Commit Graph

164 Commits

Author SHA1 Message Date
bol-van
4f09a08260 tpws: oob and disorder protocol filters 2024-03-26 11:38:31 +03:00
bol-van
14428cd545 tpws,nfqws: autohostlist reread on modify 2024-03-23 22:57:05 +03:00
bol-van
b6ec750879 tpws: do not kill remote orphan immediately if it has data to send 2024-03-23 13:52:50 +03:00
bol-van
6c018b38c6 tpws: fix crash when tampering is applied without remote end 2024-03-23 11:35:23 +03:00
bol-van
77520d7f8b tpws: fix crash when tampering is applied without remote end 2024-03-23 11:19:52 +03:00
bol-van
d82c298114 tpws: fix crash when tampering is applied without remote end 2024-03-23 10:54:53 +03:00
bol-van
f8e6302844 nfqws: do not perform syndata desync if TCP fast open 2024-03-19 21:58:53 +03:00
bol-van
148108785c syndata desync mode 2024-03-19 13:47:36 +03:00
bol-van
f4180847f4 tpws: improve debug printing 2024-03-10 09:43:28 +03:00
bol-van
3f9f1c36b8 tpws: support 'n' prefix in tamper-start and tamper-cutoff 2024-03-09 14:24:30 +03:00
bol-van
48850b5f4e dvtws fix socket buffers 2024-03-08 14:01:24 +03:00
bol-van
eaaa1a326c freebsd dvtws respect freebsd14+ PF_DIVERT 2024-03-08 11:09:14 +03:00
bol-van
663a2bb2a4 tpws: specify oob byte . tamper pos range limiter 2024-03-05 14:59:44 +03:00
bol-van
7ba1c28f94 auto ttl alog minor fix 2024-03-02 21:22:35 +03:00
bol-van
8a161f1f49 autottl, datanoack, oob, postnat 2024-03-02 17:53:37 +03:00
bol-van
8d56d02d1d nfqws: change default fake from w3.org to iana.org (NOT cloudflare) 2024-02-27 13:58:36 +03:00
bol-van
a33848b212 tls: respect tls record length 2023-12-19 13:40:28 +03:00
bol-van
62562bf727 freebsd bins clang 16 compiler 2023-11-19 16:15:53 +03:00
bol-van
a9a4cd5cb4 nfqws: tls client hello reassemble 2023-11-15 19:36:34 +03:00
bol-van
3559e1f2b8 autohostlist debug 2023-11-09 12:08:09 +03:00
bol-van
47cabddbd4 tpws: fix splice 2023-10-27 10:04:08 +03:00
bol-van
7ef7cbe554 recheck domain before adding to autohostlist 2023-10-26 16:27:52 +03:00
bol-van
ac574ce2ce autohostlist mode 2023-10-26 15:12:32 +03:00
bol-van
c4729c3006 nfqws,tpws: fix tls protocol bounds check 2023-10-12 14:46:32 +03:00
bol-van
508d11811d tpws: tlsrec preserve trailing bytes after ClientHello 2023-10-12 13:57:34 +03:00
bol-van
6dc413d0c9 tpws: --tlsrec 2023-10-12 12:35:06 +03:00
bol-van
274bb4b6da build mac64 universal x64+arm64 binaries 2023-10-06 11:21:20 +03:00
bol-van
67d2ec106b arm: compile binaries for older armv6 instruction set 2023-10-05 21:29:29 +03:00
bol-van
57486daa25 dvtws: do not fill excessive memory buffer 2023-09-21 14:16:28 +03:00
bol-van
905be06154 dvtws: FreeBSD 14 beta2 compat 2023-09-21 13:01:09 +03:00
bol-van
394c590a25 nfqws: tamper dht lex order 00 instead of aa 2023-09-07 21:02:29 +03:00
bol-van
15a31d53ed nfqws: tamper dht lex order aa instead of zz 2023-09-07 20:50:03 +03:00
bol-van
c91542d516 nfqws: DHT and tamper 2023-09-07 19:03:37 +03:00
bol-van
91ac09a8bd nfqws: udplen-pattern, hex string support 2023-09-07 13:41:25 +03:00
bol-van
bc6b683009 nfqws: wireguard protocol recognition 2023-08-12 09:56:19 +03:00
bol-van
d5b104d781 tpws: use accept4 instead of accept 2023-07-04 11:26:35 +03:00
bol-van
7f5fe99ad5 tpws --disorder 2023-07-03 15:28:42 +03:00
bol-van
657a08cafa mdig: resolved and failed domain logs 2023-01-05 17:32:06 +03:00
bol-van
109e3374d4 seccomp: more syscalls filter 2022-12-07 21:00:22 +03:00
bol-van
2dc13abb5d seccomp: more filtered syscalls 2022-12-05 14:38:39 +03:00
bol-van
87a77c5932 seccomp: fix jump offset 2022-11-23 18:56:10 +03:00
bol-van
619222b86e seecomp : fix x86 __X32_SYSCALL_BIT 2022-11-23 12:11:37 +03:00
bol-van
80a6ba9a8a seccomp optimize 2022-11-23 11:58:06 +03:00
bol-van
7af2d43d5f tpws,nfqws: seccomp hardening 2022-11-22 17:49:53 +03:00
bol-van
b9840364a6 binaries: upx 4.0 2022-11-02 00:01:11 +03:00
bol-van
04f8f7774d nfqws: do not complain if IPV6_FREEBIND not available 2022-07-29 08:20:57 +03:00
bol-van
895af0f629 nfqws: allow to decrease udp length 2022-07-27 12:00:36 +03:00
bol-van
403dc1a204 nfqws,tpws: multiple hostlist support, exclude hostlist support 2022-07-26 19:15:28 +03:00
bol-van
c2754cc347 ip2net: fix comparision 2022-06-17 10:39:09 +03:00
bol-van
76ae74eedd ip2net: some more optimize ipv6 sort 2022-06-17 10:35:20 +03:00
bol-van
732cb7f2d6 ip2net: some more optimize ipv6 sort 2022-06-17 10:19:45 +03:00
bol-van
9cf2e3f1de ip2net: optimize ipv6 sort for all endianness 2022-06-16 19:45:01 +03:00
bol-van
9529953594 ip2net: improve performance on big endian systems 2022-06-16 15:43:20 +03:00
bol-van
3842cbbca5 ip2net: i hate strict aliasing 2022-06-13 17:51:07 +03:00
bol-van
e2418531af nfqws: default quic fake to bypass russian TSPU 2022-05-30 14:48:29 +03:00
bol-van
bcb7abc830 complex TSPU hack is overkill 2022-05-30 09:31:57 +03:00
bol-van
01ec94806d nfqws: fix running on ipv6 disabled system 2022-05-20 11:21:38 +03:00
bol-van
877adbd6f6 nfqws: preserve fwmark. bind-fix 2022-05-15 15:54:35 +03:00
bol-van
7f7badb2af update bins 2022-05-03 12:32:14 +03:00
bol-van
a15de18b33 tpws: deny connections to 0.0.0.0 2022-04-21 13:41:43 +03:00
bol-van
dd1ba8218d tpws: check for sock4a protocol 2022-04-21 09:42:06 +03:00
bol-van
ffda684a43 nfqws: fakeknown, udplen desync modes 2022-04-12 15:52:06 +03:00
bol-van
2eec88c2bf nfqws: verify quic auth tag. improve initial packet detection 2022-03-26 21:00:58 +03:00
bol-van
3753349058 nfqws: quic protocol code optimizations 2022-03-26 10:08:10 +03:00
bol-van
f7c0c35670 nfqws: handle QUIC decrypt failed case during desync 2022-03-25 22:34:37 +03:00
bol-van
64406960aa nfqws: prevent out-of-band access in IsQUICCryptoHello 2022-03-25 20:08:05 +03:00
bol-van
dce5b4c6f0 nfqws: QUIC initial dissection support 2022-03-25 16:59:58 +03:00
bol-van
49771f160d nfqws: QUIC protocol recognition 2022-03-20 20:50:16 +03:00
bol-van
0a5ffc1a54 nfqws: QUIC protocol recognition 2022-03-20 20:46:39 +03:00
bol-van
190b4e367f nfqws: ipfrag1 desync mode 2022-02-05 15:39:58 +03:00
bol-van
6151afe727 nfqws: destopt desync mode 2022-02-05 13:36:32 +03:00
bol-van
8becc2ce18 binaries: toolchain update gcc 11.2 2022-02-04 14:05:28 +03:00
bol-van
81b25bfc85 Revert "binaries: update toolchain to gcc 11.2"
This reverts commit 7429bd3b98.
2022-02-04 13:44:23 +03:00
bol-van
7429bd3b98 binaries: update toolchain to gcc 11.2 2022-02-04 13:37:03 +03:00
bol-van
707e86bd90 nfqws: allow hopbyhop with 2nd phase desync 2022-02-02 15:18:35 +03:00
bol-van
a66aa7777a nfqws: do not drop packet in case of hopbyhop desync and ipv4 2022-02-02 09:39:48 +03:00
bol-van
87970b984b nfqws: hop-by-hop ipv6 fooling and desync 2022-02-01 20:38:00 +03:00
bol-van
cc5f0af5a8 tpws: always compile PF support, use --enable-pf flag in FreeBSD 2022-01-23 23:11:11 +03:00
bol-van
d619f1b99d tpws: fc00::/7 private range. PF convert ipv4 to ipv6 mapped address 2022-01-23 17:36:57 +03:00
bol-van
013f3996df tpws: fc00::/7 private range. PF convert ipv4 to ipv6 mapped address 2022-01-23 17:33:37 +03:00
bol-van
17d161267e tpws_pf chmod 2022-01-23 15:10:28 +03:00
bol-van
3d0feaf738 tpws: FreeBSD pf-enabled version 2022-01-23 14:45:12 +03:00
bol-van
8b0bb3c7d1 FreeBSD: x64 bins 2022-01-23 11:37:40 +03:00
bol-van
6b39411454 nfqws: ipv6 fragment at transport header 2022-01-05 15:34:57 +03:00
bol-van
1221626b1d nfqws: IP_NODEFRAG not working for ipv6 2022-01-03 22:16:11 +03:00
bol-van
94433e3279 nfqws: set IP_NODEFRAG sockopt 2022-01-03 21:14:55 +03:00
bol-van
690d458ec7 nfqws: ipfrag 2022-01-03 12:38:18 +03:00
bol-van
65830eb665 nfqws: udp protocol desync 2022-01-01 20:22:04 +03:00
bol-van
6af82ec97d nfqws: change default badack increment -65000=>-66000 2021-12-28 12:50:04 +03:00
bol-van
ff24920999 update bins 2021-12-27 16:51:42 +03:00
bol-van
606063dd48 nfqws: --dpi-desync-fake-unknown 2021-12-26 20:43:16 +03:00
bol-van
d1618faf40 nfqws: tunable badseq/badack increment, changed defaults 2021-12-26 17:11:21 +03:00
root
f2d083499e nfqws: change default split-pos from 3 to 2 2021-12-22 11:21:47 +03:00
bol-van
545c9a4730 nfqws: separate ipv4/6 ttl setting 2021-12-10 22:08:52 +03:00
bol-van
03886dda88 bin cosmetics 2021-11-12 12:53:01 +03:00
bol-van
cc85c1b489 nfqws, tpws : fix tls1.1, tls1.2, tls1.3 header recognition 2021-10-12 23:26:52 +03:00
bol-van
45f6838059 nfqws, tpws : fix tls1.1, tls1.2, tls1.3 header recognition 2021-10-12 23:24:38 +03:00
bol-van
6fc9031944 ip2net : precompute ipv6 masks 2021-09-18 21:26:50 +03:00
bol-van
0b8072840b ip2net : precompute ipv6 masks 2021-09-18 21:22:29 +03:00
bol-van
9402cd2cf0 ip2net : zero less significant bits in ip4/ip6 addresses, workaround GCC bug 2021-09-12 13:58:13 +03:00