TFTP tweak.
Check sender of all received packets, as specified in RFC 1350 para 4.
My understanding of the example in the RFC is that it in fact only
applies to server-to-client packets, and packet loss or duplication
cannot result in a client sending from more than one port to a server.
This check is not, therefore, strictly needed on the server side.
It's still useful, and adds a little security against packet
spoofing. (though if you're running TFTP on a public network with
bad actors, nothing can really save you.)
diff --git a/CHANGELOG b/CHANGELOG
index 6085416..1af593f 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -65,6 +65,9 @@
Scale the size of the DNS random-port pool based on the
value of the --dns-forward-max configuration.
+ Tweak TFTP code to check sender of all recieved packets, as
+ specified in RFC 1350 para 4.
+
version 2.84
Fix a problem, introduced in 2.83, which could see DNS replies