Vladimir Stoilov
|
0423dfbbbf
|
Reset connection PoC
|
2022-10-10 13:34:00 +02:00 |
|
Daniel
|
59392e41c6
|
Move all filter/interception config to interception module
|
2022-09-27 14:52:09 +02:00 |
|
Patrick Pacher
|
d4f316e65a
|
incoming: force block by default, apply default action and allow LAN per rules
|
2022-09-20 09:16:23 +02:00 |
|
Daniel
|
8cf882f4d4
|
Update Go, deps and linter
|
2022-08-30 16:13:26 +02:00 |
|
Daniel
|
092b1cd8a0
|
Move resolving unbreak filter list IDs to filterlists module
|
2022-08-30 13:54:34 +02:00 |
|
Daniel
|
770ce61b84
|
Set tunneling options for (not) using community nodes
|
2022-08-30 13:27:18 +02:00 |
|
Daniel
|
57c23c7e07
|
Use correct ICMP message for blocking connections in iptables
|
2022-08-12 13:26:11 +02:00 |
|
Daniel
|
5c6fc6ee9c
|
Improve custom filter list config key
|
2022-08-02 16:35:33 +02:00 |
|
Daniel
|
0b81fb5516
|
Mitigate double read locks on the layered profile
|
2022-08-02 13:59:13 +02:00 |
|
Daniel
|
549fa1926f
|
Move checking custom filter list behind main filter lists to get entity data
|
2022-08-01 14:25:01 +02:00 |
|
Vladimir Stoilov
|
d3def3ec94
|
better user messages, linter errors, refactoring
|
2022-08-01 14:25:01 +02:00 |
|
Vladimir Stoilov
|
93367b64df
|
Bug fixes and performence fixes:
Synchronization bug fixed
map reseting performence improvment
Added more notificationa and better wording
better scheduling of file parsing task
|
2022-08-01 14:25:01 +02:00 |
|
Vladimir Stoilov
|
62c100714a
|
Custom filter list:
subdomain and cname cheks
Automatic realod when settings is changed
periodicly check for file changes
|
2022-08-01 14:25:01 +02:00 |
|
Vladimir Stoilov
|
35697989e5
|
Refactoring
|
2022-08-01 14:25:01 +02:00 |
|
Vladimir Stoilov
|
420da81b33
|
Custom filter list proof of concept
|
2022-08-01 14:25:01 +02:00 |
|
Daniel
|
65974e989d
|
Stop using deprecated function
|
2022-06-22 10:41:35 +02:00 |
|
Daniel
|
0dce13d18f
|
Fix detection of incoming localhost packets on Linux
|
2022-06-22 10:41:16 +02:00 |
|
Daniel
|
c442a7e51c
|
Deactivate IPv6 integrations when no IPv6 stack is detected
|
2022-06-09 13:58:27 +02:00 |
|
Daniel
|
787f9e7dec
|
Add support for upcoming UNBREAK filter list
|
2022-06-01 13:28:10 +02:00 |
|
Daniel
|
9a89f65027
|
Improve support for DNS-SD and fall back to cached data for non-ICANN queries
|
2022-05-24 11:25:34 +02:00 |
|
Daniel
|
49e79fe3fd
|
Detect responses to multi/broadcast queries
|
2022-05-24 11:20:01 +02:00 |
|
Daniel
|
e178b732bc
|
Calm down and relax dns query check
|
2022-05-20 16:37:19 +02:00 |
|
Daniel
|
932f6002b4
|
Use alternative approach to fix nfqueue closing process
This commit reverts commit ec6a3f03e8.
|
2022-05-18 09:34:27 +02:00 |
|
Daniel
|
ec6a3f03e8
|
Fix shutting down nfq interception with go-nfqueue v1.3.1
|
2022-05-11 13:19:31 +02:00 |
|
Daniel
|
9a39caf22b
|
Resolve to real file paths before checking path based API access
|
2022-04-26 15:02:05 +02:00 |
|
Daniel
|
42eb3a1d0e
|
Use more verbose names for iptables chains
|
2022-04-26 14:36:22 +02:00 |
|
Daniel
|
f5afe8b5df
|
Block DNS requests if bypass prevention is active
|
2022-04-15 13:06:13 +02:00 |
|
Daniel
|
29bfa9fd91
|
Add config option to disable dns query interception
|
2022-04-15 13:05:24 +02:00 |
|
Daniel
|
88afd75768
|
Fix metrics for connections going through SPN
|
2022-03-22 15:29:30 +01:00 |
|
Daniel
|
d970b163a5
|
Exempt IPv6 LAN (broadcast domain only) from SPN
|
2022-03-02 14:33:25 +01:00 |
|
Daniel
|
fd24a5c69c
|
Fix linter errors
|
2022-03-02 10:02:44 +01:00 |
|
Daniel
|
fa93e93d15
|
Improve dns / exit policy and routing alg interaction
|
2022-03-01 16:35:59 +01:00 |
|
Daniel
|
7d315e92be
|
Integrate SPN route manipulation settings
|
2022-03-01 16:35:59 +01:00 |
|
Daniel
|
1346123d6f
|
Fix bypass detection to correctly attribute encrypted DNS bypassing
|
2022-02-25 15:31:10 +01:00 |
|
Daniel
|
888b33918a
|
Fix deleting profiles
|
2022-02-15 14:35:28 +01:00 |
|
Daniel
|
266c950581
|
Fix go build flags
|
2022-02-14 16:03:10 +01:00 |
|
Daniel
|
f2b4652951
|
Merge pull request #532 from safing/fix/warn-user-if-ipv6-disabled
Add notification if IPv6 network integration fails
|
2022-02-14 14:23:34 +01:00 |
|
Daniel
|
4758bc631b
|
Add notification if IPv6 network integration fails
|
2022-02-14 14:08:53 +01:00 |
|
Daniel
|
c2cac45d83
|
Fix incoming rules for system resolver
|
2022-02-14 11:24:52 +01:00 |
|
Daniel
|
338ce59ae4
|
Fix fast-tracking non-echo ICMP/v6 messages
|
2022-02-03 15:38:27 +01:00 |
|
Daniel
|
60d8664e7b
|
Fix tests and linters
|
2022-02-02 12:48:42 +01:00 |
|
Daniel
|
a4e9b370f0
|
Use P2P filter lists when blocking P2P connections
|
2021-12-13 10:28:40 +01:00 |
|
Daniel
|
3bcb6f377c
|
Fix SPN bootstrapping
|
2021-11-29 07:50:29 +01:00 |
|
Daniel
|
0cd069ac1a
|
Improve dns redirection for the self-check
|
2021-11-17 15:43:21 +01:00 |
|
Daniel
|
113f37dcab
|
Add compatibility assistant module
|
2021-11-17 14:09:42 +01:00 |
|
Daniel
|
7def0704a1
|
Add primitive encryption detection for until the inspection framework is merged
|
2021-10-20 16:11:11 +02:00 |
|
Daniel
|
b9b33ed2b3
|
Use separate DNSRequestContext struct for adding DNS context to connections
|
2021-10-19 10:25:49 +02:00 |
|
Daniel
|
ff31b7c8c5
|
Add dns and tunnel context to conntection
|
2021-10-14 15:54:42 +02:00 |
|
Daniel
|
960101d3a9
|
Add custom routing for DNS server connections
|
2021-10-12 16:18:36 +02:00 |
|
Daniel
|
0f48d32ac2
|
Fix routing for Portmaster connections
|
2021-10-12 16:18:05 +02:00 |
|