc, CARGV argv);
 #define INI_PARAM_RPC_NDR64 15
 #define INI_PARAM_RPC_BTFN 16
 #define INI_PARAM_FREEBIND 17
+#define INI_PARAM_PUBLIC_IP_PROTECTION_LEVEL 18
+#define INI_PARAM_LOG_DATE_AND_TIME 19
 
 #define INI_FILE_PASS_1 1
 #define INI_FILE_PASS_2 2

vlmcsd.ini

@@ -35,6 +35,10 @@
 # Command line: -L
 ;Listen = [::]:1688
 
+# Listen on all private IP addresses and reject incoming requests from public IP addresses
+# Command line: -o
+# PublicIPProtectionLevel = 3
+
 # Allow binding to foreign IP addresses
 # Command line: -F0 and -F1
 ;FreeBind = true
@@ -67,6 +71,10 @@
 # Command line: -l (-e and -f also override this directive)
 ;LogFile = /var/log/vlmcsd.log
 
+# Don't include date and time in logs (default is true)
+# Command line: -T0 and -T1
+;LogDateAndTime = false
+
 # Create a verbose log
 # Command line: -v and -q
 ;LogVerbose = true

vlmcsd.ini.5

@@ -1,4 +1,4 @@
-.TH VLMCSD.INI 5 "June 2016" "Hotbird64" "KMS Activation Manual"
+.TH VLMCSD.INI 5 "July 2016" "Hotbird64" "KMS Activation Manual"
 .LO 8
 
 .SH NAME
@@ -53,6 +53,19 @@ Can only be used if vlmcsd has been compiled to use simple sockets or on Windows
 .IP "\fBFreeBind\fR"
 Can be TRUE or FALSE. If TRUE, you can use the \fBListen\fR keyword with IP addresses that are currently not defined on your system. \fBvlmcsd\fR(8) will start listening on these IP addresses as soon as they become available. This keyword is only available under Linux and FreeBSD because no other OS currently supports that feature. FreeBSD supports this only for IPv4 and requires the PRIV_NETINET_BINDANY privilege which is normally assigned to proccesses of the root user.
 
+.IP "\fBPublicIPProtectionLevel\fR"
+Set the level of protection against KMS activations from public IP addresses.
+
+0 = No protection (default)
+.br
+1\ =\ Listen on private IP addresses only (plus those specified by one or more \fBListen\fR statements)
+.br
+2\ =\ Disconnect clients with public IP addresses without activating
+.br
+3\ =\ Combines 1 and 2
+
+For details on public IP protection levels see \fBvlmcsd\fR(8) command line option \fB-o\fR.
+
 .IP "\fBUseNDR64\fR"
 Can be TRUE or FALSE. Specifies whether you want to use the NDR64 transfer syntax. See options \fB-n0\fR and \fB-n1\fR in \fBvlmcsd\fR(8). The default is TRUE.
 
@@ -80,6 +93,9 @@ Write a pid file. The \fIargument\fR is the full pathname of a pid file. The pid
 .IP "\fBLogFile\fR"
 Write a log file. The \fIargument\fR is the full pathname of a log file. On a unixoid OS and with Cygwin you can use the special filename 'syslog' to log to the syslog facility. This is the same as specifying \fB-l\fR on the command line.
 
+.IP "\fBLogDateAndTime\fR"
+Can be TRUE or FALSE. The default is TRUE. If set to FALSE, logging output does not include date and time. This is useful if you log to \fBstdout\fR(3) which is redirected to another logging mechanism that already includes date and time in its output, for instance \fBsystemd-journald\fR(8). If you log to \fBsyslog\fR(3), \fBLogDateAndTime\fR is ignored and date and time will never be included in the output sent to \fBsyslog\fR(3). Using the command line you control this setting with options \fB-T0\fR and \fB-T1\fR.
+
 .IP "\fBLogVerbose\fR"
 Set this to either TRUE or FALSE. The default is FALSE. If set to TRUE, more details of each activation will be logged. You use \fB-v\fR and \fB-q\fR in the command line to control this setting. \fBLogVerbose\fR has an effect only if you specify a log file or redirect logging to \fBstdout\fR(3).
 
@@ -87,7 +103,7 @@ Set this to either TRUE or FALSE. The default is FALSE. If set to TRUE, more det
 This is the same as specifying \fB-A\fR on the command line. See \fBvlmcsd\fR(8) for details. The default is 2 hours. Example: ActivationInterval = 1h
 
 .IP "\fBRenewalInterval\fR"
-This is the same as specifying \fB-R\fR on the command line. See \fBvlmcsd\fR(8) for details. The default is 7 days. Example: ActivationInterval = 3h. Please note that the KMS client decides itself when to renew activation. Even though vlmcsd sends the renewal interval you specify, it is no more than some kind of recommendation to the client. Older KMS clients did follow the recommendation from a KMS server or emulator. Newer clients do not.
+This is the same as specifying \fB-R\fR on the command line. See \fBvlmcsd\fR(8) for details. The default is 7 days. Example: RenewalInterval = 3d. Please note that the KMS client decides itself when to renew activation. Even though vlmcsd sends the renewal interval you specify, it is no more than some kind of recommendation to the client. Older KMS clients did follow the recommendation from a KMS server or emulator. Newer clients do not.
 
 .IP "\fBUser\fR"
 Run vlmcsd as another, preferrably less privileged, user. The \fIargument\fR can be a user name or a numeric user id. You must have the required privileges (capabilities on Linux) to change the security context of a process without providing any credentials (a password in most cases). On most unixoid OSses 'root' is the only user who has these privileges in the default configuration. This setting is not available in the native Windows version of vlmcsd. See \fB-u\fR in \fBvlmcsd\fR(8). This setting cannot be changed on the fly by sending SIGHUP to vlmcsd.

vlmcsd.ini.5.dos.txt

@@ -108,6 +108,21 @@ KEYWORDS
               proccesses of the root user.
 
 
+       PublicIPProtectionLevel
+              Set  the level of protection against KMS activations from public
+              IP addresses.
+
+              0 = No protection (default)
+              1 = Listen on private IP addresses only (plus those specified by
+              one or more Listen statements)
+              2 = Disconnect clients with public IP addresses without activat‐
+              ing
+              3 = Combines 1 and 2
+
+              For details on public IP protection levels see vlmcsd(8) command
+              line option -o.
+
+
        UseNDR64
               Can  be  TRUE  or  FALSE.  Specifies whether you want to use the
               NDR64 transfer syntax. See options -n0 and -n1 in vlmcsd(8). The
@@ -173,56 +188,67 @@ KEYWORDS
               same as specifying -l on the command line.
 
 
+       LogDateAndTime
+              Can be TRUE or FALSE. The default is TRUE. If set to FALSE, log‐
+              ging output does not include date and time. This  is  useful  if
+              you  log  to  stdout(3)  which  is redirected to another logging
+              mechanism that already includes date and time in its output, for
+              instance  systemd-journald(8). If you log to syslog(3), LogDate‐
+              AndTime is ignored and date and time will never be  included  in
+              the output sent to syslog(3). Using the command line you control
+              this setting with options -T0 and -T1.
+
+
        LogVerbose
-              Set  this  to either TRUE or FALSE. The default is FALSE. If set
+              Set this to either TRUE or FALSE. The default is FALSE.  If  set
               to TRUE, more details of each activation will be logged. You use
-              -v  and  -q in the command line to control this setting. LogVer‐
+              -v and -q in the command line to control this  setting.  LogVer‐
-              bose has an effect only if you specify a log  file  or  redirect
+              bose  has  an  effect only if you specify a log file or redirect
               logging to stdout(3).
 
 
        ActivationInterval
-              This  is the same as specifying -A on the command line. See vlm‐
+              This is the same as specifying -A on the command line. See  vlm‐
               csd(8) for details. The default is 2 hours. Example: Activation‐
               Interval = 1h
 
 
        RenewalInterval
-              This  is the same as specifying -R on the command line. See vlm‐
+              This is the same as specifying -R on the command line. See  vlm‐
-              csd(8) for details. The default is 7 days. Example:  Activation‐
+              csd(8)  for  details. The default is 7 days. Example: RenewalIn‐
-              Interval  =  3h.  Please note that the KMS client decides itself
+              terval = 3d. Please note that the KMS client decides itself when
-              when to renew activation. Even though vlmcsd sends  the  renewal
+              to renew activation. Even though vlmcsd sends the renewal inter‐
-              interval  you specify, it is no more than some kind of recommen‐
+              val you specify, it is no more than some kind of  recommendation
-              dation to the client. Older KMS clients did follow the recommen‐
+              to  the  client. Older KMS clients did follow the recommendation
-              dation from a KMS server or emulator. Newer clients do not.
+              from a KMS server or emulator. Newer clients do not.
 
 
-       User   Run  vlmcsd  as  another, preferrably less privileged, user. The
+       User   Run vlmcsd as another, preferrably less  privileged,  user.  The
-              argument can be a user name or a numeric user id. You must  have
+              argument  can be a user name or a numeric user id. You must have
-              the  required  privileges  (capabilities on Linux) to change the
+              the required privileges (capabilities on Linux)  to  change  the
-              security context of a process without providing any  credentials
+              security  context of a process without providing any credentials
-              (a  password in most cases). On most unixoid OSses 'root' is the
+              (a password in most cases). On most unixoid OSses 'root' is  the
               only user who has these privileges in the default configuration.
-              This  setting  is not available in the native Windows version of
+              This setting is not available in the native Windows  version  of
-              vlmcsd. See -u in vlmcsd(8). This setting cannot be  changed  on
+              vlmcsd.  See  -u in vlmcsd(8). This setting cannot be changed on
               the fly by sending SIGHUP to vlmcsd.
 
 
-       Group  Run  vlmcsd  as another, preferrably less privileged, group. The
+       Group  Run vlmcsd as another, preferrably less privileged,  group.  The
-              argument can be a group name or a numeric  group  id.  You  must
+              argument  can  be  a  group name or a numeric group id. You must
-              have  the  required privileges (capabilities on Linux) to change
+              have the required privileges (capabilities on Linux)  to  change
-              the security context of a process without providing any  creden‐
+              the  security context of a process without providing any creden‐
-              tials  (a  password in most cases). On most unixoid OSses 'root'
+              tials (a password in most cases). On most unixoid  OSses  'root'
               is the only user who has these privileges in the default config‐
-              uration.  This  setting  is  not available in the native Windows
+              uration. This setting is not available  in  the  native  Windows
-              version of vlmcsd. See -g in vlmcsd(8). This setting  cannot  be
+              version  of  vlmcsd. See -g in vlmcsd(8). This setting cannot be
               changed on the fly by sending SIGHUP to vlmcsd.
 
 
 SPECIAL KEYWORDS
-       Any  valid  GUID is being treated as a special keyword in the ini file.
+       Any valid GUID is being treated as a special keyword in the  ini  file.
-       It is used to select a specfic ePID and HwId for an  application  GUID.
+       It  is  used to select a specfic ePID and HwId for an application GUID.
-       The  argument  has the form ePID [ / HwId ]. KMS currently knows only 3
+       The argument has the form ePID [ / HwId ]. KMS currently knows  only  3
        application GUIDs:
 
        55c92734-d682-4d71-983e-d6ec3f16059f (Windows)
@@ -236,25 +262,25 @@ SPECIAL KEYWORDS
        59a52881-a989-479d-af46-f275c6370663 = 55041-00096-216-598637-03-17418-6002.0000-3312013
        0ff1ce15-a989-479d-af46-f275c6370663 = 55041-00206-234-742099-03-9217-6002.0000-2942013
 
-       The ePID is currently a comment only. You can specify any string up  to
+       The  ePID is currently a comment only. You can specify any string up to
-       63  bytes.  In  Windows  7 Microsoft has blacklisted few ( < 10 ) ePIDs
+       63 bytes. In Windows 7 Microsoft has blacklisted few (  <  10  )  ePIDs
-       that were used in KMSv5 versions of the  "ratiborus  virtual  machine".
+       that  were  used  in KMSv5 versions of the "ratiborus virtual machine".
-       Microsoft  has  given up on blacklisting when KMS emulators appeared in
+       Microsoft has given up on blacklisting when KMS emulators  appeared  in
        the wild.
 
        Even if you can use "Activated by cool hacker guys" as an ePID, you may
        wish to use ePIDs that cannot be detected as non-MS ePIDs. If you don't
-       know how these "valid" ePIDs look like exactly, do  not  use  GUIDS  in
+       know  how  these  "valid"  ePIDs look like exactly, do not use GUIDS in
-       vlmcsd.ini.  vlmcsd  provides  internal  mechanisms  to  generate valid
+       vlmcsd.ini. vlmcsd  provides  internal  mechanisms  to  generate  valid
        ePIDs.
 
        If you use non-ASCII characters in your ePID (you shouldn't do anyway),
-       these  must  be  in UTF-8 format. This is especially important when you
+       these must be in UTF-8 format. This is especially  important  when  you
        run vlmcsd on Windows or cygwin because UTF-8 is not the default encod‐
        ing for most editors.
 
        If you are specifying an optional HWID it follows the same syntax as in
-       the -H option in vlmcsd(8) ecxept that you must not enclose a  HWID  in
+       the  -H  option in vlmcsd(8) ecxept that you must not enclose a HWID in
        quotes even if it contains spaces.
 
 
@@ -268,7 +294,7 @@ AUTHOR
 
 
 CREDITS
-       Thanks to CODYQX4, deagles, eIcn,  mikmik38,  nosferati87,  qad,  Rati‐
+       Thanks  to  CODYQX4,  deagles,  eIcn, mikmik38, nosferati87, qad, Rati‐
        borus, ...
 
 
@@ -277,4 +303,4 @@ SEE ALSO
 
 
 
-Hotbird64                          June 2016                     VLMCSD.INI(5)
+Hotbird64                          July 2016                     VLMCSD.INI(5)

vlmcsd.ini.5.html

@@ -1,5 +1,5 @@
 <!-- Creator     : groff version 1.22.3 -->
-<!-- CreationDate: Sun Jun  5 14:31:11 2016 -->
+<!-- CreationDate: Wed Jul 13 12:34:02 2016 -->
 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd">
 <html>
@@ -208,6 +208,25 @@ feature. FreeBSD supports this only for IPv4 and requires
 the PRIV_NETINET_BINDANY privilege which is normally
 assigned to proccesses of the root user.</p>
 
+
+<p style="margin-left:11%;"><b>PublicIPProtectionLevel</b></p>
+
+<p style="margin-left:22%;">Set the level of protection
+against KMS activations from public IP addresses.</p>
+
+<p style="margin-left:22%; margin-top: 1em">0 = No
+protection (default) <br>
+1&nbsp;=&nbsp;Listen on private IP addresses only (plus
+those specified by one or more <b>Listen</b> statements)
+<br>
+2&nbsp;=&nbsp;Disconnect clients with public IP addresses
+without activating <br>
+3&nbsp;=&nbsp;Combines 1 and 2</p>
+
+<p style="margin-left:22%; margin-top: 1em">For details on
+public IP protection levels see <b>vlmcsd</b>(8) command
+line option <b>-o</b>.</p>
+
 <p style="margin-left:11%;"><b>UseNDR64</b></p>
 
 <p style="margin-left:22%;">Can be TRUE or FALSE. Specifies
@@ -296,6 +315,19 @@ unixoid OS and with Cygwin you can use the special filename
 &rsquo;syslog&rsquo; to log to the syslog facility. This is
 the same as specifying <b>-l</b> on the command line.</p>
 
+<p style="margin-left:11%;"><b>LogDateAndTime</b></p>
+
+<p style="margin-left:22%;">Can be TRUE or FALSE. The
+default is TRUE. If set to FALSE, logging output does not
+include date and time. This is useful if you log to
+<b>stdout</b>(3) which is redirected to another logging
+mechanism that already includes date and time in its output,
+for instance <b>systemd-journald</b>(8). If you log to
+<b>syslog</b>(3), <b>LogDateAndTime</b> is ignored and date
+and time will never be included in the output sent to
+<b>syslog</b>(3). Using the command line you control this
+setting with options <b>-T0</b> and <b>-T1</b>.</p>
+
 <p style="margin-left:11%;"><b>LogVerbose</b></p>
 
 <p style="margin-left:22%;">Set this to either TRUE or
@@ -316,8 +348,8 @@ details. The default is 2 hours. Example: ActivationInterval
 
 <p style="margin-left:22%;">This is the same as specifying
 <b>-R</b> on the command line. See <b>vlmcsd</b>(8) for
-details. The default is 7 days. Example: ActivationInterval
+details. The default is 7 days. Example: RenewalInterval =
-= 3h. Please note that the KMS client decides itself when to
+3d. Please note that the KMS client decides itself when to
 renew activation. Even though vlmcsd sends the renewal
 interval you specify, it is no more than some kind of
 recommendation to the client. Older KMS clients did follow

vlmcsd.ini.5.unix.txt

@@ -108,6 +108,21 @@ KEYWORDS
               proccesses of the root user.
 
 
+       PublicIPProtectionLevel
+              Set  the level of protection against KMS activations from public
+              IP addresses.
+
+              0 = No protection (default)
+              1 = Listen on private IP addresses only (plus those specified by
+              one or more Listen statements)
+              2 = Disconnect clients with public IP addresses without activat‐
+              ing
+              3 = Combines 1 and 2
+
+              For details on public IP protection levels see vlmcsd(8) command
+              line option -o.
+
+
        UseNDR64
               Can  be  TRUE  or  FALSE.  Specifies whether you want to use the
               NDR64 transfer syntax. See options -n0 and -n1 in vlmcsd(8). The
@@ -173,56 +188,67 @@ KEYWORDS
               same as specifying -l on the command line.
 
 
+       LogDateAndTime
+              Can be TRUE or FALSE. The default is TRUE. If set to FALSE, log‐
+              ging output does not include date and time. This  is  useful  if
+              you  log  to  stdout(3)  which  is redirected to another logging
+              mechanism that already includes date and time in its output, for
+              instance  systemd-journald(8). If you log to syslog(3), LogDate‐
+              AndTime is ignored and date and time will never be  included  in
+              the output sent to syslog(3). Using the command line you control
+              this setting with options -T0 and -T1.
+
+
        LogVerbose
-              Set  this  to either TRUE or FALSE. The default is FALSE. If set
+              Set this to either TRUE or FALSE. The default is FALSE.  If  set
               to TRUE, more details of each activation will be logged. You use
-              -v  and  -q in the command line to control this setting. LogVer‐
+              -v and -q in the command line to control this  setting.  LogVer‐
-              bose has an effect only if you specify a log  file  or  redirect
+              bose  has  an  effect only if you specify a log file or redirect
               logging to stdout(3).
 
 
        ActivationInterval
-              This  is the same as specifying -A on the command line. See vlm‐
+              This is the same as specifying -A on the command line. See  vlm‐
               csd(8) for details. The default is 2 hours. Example: Activation‐
               Interval = 1h
 
 
        RenewalInterval
-              This  is the same as specifying -R on the command line. See vlm‐
+              This is the same as specifying -R on the command line. See  vlm‐
-              csd(8) for details. The default is 7 days. Example:  Activation‐
+              csd(8)  for  details. The default is 7 days. Example: RenewalIn‐
-              Interval  =  3h.  Please note that the KMS client decides itself
+              terval = 3d. Please note that the KMS client decides itself when
-              when to renew activation. Even though vlmcsd sends  the  renewal
+              to renew activation. Even though vlmcsd sends the renewal inter‐
-              interval  you specify, it is no more than some kind of recommen‐
+              val you specify, it is no more than some kind of  recommendation
-              dation to the client. Older KMS clients did follow the recommen‐
+              to  the  client. Older KMS clients did follow the recommendation
-              dation from a KMS server or emulator. Newer clients do not.
+              from a KMS server or emulator. Newer clients do not.
 
 
-       User   Run  vlmcsd  as  another, preferrably less privileged, user. The
+       User   Run vlmcsd as another, preferrably less  privileged,  user.  The
-              argument can be a user name or a numeric user id. You must  have
+              argument  can be a user name or a numeric user id. You must have
-              the  required  privileges  (capabilities on Linux) to change the
+              the required privileges (capabilities on Linux)  to  change  the
-              security context of a process without providing any  credentials
+              security  context of a process without providing any credentials
-              (a  password in most cases). On most unixoid OSses 'root' is the
+              (a password in most cases). On most unixoid OSses 'root' is  the
               only user who has these privileges in the default configuration.
-              This  setting  is not available in the native Windows version of
+              This setting is not available in the native Windows  version  of
-              vlmcsd. See -u in vlmcsd(8). This setting cannot be  changed  on
+              vlmcsd.  See  -u in vlmcsd(8). This setting cannot be changed on
               the fly by sending SIGHUP to vlmcsd.
 
 
-       Group  Run  vlmcsd  as another, preferrably less privileged, group. The
+       Group  Run vlmcsd as another, preferrably less privileged,  group.  The
-              argument can be a group name or a numeric  group  id.  You  must
+              argument  can  be  a  group name or a numeric group id. You must
-              have  the  required privileges (capabilities on Linux) to change
+              have the required privileges (capabilities on Linux)  to  change
-              the security context of a process without providing any  creden‐
+              the  security context of a process without providing any creden‐
-              tials  (a  password in most cases). On most unixoid OSses 'root'
+              tials (a password in most cases). On most unixoid  OSses  'root'
               is the only user who has these privileges in the default config‐
-              uration.  This  setting  is  not available in the native Windows
+              uration. This setting is not available  in  the  native  Windows
-              version of vlmcsd. See -g in vlmcsd(8). This setting  cannot  be
+              version  of  vlmcsd. See -g in vlmcsd(8). This setting cannot be
               changed on the fly by sending SIGHUP to vlmcsd.
 
 
 SPECIAL KEYWORDS
-       Any  valid  GUID is being treated as a special keyword in the ini file.
+       Any valid GUID is being treated as a special keyword in the  ini  file.
-       It is used to select a specfic ePID and HwId for an  application  GUID.
+       It  is  used to select a specfic ePID and HwId for an application GUID.
-       The  argument  has the form ePID [ / HwId ]. KMS currently knows only 3
+       The argument has the form ePID [ / HwId ]. KMS currently knows  only  3
        application GUIDs:
 
        55c92734-d682-4d71-983e-d6ec3f16059f (Windows)
@@ -236,25 +262,25 @@ SPECIAL KEYWORDS
        59a52881-a989-479d-af46-f275c6370663 = 55041-00096-216-598637-03-17418-6002.0000-3312013
        0ff1ce15-a989-479d-af46-f275c6370663 = 55041-00206-234-742099-03-9217-6002.0000-2942013
 
-       The ePID is currently a comment only. You can specify any string up  to
+       The  ePID is currently a comment only. You can specify any string up to
-       63  bytes.  In  Windows  7 Microsoft has blacklisted few ( < 10 ) ePIDs
+       63 bytes. In Windows 7 Microsoft has blacklisted few (  <  10  )  ePIDs
-       that were used in KMSv5 versions of the  "ratiborus  virtual  machine".
+       that  were  used  in KMSv5 versions of the "ratiborus virtual machine".
-       Microsoft  has  given up on blacklisting when KMS emulators appeared in
+       Microsoft has given up on blacklisting when KMS emulators  appeared  in
        the wild.
 
        Even if you can use "Activated by cool hacker guys" as an ePID, you may
        wish to use ePIDs that cannot be detected as non-MS ePIDs. If you don't
-       know how these "valid" ePIDs look like exactly, do  not  use  GUIDS  in
+       know  how  these  "valid"  ePIDs look like exactly, do not use GUIDS in
-       vlmcsd.ini.  vlmcsd  provides  internal  mechanisms  to  generate valid
+       vlmcsd.ini. vlmcsd  provides  internal  mechanisms  to  generate  valid
        ePIDs.
 
        If you use non-ASCII characters in your ePID (you shouldn't do anyway),
-       these  must  be  in UTF-8 format. This is especially important when you
+       these must be in UTF-8 format. This is especially  important  when  you
        run vlmcsd on Windows or cygwin because UTF-8 is not the default encod‐
        ing for most editors.
 
        If you are specifying an optional HWID it follows the same syntax as in
-       the -H option in vlmcsd(8) ecxept that you must not enclose a  HWID  in
+       the  -H  option in vlmcsd(8) ecxept that you must not enclose a HWID in
        quotes even if it contains spaces.
 
 
@@ -268,7 +294,7 @@ AUTHOR
 
 
 CREDITS
-       Thanks to CODYQX4, deagles, eIcn,  mikmik38,  nosferati87,  qad,  Rati‐
+       Thanks  to  CODYQX4,  deagles,  eIcn, mikmik38, nosferati87, qad, Rati‐
        borus, ...
 
 
@@ -277,4 +303,4 @@ SEE ALSO
 
 
 
-Hotbird64                          June 2016                     VLMCSD.INI(5)
+Hotbird64                          July 2016                     VLMCSD.INI(5)

vlmcsdmulti.1.html

@@ -1,5 +1,5 @@
 <!-- Creator     : groff version 1.22.3 -->
-<!-- CreationDate: Sun Jun  5 14:31:10 2016 -->
+<!-- CreationDate: Wed Jul 13 12:34:02 2016 -->
 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd">
 <html>