Commit Graph

177 Commits

Author SHA1 Message Date
bol-van
59c30d9de8 blockcheck: do not run ipfrag on OpenBSD 2024-03-15 18:01:53 +03:00
bol-van
1030588943 blockcheck: optimize fw scheme, enable udp ipfrag tests 2024-03-15 14:49:59 +03:00
bol-van
b05a18a53c blockcheck: test QUIC 2024-03-14 23:59:58 +03:00
bol-van
c91833f96a blockcheck: use USER_AGENT for http 2024-03-14 18:56:29 +03:00
bol-van
cad3dc383b blockcheck: correct make command line for OpenBSD and MacOS 2024-03-14 18:20:13 +03:00
bol-van
8385394fd6 bsd: use not diverted filter for incoming traffic also 2024-03-14 18:04:37 +03:00
bol-van
57c9742005 blockcheck: pfsense workarounds 2024-03-14 17:51:41 +03:00
bol-van
1ba31e7254 blockcheck: workaround localhost firewalled hosts 2024-03-14 17:22:30 +03:00
bol-van
44f9878655 blockcheck: use socks mode for tpws tests 2024-03-14 16:44:08 +03:00
bol-van
f892b625d2 blockcheck: separate LINKLOCAL and LOCALHOST 2024-03-11 21:36:39 +03:00
bol-van
353d34a425 blockcheck: macos support 2024-03-11 20:49:11 +03:00
bol-van
b54f856c81 blockcheck: partial OpenBSD support 2024-03-11 19:00:22 +03:00
bol-van
d5ccd421df blockcheck: change desync_mark 2024-03-10 21:22:16 +03:00
bol-van
5ef3fb9e97 BSD use SYN,ACK filter to catch autottl 2024-03-09 12:45:17 +03:00
bol-van
9849bfc1ed blockcheck: increase autottl delta range to 1-5 2024-03-05 17:31:43 +03:00
bol-van
913c5de521 blockcheck: minor 2024-03-02 22:31:02 +03:00
bol-van
61f1ce2d74 blockcheck: add multiple autottl delta tests 2024-03-02 22:28:49 +03:00
bol-van
1222eb96f5 blockcheck: add fallback ttl=1 to autottl test 2024-03-02 20:52:15 +03:00
bol-van
8a161f1f49 autottl, datanoack, oob, postnat 2024-03-02 17:53:37 +03:00
bol-van
368b207484 blockcheck: split-pos=1 breaks some dpi's in russia 2024-02-08 16:05:43 +03:00
bol-van
2245377671 blockcheck: change DPI desync mark to avoid interference with zapret table 2023-11-07 12:48:58 +03:00
bol-van
dcd73e3371 blockcheck: detect http code 400 2023-11-02 10:40:54 +03:00
bol-van
81b60aa4ed move fsleep to common 2023-10-31 14:19:41 +03:00
bol-van
2de52fdbf2 blockcheck: speed up nfqws on slow system 2023-10-31 12:21:19 +03:00
bol-van
a6982865aa blockcheck: speed up tpws check 2023-10-31 11:47:35 +03:00
bol-van
7cd3d7895a blockcheck: fix tls1.3 support detection with mbedtls 2023-10-16 18:28:04 +03:00
bol-van
6dc413d0c9 tpws: --tlsrec 2023-10-12 12:35:06 +03:00
bol-van
7f5fe99ad5 tpws --disorder 2023-07-03 15:28:42 +03:00
bol-van
bac22bf9eb blockcheck: run nfqws with tpws uid, not default 7FFFFFFF 2023-04-15 18:48:48 +03:00
bol-van
94739bcd37 blockcheck: avoid extra tests if split2 with split pos worked 2023-04-13 14:01:37 +03:00
bol-van
6ba23f2624 blockcheck: return tls-max for openssl 2023-03-26 12:52:30 +03:00
bol-van
ae1a9da672 blockcheck: remove --tls-max options, increase cryptolib compatibility 2022-12-10 22:48:04 +03:00
bol-van
ddf579d4e0 blockcheck: remote bypass option for nft queue 2022-12-07 21:34:34 +03:00
bol-van
d258b00d4f blockcheck.sh : facebook => torproject 2022-10-20 21:58:22 +03:00
bol-van
d171fed438 blockcheck.sh : do not check ipv6 nfqueue presence. nnmclub => facebook 2022-10-20 16:31:07 +03:00
bol-van
c6663a517e virt checks in both install_easy and blockcheck 2022-04-13 11:47:14 +03:00
bol-van
6be8087c4e blockcheck: remove never executed code 2022-04-06 14:12:50 +03:00
bol-van
5892e31b50 blockcheck: beautify 2022-04-06 10:57:14 +03:00
bol-van
3f9874e316 blockcheck: detect pfsense and disable tpws tests 2022-04-06 10:55:33 +03:00
bol-van
f16e72974c fix elevation issues and absence of /sbin in the PATH 2022-03-27 18:58:47 +03:00
bol-van
e84c08a75d blockcheck: change curl user agent 2022-03-12 14:08:14 +03:00
bol-van
9ff0e67431 blockcheck: GnuTLS allows --tls-max 2022-02-17 18:12:17 +03:00
bol-van
ef7cfd1f60 get rid of ECHON 2022-02-15 20:51:45 +03:00
bol-van
95667733a6 nftables support 2022-02-15 17:16:23 +03:00
bol-van
b7aa3a878c blockcheck: override FWTYPE 2022-02-11 10:24:35 +03:00
bol-van
75a81afa39 blockcheck: nftables support 2022-02-10 22:30:50 +03:00
bol-van
2bdbb4584d blockcheck: unify proc name 2022-02-09 10:43:50 +03:00
bol-van
34d6a928fa blockcheck: force apply tests switch 2022-02-09 10:16:28 +03:00
bol-van
8554a22d4a blockcheck: force apply tests switch 2022-02-09 10:06:01 +03:00
bol-van
d788bd18cc blockcheck: suppress 'which' deprecation 2022-02-06 16:05:01 +03:00
bol-van
9d90f787ad blockcheck: more specific ipv6 ipfrag warnings 2022-02-06 13:30:21 +03:00
bol-van
fc3858209d blockcheck: remove --- 2022-02-06 11:07:25 +03:00
bol-van
16e34775af blockcheck: remove --http1.1 option 2022-02-06 11:05:45 +03:00
bol-van
79ba99be5e blockcheck.sh : suppress ipfw delete error output 2022-02-05 22:27:15 +03:00
bol-van
96bc42f012 blockcheck.sh : disable ipfrag tests if conditions not met 2022-02-05 22:19:17 +03:00
bol-van
bf74a6caf9 blockcheck: fix frag6 notrack 2022-02-05 17:58:56 +03:00
bol-van
190b4e367f nfqws: ipfrag1 desync mode 2022-02-05 15:39:58 +03:00
bol-van
6151afe727 nfqws: destopt desync mode 2022-02-05 13:36:32 +03:00
bol-van
3ee381aff6 blockcheck: use 3003 GID in tpws for android compat 2022-02-04 20:58:25 +03:00
bol-van
2c0c2c987b blockcheck: use 3003 GID in tpws for android compat 2022-02-04 20:54:17 +03:00
bol-van
707e86bd90 nfqws: allow hopbyhop with 2nd phase desync 2022-02-02 15:18:35 +03:00
bol-van
f0a9246fd9 blockcheck: do not scream if TLS1.3 and tls-max both not supported 2022-02-02 10:59:44 +03:00
bol-van
a98bf2fe7c blockcheck: enable tls-max with LibreSSL based curl 2022-02-02 10:41:39 +03:00
bol-van
1b0c9fc296 blockcheck: cosmetics 2022-02-02 09:52:07 +03:00
bol-van
427f16776c nfqws: hop-by-hop ipv6 fooling and desync 2022-02-01 20:35:52 +03:00
bol-van
9a7d1e8e56 blockcheck: print redirection http code 2022-01-25 14:10:33 +03:00
bol-van
c35ea50c24 blockcheck: max-time in tls1.3 online test 2022-01-22 18:16:38 +03:00
bol-van
e2b275c1b3 blockcheck: avoid using \t in sed 2022-01-22 18:08:05 +03:00
bol-van
bb7faca67e blockcheck: kldstat -m 2022-01-12 22:41:25 +03:00
bol-van
93da999735 blockcheck: kldstat without grep 2022-01-12 22:38:31 +03:00
bol-van
41128b46d0 blockcheck: local for variables 2022-01-11 00:46:32 +03:00
bol-van
0cf17165d7 blockcheck: simplify 2022-01-11 00:31:08 +03:00
bol-van
d746805aec blockcheck: revert /proc/net/ip_* checking for iptables targets 2022-01-11 00:28:44 +03:00
bol-van
dc9d596247 blockcheck: grep whole string match 2022-01-10 12:39:12 +03:00
bol-van
4a922ec8a0 blockcheck: detect missing NFQUEUE target 2022-01-10 10:44:00 +03:00
bol-van
85517a3851
blockcheck: FreeBSD enable ipv6 frag test 2022-01-04 13:37:10 +03:00
bol-van
de3390ca75
blockcheck: ipfrag pain healing 2022-01-04 12:59:12 +03:00
bol-van
2f7155682d blockcheck: NOTRACK for ipv6 ipfrag tests 2022-01-04 00:11:23 +03:00
bol-van
da372e19a0 blockcheck: NOTRACK for ipv6 ipfrag tests 2022-01-04 00:11:10 +03:00
bol-van
fe379810b5 blockcheck: ipfrag2 test 2022-01-03 22:17:39 +03:00
bol-van
1d69f741ad blockcheck: use HEAD instead of GET in TLS tests 2021-12-25 14:03:03 +03:00
bol-van
709b93a008 blockcheck: translate more SSL error codes 2021-12-25 12:41:57 +03:00
bol-van
b9e46f4b2d blockcheck: summary report 2021-12-25 12:22:47 +03:00
bol-van
9f5b44a021 blockcheck: report strategy function 2021-12-24 19:24:01 +03:00
bol-van
845fdeba63 blockcheck: report domain/ipversion in test result 2021-12-24 19:13:23 +03:00
bol-van
102bf38bc4 blockcheck: remove temp header file if aborted 2021-12-24 17:32:35 +03:00
bol-van
af8836d86e blockcheck: bulk domain/ip_version tests 2021-12-24 17:26:59 +03:00
bol-van
f7274a57dc blockcheck: move comments 2021-12-24 13:21:08 +03:00
bol-van
006fd8d760 blockcheck: graceful quit when piping output 2021-12-24 13:19:52 +03:00
bol-van
f6f4abb04c blockcheck: dnscheck secondary yandex DNS (for TM) 2021-12-24 12:25:44 +03:00
bol-van
2f5c6b7e82 more compatible require_root 2021-12-23 21:03:52 +03:00
bol-van
a8062252f4 blockcheck: optimize code 2021-12-23 19:13:49 +03:00
bol-van
5176ba1933 blockcheck: optimize code 2021-12-23 19:12:09 +03:00
bol-van
b10a0a6d88 blockcheck.sh : move md5sig test to the end 2021-12-22 12:55:05 +03:00
bol-van
ba601b08ce blockcheck: multiple test attempts 2021-12-22 12:31:45 +03:00
root
f2d083499e nfqws: change default split-pos from 3 to 2 2021-12-22 11:21:47 +03:00
bol-van
04f9959158 blockcheck: ipfw from any => from me 2021-12-13 22:41:12 +03:00
bol-van
089dccf278 blockcheck: wssize least priority 2021-12-13 17:01:50 +03:00
bol-van
e2d5d5c18b blockcheck: more configurable parameters 2021-12-13 10:38:00 +03:00
bol-van
21e864132a blockcheck: check ipfw disabled 2021-12-12 23:34:04 +03:00