Commit graph

26 commits

Author SHA1 Message Date
vladimir
c43f6fe463 minor refactoring 2022-11-10 17:36:58 +02:00
Vladimir
a04b76ff58 Fix linter errors 2022-11-09 12:17:23 +01:00
vladimir
f226473d9a Linux reset verdict of individual connections 2022-11-03 19:08:16 +02:00
Daniel
57c23c7e07 Use correct ICMP message for blocking connections in iptables 2022-08-12 13:26:11 +02:00
Daniel
c442a7e51c Deactivate IPv6 integrations when no IPv6 stack is detected 2022-06-09 13:58:27 +02:00
Daniel
42eb3a1d0e Use more verbose names for iptables chains 2022-04-26 14:36:22 +02:00
Daniel
4758bc631b Add notification if IPv6 network integration fails 2022-02-14 14:08:53 +01:00
Daniel
60d8664e7b Fix tests and linters 2022-02-02 12:48:42 +01:00
Daniel
d9483e6251 Fix imcpv6 protocol name 2021-01-23 14:47:44 +01:00
Daniel
9d12804211 Fix icmp6 handling just like for icmp4 2021-01-19 15:48:34 +01:00
Daniel
28bb8ec6ca Fix connection blocking on Linux 2020-11-06 08:53:07 +01:00
Daniel
210059f1f2 Fix nfq-exp flag and nfq logging messages 2020-10-13 15:56:09 +02:00
Patrick Pacher
7a83e772f4
Add simple packet metrics 2020-10-01 16:27:19 +02:00
Patrick Pacher
bdcfc8c566
Finally switch to nfqexp as the default nfqueue backend 2020-09-30 17:44:42 +02:00
Daniel
2de354e482 Fix IPv6 to local redirects 2020-08-14 11:25:16 +02:00
Daniel
9d35ff3192 Fix and improve network listener system integration and check
Also, improve logging.
2020-08-12 14:33:09 +02:00
Daniel
2643a90582 Fix multierror handling 2020-08-10 23:13:42 +02:00
Daniel
cdec623033 Add SPN integration 2020-08-06 21:36:43 +02:00
Patrick Pacher
071f2a9bd5
Silience "not found" errors in recover-iptables 2020-08-04 13:14:09 +02:00
Patrick Pacher
0451e99431
Add experimental nfqueue interception backend
This commit adds a new experimental nfqueue interception
backed based on github.com/florianl/go-nfqueue. It should
add more stability to the interception of network packets
and also eliminates the CGO and the runtime dependency on
libnetfilter_queue. Note that this commit does not remove
the old nfqueue backend yet but adds a --experimental-nfqueue
flag to portmaster-core.
2020-07-30 08:35:27 +02:00
Patrick Pacher
9eb7195bd8
Try as hard as possible to remove the nfqueue rules 2020-07-22 15:11:41 +02:00
Patrick Pacher
7690793c66
Add recover-iptables sub-comment. Fixes #6 2020-07-22 15:11:41 +02:00
Daniel
fe7d146360 Switch from ACCEPT to RETURN when accepting a packet/connection with iptables
This will ensure the Portmaster will not circumvent existing firewall rules.
2020-04-24 10:58:39 +02:00
Daniel
f75fc7d162 Clean up linter errors 2019-11-07 16:13:22 +01:00
Daniel
9741bc412e Update org import paths 2019-07-02 15:12:31 +02:00
Daniel
3990790f17 Working on portmaster restructure 2018-11-29 18:44:31 +01:00
Renamed from firewall/interception/nfqueue.go (Browse further)