Commit graph

70 commits

Author SHA1 Message Date
Daniel
960101d3a9 Add custom routing for DNS server connections 2021-10-12 16:18:36 +02:00
Daniel
9c72fcfa40 Improve documentation 2021-08-23 23:02:27 +02:00
Daniel
7b055a7c0a Implement review suggestions 2021-08-23 16:34:21 +02:00
Daniel
f34dccb8f3 Improve endpoint/rule lists and filtering of DNS requests 2021-08-19 23:29:29 +02:00
Patrick Pacher
88eb252ecb
Prepare intel entity data earlier in the decision process 2021-08-18 16:57:45 +02:00
Daniel
b314b46fb8 Improve logging 2021-08-18 09:34:00 +02:00
Patrick Pacher
026dc274f4 Fix bypass prevention not working as expected due to filterlists not matched for the entity 2021-08-17 14:25:55 +02:00
Daniel
6141066252 Improve system resolver profile 2021-06-01 12:53:57 +02:00
Daniel
6f9d17bba2 Improve decision tree, move resolver scope checking behind endpoint list rules 2021-04-16 21:36:16 +02:00
Daniel
a884a30660 Always update the revision counter when deciding on a connection 2021-04-15 23:16:35 +02:00
Daniel
a305c4e81c
Merge pull request #281 from safing/fix/allow-block-naming
Unify allow/block naming in messages
2021-03-30 14:26:36 +02:00
Daniel
4398e96af5 Fix check if filter/removeOutOfScopeDNS should applied to a connection 2021-03-30 12:00:58 +02:00
Daniel
4b2db03957 Unify allow/block naming in messages 2021-03-29 17:36:13 +02:00
Daniel
01e7160bfe Add special handling to dns queries from the system resolver 2021-03-20 23:12:46 +01:00
Daniel
df7afe985e Add fast network table lookup 2021-02-23 13:10:08 +01:00
Daniel
12f3c0ea8d Add support for network service 2021-01-19 15:43:22 +01:00
Daniel
8e34be70bb Remove concept of primary/virtual processes
Simplify single in flight for getting a process
2020-12-04 17:01:10 +01:00
Daniel
d5e252051a Move connectivity domain decider 2020-11-04 15:52:22 +01:00
Daniel
fa3f873c31 Implement review feedback 2020-10-30 11:54:00 +01:00
Daniel
c09d32cf08 Add option key responsible for the verdict
Also, expose the RevisionCounter
2020-10-29 16:24:17 +01:00
Daniel
cfafbfca4e Improve trace logging 2020-10-15 11:48:27 +02:00
Daniel
9d35ff3192 Fix and improve network listener system integration and check
Also, improve logging.
2020-08-12 14:33:09 +02:00
Patrick Pacher
c229031521
Retext block reason in domain heuristics 2020-08-11 15:45:32 +02:00
Patrick Pacher
3b896ee892
Move LMS scoring under new Domain Heuristics 2020-08-11 15:37:24 +02:00
Patrick Pacher
85e4beafa1
Move LMS scoring from nameserver to firewall 2020-08-11 10:28:05 +02:00
Daniel
811516eec8 Update captive portal detection to work without server 2020-07-21 14:56:06 +02:00
Daniel
68c2d23c1b Fix handling of connectivity / captive portal domains
Also, improve handling of queries during being captive.
2020-07-17 16:09:46 +02:00
Daniel
e369a9484a Improve captive portal handling 2020-07-15 08:53:55 +02:00
Daniel
46411951f6 Further improve logging and messages 2020-05-20 16:43:54 +02:00
Daniel
4671535691 Improve logging 2020-05-20 15:35:22 +02:00
Daniel
7649859ba6 Switch connection state lookups to use the packet.Info struct
Also, rename the Direction attribute on packet.Info to Inbound
2020-05-18 17:08:32 +02:00
Daniel
635d5770d1 Change BlockInbound to only affect LAN and Internet 2020-05-15 17:18:42 +02:00
Daniel
55b0ae8944 Revamp process attribution of network connections 2020-05-15 17:15:22 +02:00
Patrick Pacher
972f8fcfc3
Merge pull request #44 from safing/feature/pre-alpha-finalizing
Pre alpha finalizing
2020-04-30 16:42:09 +02:00
Patrick Pacher
2dda3813fa
Let decision reasons decide on the DNS reply 2020-04-30 14:23:06 +02:00
Daniel
20e836b8ff Fix BlockP2P to only bock connections to the Internet 2020-04-30 14:15:10 +02:00
Patrick Pacher
f2e41a0d32
Refactoring of FilterDNSResponse and DecideOnConnection 2020-04-21 10:17:16 +02:00
Patrick Pacher
8c5526a69b
Add support for verdict and decision reason context 2020-04-21 10:16:32 +02:00
Patrick Pacher
1f90c05654
Merge pull request #39 from safing/feature/unidentified-process-and-profile
Add support for unidentified processes and profiles
2020-04-21 10:15:11 +02:00
Daniel
a33808685c Implement review suggestions 2020-04-20 13:57:07 +02:00
Daniel
033dceab5b Add support for unidentified/system processes/profiles 2020-04-17 21:52:06 +02:00
Patrick Pacher
ea3e327c27
Implement review changes 2020-04-17 11:52:53 +02:00
Patrick Pacher
943246c747
Add support for firefox canary domain for disabling DoH 2020-04-17 11:01:26 +02:00
Patrick Pacher
86a449a619
Add support to filter sub-domains as well 2020-04-15 09:59:59 +02:00
Patrick Pacher
56a1751e62
Fix golangci-lint warnings 2020-04-15 08:21:32 +02:00
Patrick Pacher
ef770638f8
Add VerdictFailed and update nameserver 2020-04-14 17:34:54 +02:00
ppacher
f96f8d8d6e
Added filterlist integration 2020-04-14 08:52:15 +02:00
Daniel
3f7c467efc Implement review, use local var for pkt.Info 2020-04-08 15:19:00 +02:00
Daniel
249261a3da Implement review suggestions 2020-04-08 14:07:29 +02:00
Daniel
38f57a8954 Rework Communication+Link to Connection 2020-04-07 17:30:33 +02:00