Daniel
|
9a89f65027
|
Improve support for DNS-SD and fall back to cached data for non-ICANN queries
|
2022-05-24 11:25:34 +02:00 |
|
Daniel
|
49e79fe3fd
|
Detect responses to multi/broadcast queries
|
2022-05-24 11:20:01 +02:00 |
|
Daniel
|
e178b732bc
|
Calm down and relax dns query check
|
2022-05-20 16:37:19 +02:00 |
|
Daniel
|
932f6002b4
|
Use alternative approach to fix nfqueue closing process
This commit reverts commit ec6a3f03e8.
|
2022-05-18 09:34:27 +02:00 |
|
Daniel
|
ec6a3f03e8
|
Fix shutting down nfq interception with go-nfqueue v1.3.1
|
2022-05-11 13:19:31 +02:00 |
|
Daniel
|
9a39caf22b
|
Resolve to real file paths before checking path based API access
|
2022-04-26 15:02:05 +02:00 |
|
Daniel
|
42eb3a1d0e
|
Use more verbose names for iptables chains
|
2022-04-26 14:36:22 +02:00 |
|
Daniel
|
f5afe8b5df
|
Block DNS requests if bypass prevention is active
|
2022-04-15 13:06:13 +02:00 |
|
Daniel
|
29bfa9fd91
|
Add config option to disable dns query interception
|
2022-04-15 13:05:24 +02:00 |
|
Daniel
|
88afd75768
|
Fix metrics for connections going through SPN
|
2022-03-22 15:29:30 +01:00 |
|
Daniel
|
d970b163a5
|
Exempt IPv6 LAN (broadcast domain only) from SPN
|
2022-03-02 14:33:25 +01:00 |
|
Daniel
|
fd24a5c69c
|
Fix linter errors
|
2022-03-02 10:02:44 +01:00 |
|
Daniel
|
fa93e93d15
|
Improve dns / exit policy and routing alg interaction
|
2022-03-01 16:35:59 +01:00 |
|
Daniel
|
7d315e92be
|
Integrate SPN route manipulation settings
|
2022-03-01 16:35:59 +01:00 |
|
Daniel
|
1346123d6f
|
Fix bypass detection to correctly attribute encrypted DNS bypassing
|
2022-02-25 15:31:10 +01:00 |
|
Daniel
|
888b33918a
|
Fix deleting profiles
|
2022-02-15 14:35:28 +01:00 |
|
Daniel
|
266c950581
|
Fix go build flags
|
2022-02-14 16:03:10 +01:00 |
|
Daniel
|
f2b4652951
|
Merge pull request #532 from safing/fix/warn-user-if-ipv6-disabled
Add notification if IPv6 network integration fails
|
2022-02-14 14:23:34 +01:00 |
|
Daniel
|
4758bc631b
|
Add notification if IPv6 network integration fails
|
2022-02-14 14:08:53 +01:00 |
|
Daniel
|
c2cac45d83
|
Fix incoming rules for system resolver
|
2022-02-14 11:24:52 +01:00 |
|
Daniel
|
338ce59ae4
|
Fix fast-tracking non-echo ICMP/v6 messages
|
2022-02-03 15:38:27 +01:00 |
|
Daniel
|
60d8664e7b
|
Fix tests and linters
|
2022-02-02 12:48:42 +01:00 |
|
Daniel
|
a4e9b370f0
|
Use P2P filter lists when blocking P2P connections
|
2021-12-13 10:28:40 +01:00 |
|
Daniel
|
3bcb6f377c
|
Fix SPN bootstrapping
|
2021-11-29 07:50:29 +01:00 |
|
Daniel
|
0cd069ac1a
|
Improve dns redirection for the self-check
|
2021-11-17 15:43:21 +01:00 |
|
Daniel
|
113f37dcab
|
Add compatibility assistant module
|
2021-11-17 14:09:42 +01:00 |
|
Daniel
|
7def0704a1
|
Add primitive encryption detection for until the inspection framework is merged
|
2021-10-20 16:11:11 +02:00 |
|
Daniel
|
b9b33ed2b3
|
Use separate DNSRequestContext struct for adding DNS context to connections
|
2021-10-19 10:25:49 +02:00 |
|
Daniel
|
ff31b7c8c5
|
Add dns and tunnel context to conntection
|
2021-10-14 15:54:42 +02:00 |
|
Daniel
|
960101d3a9
|
Add custom routing for DNS server connections
|
2021-10-12 16:18:36 +02:00 |
|
Daniel
|
0f48d32ac2
|
Fix routing for Portmaster connections
|
2021-10-12 16:18:05 +02:00 |
|
Daniel
|
70dbfa7bd3
|
Fix location estimation via ICMP traceroute
|
2021-09-29 15:42:52 +02:00 |
|
Daniel
|
985e979d1d
|
Integrate SPN into interception
|
2021-09-17 22:05:32 +02:00 |
|
Daniel
|
9c72fcfa40
|
Improve documentation
|
2021-08-23 23:02:27 +02:00 |
|
Daniel
|
7b055a7c0a
|
Implement review suggestions
|
2021-08-23 16:34:21 +02:00 |
|
Daniel
|
e16ce0b40f
|
Add exception for ICMP from dns server bypass prevention
|
2021-08-23 14:41:34 +02:00 |
|
Daniel
|
f34dccb8f3
|
Improve endpoint/rule lists and filtering of DNS requests
|
2021-08-19 23:29:29 +02:00 |
|
Patrick Pacher
|
88eb252ecb
|
Prepare intel entity data earlier in the decision process
|
2021-08-18 16:57:45 +02:00 |
|
Daniel
|
5044ef1b7e
|
Improve settings wording
|
2021-08-18 09:34:43 +02:00 |
|
Daniel
|
b314b46fb8
|
Improve logging
|
2021-08-18 09:34:00 +02:00 |
|
Patrick Pacher
|
026dc274f4
|
Fix bypass prevention not working as expected due to filterlists not matched for the entity
|
2021-08-17 14:25:55 +02:00 |
|
Daniel
|
525687a30b
|
Handle ICMP/v6 echo regularly
|
2021-06-01 12:54:22 +02:00 |
|
Daniel
|
6141066252
|
Improve system resolver profile
|
2021-06-01 12:53:57 +02:00 |
|
Daniel
|
592605b0d4
|
Set ShowOnSystem correctly for prompts
|
2021-05-18 14:12:03 +02:00 |
|
Daniel
|
fa58de2e1b
|
Remove obsoleted dnscache service check
|
2021-05-05 00:24:44 +02:00 |
|
Daniel
|
48b55a88bc
|
Improve flags
|
2021-05-05 00:24:14 +02:00 |
|
Daniel
|
22507e879b
|
Fix typo
|
2021-04-19 23:20:07 +02:00 |
|
Daniel
|
c3d94efab9
|
Add support for fast-tracking connections within the OS integration
|
2021-04-19 23:13:06 +02:00 |
|
Daniel
|
efdc0b7849
|
Fix log message and test script
|
2021-04-19 14:40:04 +02:00 |
|
Daniel
|
6f9d17bba2
|
Improve decision tree, move resolver scope checking behind endpoint list rules
|
2021-04-16 21:36:16 +02:00 |
|