Commit graph

66 commits

Author SHA1 Message Date
Daniel
5d61b7b682 Improve packet parsing 2021-03-29 13:39:36 +02:00
Daniel
60bdea7c50 Fix network debug formatting 2021-03-21 21:49:37 +01:00
Daniel
bc341b60c0 Enable Windows dnscache again 2021-03-20 23:14:38 +01:00
Daniel
d9483e6251 Fix imcpv6 protocol name 2021-01-23 14:47:44 +01:00
Daniel
a30287014c Fix nil check for nil value interfaces 2021-01-23 14:47:08 +01:00
Daniel
9d12804211 Fix icmp6 handling just like for icmp4 2021-01-19 15:48:34 +01:00
Daniel
ae32a2e29a Fix typo 2021-01-07 12:40:06 +01:00
Daniel
684555e5e5 Fix slow nfq shutdown 2020-12-21 14:55:33 +01:00
Patrick Pacher
44e1b97c30 Update linux integration code to re-create the nfqueues on failure 2020-12-14 09:42:04 +01:00
Daniel
7f26a28776 Improve internal tooling 2020-12-04 16:59:14 +01:00
Daniel
e58f28c323 Reduce locking in nfqueue and netlink 2020-11-27 17:20:58 +01:00
Daniel
28bb8ec6ca Fix connection blocking on Linux 2020-11-06 08:53:07 +01:00
Daniel
fa3f873c31 Implement review feedback 2020-10-30 11:54:00 +01:00
Daniel
17a0c8f721 Fix Windows notifications 2020-10-29 16:32:06 +01:00
Daniel
5d0db1c250 Attempt to fix windows lint errors again 2020-10-15 12:18:57 +02:00
Daniel
9e8b763428 Fix windows kext warning on shutdown 2020-10-15 11:48:27 +02:00
Daniel
86fed20f71
Merge pull request #175 from safing/fix/nfqexp-flag
Fix nfq-exp flag and nfq logging messages
2020-10-14 11:36:55 +02:00
Daniel
210059f1f2 Fix nfq-exp flag and nfq logging messages 2020-10-13 15:56:09 +02:00
Patrick Pacher
1a2b4285cd Fix build on darwin 2020-10-01 16:44:33 +02:00
Patrick Pacher
1b45659f47
Add review changes 2020-10-01 16:27:31 +02:00
Patrick Pacher
7a83e772f4
Add simple packet metrics 2020-10-01 16:27:19 +02:00
Patrick Pacher
bdcfc8c566
Finally switch to nfqexp as the default nfqueue backend 2020-09-30 17:44:42 +02:00
Daniel
af056780fc Fix linter errors 2020-09-24 17:12:01 +02:00
Daniel
790008a9c1
Merge pull request #137 from safing/fix/nfqexp-verdicts
Block until pending verdicts are set. Update deps
2020-08-18 16:14:10 +02:00
Patrick Pacher
bd681cd01f
Update MaxPackageLen to be a bit bigger than default MTU 2020-08-18 15:22:58 +02:00
Patrick Pacher
7d25f9f4f4
Block until pending verdicts are set. Update deps 2020-08-17 16:27:15 +02:00
Daniel
2de354e482 Fix IPv6 to local redirects 2020-08-14 11:25:16 +02:00
Daniel
9d35ff3192 Fix and improve network listener system integration and check
Also, improve logging.
2020-08-12 14:33:09 +02:00
Patrick Pacher
8840c88903
Fix linter warnings on windows 2020-08-11 15:34:29 +02:00
Daniel
2643a90582 Fix multierror handling 2020-08-10 23:13:42 +02:00
Daniel
cdec623033 Add SPN integration 2020-08-06 21:36:43 +02:00
Patrick Pacher
071f2a9bd5
Silience "not found" errors in recover-iptables 2020-08-04 13:14:09 +02:00
Safing
9639775ad7
Fix IPv6 connection handling and refactor packet parsing 2020-07-31 14:32:18 +02:00
Patrick Pacher
0451e99431
Add experimental nfqueue interception backend
This commit adds a new experimental nfqueue interception
backed based on github.com/florianl/go-nfqueue. It should
add more stability to the interception of network packets
and also eliminates the CGO and the runtime dependency on
libnetfilter_queue. Note that this commit does not remove
the old nfqueue backend yet but adds a --experimental-nfqueue
flag to portmaster-core.
2020-07-30 08:35:27 +02:00
Patrick Pacher
9eb7195bd8
Try as hard as possible to remove the nfqueue rules 2020-07-22 15:11:41 +02:00
Patrick Pacher
7690793c66
Add recover-iptables sub-comment. Fixes #6 2020-07-22 15:11:41 +02:00
Daniel
17af628f9a Add no-op default interception interface
This enables building for unsupported platforms
2020-07-22 09:36:53 +02:00
Daniel
0a68b81005 Add flag to disable packet interception 2020-07-22 09:35:58 +02:00
Daniel
7649859ba6 Switch connection state lookups to use the packet.Info struct
Also, rename the Direction attribute on packet.Info to Inbound
2020-05-18 17:08:32 +02:00
Daniel
886d30278f Fix IPv4 parsing from windows state tables 2020-05-16 22:43:42 +02:00
Daniel
cb991e9f02 Fix and improve IP address conversion on windows 2020-05-15 17:16:08 +02:00
Daniel
ef2c9066ce Fix tests 2020-05-02 13:37:43 +02:00
Daniel
fe7d146360 Switch from ACCEPT to RETURN when accepting a packet/connection with iptables
This will ensure the Portmaster will not circumvent existing firewall rules.
2020-04-24 10:58:39 +02:00
Daniel
fd4f059ebb Fix windowskext linter errors 2020-04-10 13:18:37 +02:00
Daniel
541cf702ad Explicitly mark the nfqueue package for building on linux 2020-04-10 10:50:43 +02:00
Daniel
38f57a8954 Rework Communication+Link to Connection 2020-04-07 17:30:33 +02:00
Daniel
f75fc7d162 Clean up linter errors 2019-11-07 16:13:22 +01:00
Daniel
4348caa258 Clean up and adapt firewall package to recent changes 2019-10-25 13:35:25 +02:00
Daniel
92ccb36952 Add windows build constraint to windowskext package 2019-09-25 12:00:26 +02:00
Daniel
93cc4a056e Adapt to notifications module update 2019-07-31 22:36:33 +02:00