Commit Graph

127 Commits

Author SHA1 Message Date
Daniel
5d0db1c250 Attempt to fix windows lint errors again 2020-10-15 12:18:57 +02:00
Daniel
9e8b763428 Fix windows kext warning on shutdown 2020-10-15 11:48:27 +02:00
Daniel
cfafbfca4e Improve trace logging 2020-10-15 11:48:27 +02:00
Daniel
dd6ded0308 Implement review suggestions 2020-10-15 11:23:23 +02:00
Daniel
62dd4355be Add scoping to IPInfo 2020-10-14 11:37:50 +02:00
Daniel
86fed20f71 Merge pull request #175 from safing/fix/nfqexp-flag
Fix nfq-exp flag and nfq logging messages
2020-10-14 11:36:55 +02:00
Daniel
210059f1f2 Fix nfq-exp flag and nfq logging messages 2020-10-13 15:56:09 +02:00
Patrick Pacher
1a2b4285cd Fix build on darwin 2020-10-01 16:44:33 +02:00
Patrick Pacher
1b45659f47 Add review changes 2020-10-01 16:27:31 +02:00
Patrick Pacher
7a83e772f4 Add simple packet metrics 2020-10-01 16:27:19 +02:00
Patrick Pacher
bdcfc8c566 Finally switch to nfqexp as the default nfqueue backend 2020-09-30 17:44:42 +02:00
Daniel
1402052b95 Improve Permanent Verdicts description.
Also, add a minor trace counting fix.
2020-09-29 11:24:24 +02:00
Daniel
67cdc52fcd Implement Feedback 2020-09-24 17:25:00 +02:00
Daniel
af056780fc Fix linter errors 2020-09-24 17:12:01 +02:00
Daniel
5df7182b5d Implement feedback 2020-09-24 17:12:01 +02:00
Daniel
3f3d82bdf1 Improve debug information in DNS responses 2020-09-24 17:12:01 +02:00
Daniel
790008a9c1 Merge pull request #137 from safing/fix/nfqexp-verdicts
Block until pending verdicts are set. Update deps
2020-08-18 16:14:10 +02:00
Patrick Pacher
bd681cd01f Update MaxPackageLen to be a bit bigger than default MTU 2020-08-18 15:22:58 +02:00
Patrick Pacher
7d25f9f4f4 Block until pending verdicts are set. Update deps 2020-08-17 16:27:15 +02:00
Daniel
f01df70143 Fix and improve fast tracked permits in firewall 2020-08-14 11:55:58 +02:00
Daniel
2de354e482 Fix IPv6 to local redirects 2020-08-14 11:25:16 +02:00
Daniel
9d35ff3192 Fix and improve network listener system integration and check
Also, improve logging.
2020-08-12 14:33:09 +02:00
Daniel
5c71873e00 Merge pull request #124 from safing/fix/lms-scoring
Move LMS scoring from nameserver to firewall
2020-08-11 16:18:33 +02:00
Patrick Pacher
c229031521 Retext block reason in domain heuristics 2020-08-11 15:45:32 +02:00
Patrick Pacher
3b896ee892 Move LMS scoring under new Domain Heuristics 2020-08-11 15:37:24 +02:00
Patrick Pacher
8840c88903 Fix linter warnings on windows 2020-08-11 15:34:29 +02:00
Patrick Pacher
85e4beafa1 Move LMS scoring from nameserver to firewall 2020-08-11 10:28:05 +02:00
Daniel
2643a90582 Fix multierror handling 2020-08-10 23:13:42 +02:00
Daniel
cdec623033 Add SPN integration 2020-08-06 21:36:43 +02:00
Patrick Pacher
071f2a9bd5 Silience "not found" errors in recover-iptables 2020-08-04 13:14:09 +02:00
Patrick Pacher
4d56752989 Use NextHeader as a fallback for unknown IPv6 protocols 2020-07-31 15:15:38 +02:00
Safing
9639775ad7 Fix IPv6 connection handling and refactor packet parsing 2020-07-31 14:32:18 +02:00
Patrick Pacher
0451e99431 Add experimental nfqueue interception backend
This commit adds a new experimental nfqueue interception
backed based on github.com/florianl/go-nfqueue. It should
add more stability to the interception of network packets
and also eliminates the CGO and the runtime dependency on
libnetfilter_queue. Note that this commit does not remove
the old nfqueue backend yet but adds a --experimental-nfqueue
flag to portmaster-core.
2020-07-30 08:35:27 +02:00
Patrick Pacher
9eb7195bd8 Try as hard as possible to remove the nfqueue rules 2020-07-22 15:11:41 +02:00
Patrick Pacher
7690793c66 Add recover-iptables sub-comment. Fixes #6 2020-07-22 15:11:41 +02:00
Daniel
17af628f9a Add no-op default interception interface
This enables building for unsupported platforms
2020-07-22 09:36:53 +02:00
Daniel
0a68b81005 Add flag to disable packet interception 2020-07-22 09:35:58 +02:00
Daniel
811516eec8 Update captive portal detection to work without server 2020-07-21 14:56:06 +02:00
Daniel
68c2d23c1b Fix handling of connectivity / captive portal domains
Also, improve handling of queries during being captive.
2020-07-17 16:09:46 +02:00
Daniel
e369a9484a Improve captive portal handling 2020-07-15 08:53:55 +02:00
Daniel
e1d39e88ba Improve logging 2020-06-05 14:00:51 +02:00
Daniel
625b79e3b3 Detect PID loops in api auth 2020-06-05 14:00:44 +02:00
Daniel
e442baddb6 Fix and improve authentication retrying and error messages 2020-06-04 17:15:25 +02:00
Daniel
e5ad87a585 Increase resilience of api auth by waiting long and trying more often
Also, improve messages sent to user.
2020-06-03 21:21:34 +02:00
Daniel
46411951f6 Further improve logging and messages 2020-05-20 16:43:54 +02:00
Daniel
26fd447700 Switch default action / asking to release level experimental
There are, well, many problems...
2020-05-20 15:36:11 +02:00
Daniel
4671535691 Improve logging 2020-05-20 15:35:22 +02:00
Daniel
7649859ba6 Switch connection state lookups to use the packet.Info struct
Also, rename the Direction attribute on packet.Info to Inbound
2020-05-18 17:08:32 +02:00
Daniel
886d30278f Fix IPv4 parsing from windows state tables 2020-05-16 22:43:42 +02:00
Daniel
635d5770d1 Change BlockInbound to only affect LAN and Internet 2020-05-15 17:18:42 +02:00