bol-van
|
4f09a08260
|
tpws: oob and disorder protocol filters
|
2024-03-26 11:38:31 +03:00 |
|
bol-van
|
14428cd545
|
tpws,nfqws: autohostlist reread on modify
|
2024-03-23 22:57:05 +03:00 |
|
bol-van
|
b6ec750879
|
tpws: do not kill remote orphan immediately if it has data to send
|
2024-03-23 13:52:50 +03:00 |
|
bol-van
|
6c018b38c6
|
tpws: fix crash when tampering is applied without remote end
|
2024-03-23 11:35:23 +03:00 |
|
bol-van
|
77520d7f8b
|
tpws: fix crash when tampering is applied without remote end
|
2024-03-23 11:19:52 +03:00 |
|
bol-van
|
d82c298114
|
tpws: fix crash when tampering is applied without remote end
|
2024-03-23 10:54:53 +03:00 |
|
bol-van
|
f8e6302844
|
nfqws: do not perform syndata desync if TCP fast open
|
2024-03-19 21:58:53 +03:00 |
|
bol-van
|
148108785c
|
syndata desync mode
|
2024-03-19 13:47:36 +03:00 |
|
bol-van
|
f4180847f4
|
tpws: improve debug printing
|
2024-03-10 09:43:28 +03:00 |
|
bol-van
|
3f9f1c36b8
|
tpws: support 'n' prefix in tamper-start and tamper-cutoff
|
2024-03-09 14:24:30 +03:00 |
|
bol-van
|
48850b5f4e
|
dvtws fix socket buffers
|
2024-03-08 14:01:24 +03:00 |
|
bol-van
|
eaaa1a326c
|
freebsd dvtws respect freebsd14+ PF_DIVERT
|
2024-03-08 11:09:14 +03:00 |
|
bol-van
|
663a2bb2a4
|
tpws: specify oob byte . tamper pos range limiter
|
2024-03-05 14:59:44 +03:00 |
|
bol-van
|
7ba1c28f94
|
auto ttl alog minor fix
|
2024-03-02 21:22:35 +03:00 |
|
bol-van
|
8a161f1f49
|
autottl, datanoack, oob, postnat
|
2024-03-02 17:53:37 +03:00 |
|
bol-van
|
8d56d02d1d
|
nfqws: change default fake from w3.org to iana.org (NOT cloudflare)
|
2024-02-27 13:58:36 +03:00 |
|
bol-van
|
a33848b212
|
tls: respect tls record length
|
2023-12-19 13:40:28 +03:00 |
|
bol-van
|
62562bf727
|
freebsd bins clang 16 compiler
|
2023-11-19 16:15:53 +03:00 |
|
bol-van
|
a9a4cd5cb4
|
nfqws: tls client hello reassemble
|
2023-11-15 19:36:34 +03:00 |
|
bol-van
|
3559e1f2b8
|
autohostlist debug
|
2023-11-09 12:08:09 +03:00 |
|
bol-van
|
47cabddbd4
|
tpws: fix splice
|
2023-10-27 10:04:08 +03:00 |
|
bol-van
|
7ef7cbe554
|
recheck domain before adding to autohostlist
|
2023-10-26 16:27:52 +03:00 |
|
bol-van
|
ac574ce2ce
|
autohostlist mode
|
2023-10-26 15:12:32 +03:00 |
|
bol-van
|
c4729c3006
|
nfqws,tpws: fix tls protocol bounds check
|
2023-10-12 14:46:32 +03:00 |
|
bol-van
|
508d11811d
|
tpws: tlsrec preserve trailing bytes after ClientHello
|
2023-10-12 13:57:34 +03:00 |
|
bol-van
|
6dc413d0c9
|
tpws: --tlsrec
|
2023-10-12 12:35:06 +03:00 |
|
bol-van
|
274bb4b6da
|
build mac64 universal x64+arm64 binaries
|
2023-10-06 11:21:20 +03:00 |
|
bol-van
|
67d2ec106b
|
arm: compile binaries for older armv6 instruction set
|
2023-10-05 21:29:29 +03:00 |
|
bol-van
|
57486daa25
|
dvtws: do not fill excessive memory buffer
|
2023-09-21 14:16:28 +03:00 |
|
bol-van
|
905be06154
|
dvtws: FreeBSD 14 beta2 compat
|
2023-09-21 13:01:09 +03:00 |
|
bol-van
|
394c590a25
|
nfqws: tamper dht lex order 00 instead of aa
|
2023-09-07 21:02:29 +03:00 |
|
bol-van
|
15a31d53ed
|
nfqws: tamper dht lex order aa instead of zz
|
2023-09-07 20:50:03 +03:00 |
|
bol-van
|
c91542d516
|
nfqws: DHT and tamper
|
2023-09-07 19:03:37 +03:00 |
|
bol-van
|
91ac09a8bd
|
nfqws: udplen-pattern, hex string support
|
2023-09-07 13:41:25 +03:00 |
|
bol-van
|
bc6b683009
|
nfqws: wireguard protocol recognition
|
2023-08-12 09:56:19 +03:00 |
|
bol-van
|
d5b104d781
|
tpws: use accept4 instead of accept
|
2023-07-04 11:26:35 +03:00 |
|
bol-van
|
7f5fe99ad5
|
tpws --disorder
|
2023-07-03 15:28:42 +03:00 |
|
bol-van
|
657a08cafa
|
mdig: resolved and failed domain logs
|
2023-01-05 17:32:06 +03:00 |
|
bol-van
|
109e3374d4
|
seccomp: more syscalls filter
|
2022-12-07 21:00:22 +03:00 |
|
bol-van
|
2dc13abb5d
|
seccomp: more filtered syscalls
|
2022-12-05 14:38:39 +03:00 |
|
bol-van
|
87a77c5932
|
seccomp: fix jump offset
|
2022-11-23 18:56:10 +03:00 |
|
bol-van
|
619222b86e
|
seecomp : fix x86 __X32_SYSCALL_BIT
|
2022-11-23 12:11:37 +03:00 |
|
bol-van
|
80a6ba9a8a
|
seccomp optimize
|
2022-11-23 11:58:06 +03:00 |
|
bol-van
|
7af2d43d5f
|
tpws,nfqws: seccomp hardening
|
2022-11-22 17:49:53 +03:00 |
|
bol-van
|
b9840364a6
|
binaries: upx 4.0
|
2022-11-02 00:01:11 +03:00 |
|
bol-van
|
04f8f7774d
|
nfqws: do not complain if IPV6_FREEBIND not available
|
2022-07-29 08:20:57 +03:00 |
|
bol-van
|
895af0f629
|
nfqws: allow to decrease udp length
|
2022-07-27 12:00:36 +03:00 |
|
bol-van
|
403dc1a204
|
nfqws,tpws: multiple hostlist support, exclude hostlist support
|
2022-07-26 19:15:28 +03:00 |
|
bol-van
|
c2754cc347
|
ip2net: fix comparision
|
2022-06-17 10:39:09 +03:00 |
|
bol-van
|
76ae74eedd
|
ip2net: some more optimize ipv6 sort
|
2022-06-17 10:35:20 +03:00 |
|
bol-van
|
732cb7f2d6
|
ip2net: some more optimize ipv6 sort
|
2022-06-17 10:19:45 +03:00 |
|
bol-van
|
9cf2e3f1de
|
ip2net: optimize ipv6 sort for all endianness
|
2022-06-16 19:45:01 +03:00 |
|
bol-van
|
9529953594
|
ip2net: improve performance on big endian systems
|
2022-06-16 15:43:20 +03:00 |
|
bol-van
|
3842cbbca5
|
ip2net: i hate strict aliasing
|
2022-06-13 17:51:07 +03:00 |
|
bol-van
|
e2418531af
|
nfqws: default quic fake to bypass russian TSPU
|
2022-05-30 14:48:29 +03:00 |
|
bol-van
|
bcb7abc830
|
complex TSPU hack is overkill
|
2022-05-30 09:31:57 +03:00 |
|
bol-van
|
01ec94806d
|
nfqws: fix running on ipv6 disabled system
|
2022-05-20 11:21:38 +03:00 |
|
bol-van
|
877adbd6f6
|
nfqws: preserve fwmark. bind-fix
|
2022-05-15 15:54:35 +03:00 |
|
bol-van
|
7f7badb2af
|
update bins
|
2022-05-03 12:32:14 +03:00 |
|
bol-van
|
a15de18b33
|
tpws: deny connections to 0.0.0.0
|
2022-04-21 13:41:43 +03:00 |
|
bol-van
|
dd1ba8218d
|
tpws: check for sock4a protocol
|
2022-04-21 09:42:06 +03:00 |
|
bol-van
|
ffda684a43
|
nfqws: fakeknown, udplen desync modes
|
2022-04-12 15:52:06 +03:00 |
|
bol-van
|
2eec88c2bf
|
nfqws: verify quic auth tag. improve initial packet detection
|
2022-03-26 21:00:58 +03:00 |
|
bol-van
|
3753349058
|
nfqws: quic protocol code optimizations
|
2022-03-26 10:08:10 +03:00 |
|
bol-van
|
f7c0c35670
|
nfqws: handle QUIC decrypt failed case during desync
|
2022-03-25 22:34:37 +03:00 |
|
bol-van
|
64406960aa
|
nfqws: prevent out-of-band access in IsQUICCryptoHello
|
2022-03-25 20:08:05 +03:00 |
|
bol-van
|
dce5b4c6f0
|
nfqws: QUIC initial dissection support
|
2022-03-25 16:59:58 +03:00 |
|
bol-van
|
49771f160d
|
nfqws: QUIC protocol recognition
|
2022-03-20 20:50:16 +03:00 |
|
bol-van
|
0a5ffc1a54
|
nfqws: QUIC protocol recognition
|
2022-03-20 20:46:39 +03:00 |
|
bol-van
|
190b4e367f
|
nfqws: ipfrag1 desync mode
|
2022-02-05 15:39:58 +03:00 |
|
bol-van
|
6151afe727
|
nfqws: destopt desync mode
|
2022-02-05 13:36:32 +03:00 |
|
bol-van
|
8becc2ce18
|
binaries: toolchain update gcc 11.2
|
2022-02-04 14:05:28 +03:00 |
|
bol-van
|
81b25bfc85
|
Revert "binaries: update toolchain to gcc 11.2"
This reverts commit 7429bd3b98 .
|
2022-02-04 13:44:23 +03:00 |
|
bol-van
|
7429bd3b98
|
binaries: update toolchain to gcc 11.2
|
2022-02-04 13:37:03 +03:00 |
|
bol-van
|
707e86bd90
|
nfqws: allow hopbyhop with 2nd phase desync
|
2022-02-02 15:18:35 +03:00 |
|
bol-van
|
a66aa7777a
|
nfqws: do not drop packet in case of hopbyhop desync and ipv4
|
2022-02-02 09:39:48 +03:00 |
|
bol-van
|
87970b984b
|
nfqws: hop-by-hop ipv6 fooling and desync
|
2022-02-01 20:38:00 +03:00 |
|
bol-van
|
cc5f0af5a8
|
tpws: always compile PF support, use --enable-pf flag in FreeBSD
|
2022-01-23 23:11:11 +03:00 |
|
bol-van
|
d619f1b99d
|
tpws: fc00::/7 private range. PF convert ipv4 to ipv6 mapped address
|
2022-01-23 17:36:57 +03:00 |
|
bol-van
|
013f3996df
|
tpws: fc00::/7 private range. PF convert ipv4 to ipv6 mapped address
|
2022-01-23 17:33:37 +03:00 |
|
bol-van
|
17d161267e
|
tpws_pf chmod
|
2022-01-23 15:10:28 +03:00 |
|
bol-van
|
3d0feaf738
|
tpws: FreeBSD pf-enabled version
|
2022-01-23 14:45:12 +03:00 |
|
bol-van
|
8b0bb3c7d1
|
FreeBSD: x64 bins
|
2022-01-23 11:37:40 +03:00 |
|
bol-van
|
6b39411454
|
nfqws: ipv6 fragment at transport header
|
2022-01-05 15:34:57 +03:00 |
|
bol-van
|
1221626b1d
|
nfqws: IP_NODEFRAG not working for ipv6
|
2022-01-03 22:16:11 +03:00 |
|
bol-van
|
94433e3279
|
nfqws: set IP_NODEFRAG sockopt
|
2022-01-03 21:14:55 +03:00 |
|
bol-van
|
690d458ec7
|
nfqws: ipfrag
|
2022-01-03 12:38:18 +03:00 |
|
bol-van
|
65830eb665
|
nfqws: udp protocol desync
|
2022-01-01 20:22:04 +03:00 |
|
bol-van
|
6af82ec97d
|
nfqws: change default badack increment -65000=>-66000
|
2021-12-28 12:50:04 +03:00 |
|
bol-van
|
ff24920999
|
update bins
|
2021-12-27 16:51:42 +03:00 |
|
bol-van
|
606063dd48
|
nfqws: --dpi-desync-fake-unknown
|
2021-12-26 20:43:16 +03:00 |
|
bol-van
|
d1618faf40
|
nfqws: tunable badseq/badack increment, changed defaults
|
2021-12-26 17:11:21 +03:00 |
|
root
|
f2d083499e
|
nfqws: change default split-pos from 3 to 2
|
2021-12-22 11:21:47 +03:00 |
|
bol-van
|
545c9a4730
|
nfqws: separate ipv4/6 ttl setting
|
2021-12-10 22:08:52 +03:00 |
|
bol-van
|
03886dda88
|
bin cosmetics
|
2021-11-12 12:53:01 +03:00 |
|
bol-van
|
cc85c1b489
|
nfqws, tpws : fix tls1.1, tls1.2, tls1.3 header recognition
|
2021-10-12 23:26:52 +03:00 |
|
bol-van
|
45f6838059
|
nfqws, tpws : fix tls1.1, tls1.2, tls1.3 header recognition
|
2021-10-12 23:24:38 +03:00 |
|
bol-van
|
6fc9031944
|
ip2net : precompute ipv6 masks
|
2021-09-18 21:26:50 +03:00 |
|
bol-van
|
0b8072840b
|
ip2net : precompute ipv6 masks
|
2021-09-18 21:22:29 +03:00 |
|
bol-van
|
9402cd2cf0
|
ip2net : zero less significant bits in ip4/ip6 addresses, workaround GCC bug
|
2021-09-12 13:58:13 +03:00 |
|