Commit graph

285 commits

Author SHA1 Message Date
Daniel
f565dca480 Improve logging 2022-10-10 13:40:06 +02:00
Daniel
e00131e937 Stop tunnels if they are not needed anymore due to verdict change 2022-10-10 13:40:06 +02:00
Daniel
f63df67d23 Improve verdict handling and switch to immediate re-evaluation 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
0085d6a7ea add defer to unlock 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
ab635bd0f0 better wording for log 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
5ed133d578 Small fixes 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
ecce16ee78 Refactoring 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
ddfa3722be Fixes 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
b4e2687884 fix linter errors 2022-10-10 13:38:56 +02:00
Vladimir Stoilov
4bd8412f71 Windows implementation 2022-10-10 13:38:56 +02:00
Vladimir Stoilov
ad9000b91c Fix merge error 2022-10-10 13:38:56 +02:00
Vladimir Stoilov
6fdc6c0a4f Refactoring 2022-10-10 13:38:26 +02:00
Vladimir Stoilov
edcb93bf5c Tunnel flag bugfix and refactoring 2022-10-10 13:37:08 +02:00
Vladimir Stoilov
fdc8ef5698 issue new verdict on configuration change 2022-10-10 13:37:08 +02:00
Vladimir Stoilov
0423dfbbbf Reset connection PoC 2022-10-10 13:34:00 +02:00
Daniel
59392e41c6 Move all filter/interception config to interception module 2022-09-27 14:52:09 +02:00
Patrick Pacher
d4f316e65a
incoming: force block by default, apply default action and allow LAN per rules 2022-09-20 09:16:23 +02:00
Daniel
8cf882f4d4 Update Go, deps and linter 2022-08-30 16:13:26 +02:00
Daniel
092b1cd8a0 Move resolving unbreak filter list IDs to filterlists module 2022-08-30 13:54:34 +02:00
Daniel
770ce61b84 Set tunneling options for (not) using community nodes 2022-08-30 13:27:18 +02:00
Daniel
57c23c7e07 Use correct ICMP message for blocking connections in iptables 2022-08-12 13:26:11 +02:00
Daniel
5c6fc6ee9c Improve custom filter list config key 2022-08-02 16:35:33 +02:00
Daniel
0b81fb5516 Mitigate double read locks on the layered profile 2022-08-02 13:59:13 +02:00
Daniel
549fa1926f Move checking custom filter list behind main filter lists to get entity data 2022-08-01 14:25:01 +02:00
Vladimir Stoilov
d3def3ec94 better user messages, linter errors, refactoring 2022-08-01 14:25:01 +02:00
Vladimir Stoilov
93367b64df Bug fixes and performence fixes:
Synchronization bug fixed
map reseting performence improvment
Added more notificationa and better wording
better scheduling of file parsing task
2022-08-01 14:25:01 +02:00
Vladimir Stoilov
62c100714a Custom filter list:
subdomain and cname cheks
Automatic realod when settings is changed
periodicly check for file changes
2022-08-01 14:25:01 +02:00
Vladimir Stoilov
35697989e5 Refactoring 2022-08-01 14:25:01 +02:00
Vladimir Stoilov
420da81b33 Custom filter list proof of concept 2022-08-01 14:25:01 +02:00
Daniel
65974e989d Stop using deprecated function 2022-06-22 10:41:35 +02:00
Daniel
0dce13d18f Fix detection of incoming localhost packets on Linux 2022-06-22 10:41:16 +02:00
Daniel
c442a7e51c Deactivate IPv6 integrations when no IPv6 stack is detected 2022-06-09 13:58:27 +02:00
Daniel
787f9e7dec Add support for upcoming UNBREAK filter list 2022-06-01 13:28:10 +02:00
Daniel
9a89f65027 Improve support for DNS-SD and fall back to cached data for non-ICANN queries 2022-05-24 11:25:34 +02:00
Daniel
49e79fe3fd Detect responses to multi/broadcast queries 2022-05-24 11:20:01 +02:00
Daniel
e178b732bc Calm down and relax dns query check 2022-05-20 16:37:19 +02:00
Daniel
932f6002b4 Use alternative approach to fix nfqueue closing process
This commit reverts commit ec6a3f03e8.
2022-05-18 09:34:27 +02:00
Daniel
ec6a3f03e8 Fix shutting down nfq interception with go-nfqueue v1.3.1 2022-05-11 13:19:31 +02:00
Daniel
9a39caf22b Resolve to real file paths before checking path based API access 2022-04-26 15:02:05 +02:00
Daniel
42eb3a1d0e Use more verbose names for iptables chains 2022-04-26 14:36:22 +02:00
Daniel
f5afe8b5df Block DNS requests if bypass prevention is active 2022-04-15 13:06:13 +02:00
Daniel
29bfa9fd91 Add config option to disable dns query interception 2022-04-15 13:05:24 +02:00
Daniel
88afd75768 Fix metrics for connections going through SPN 2022-03-22 15:29:30 +01:00
Daniel
d970b163a5 Exempt IPv6 LAN (broadcast domain only) from SPN 2022-03-02 14:33:25 +01:00
Daniel
fd24a5c69c Fix linter errors 2022-03-02 10:02:44 +01:00
Daniel
fa93e93d15 Improve dns / exit policy and routing alg interaction 2022-03-01 16:35:59 +01:00
Daniel
7d315e92be Integrate SPN route manipulation settings 2022-03-01 16:35:59 +01:00
Daniel
1346123d6f Fix bypass detection to correctly attribute encrypted DNS bypassing 2022-02-25 15:31:10 +01:00
Daniel
888b33918a Fix deleting profiles 2022-02-15 14:35:28 +01:00
Daniel
266c950581 Fix go build flags 2022-02-14 16:03:10 +01:00