Commit Graph

497 Commits

Author SHA1 Message Date
bol-van
2eec88c2bf nfqws: verify quic auth tag. improve initial packet detection 2022-03-26 21:00:58 +03:00
bol-van
3753349058 nfqws: quic protocol code optimizations 2022-03-26 10:08:10 +03:00
bol-van
f7c0c35670 nfqws: handle QUIC decrypt failed case during desync 2022-03-25 22:34:37 +03:00
bol-van
7df1be9d3e nfqws: prevent out-of-bound access 2022-03-25 20:22:15 +03:00
bol-van
0887fe6f2a nfqws: remove duplicate check 2022-03-25 20:15:09 +03:00
bol-van
64406960aa nfqws: prevent out-of-band access in IsQUICCryptoHello 2022-03-25 20:08:05 +03:00
bol-van
4dc6639b5a nfqws: crypto dos2unix 2022-03-25 19:55:54 +03:00
bol-van
6c31029999 crypto rfc6234 restore license notices 2022-03-25 18:53:18 +03:00
bol-van
dce5b4c6f0 nfqws: QUIC initial dissection support 2022-03-25 16:59:58 +03:00
bol-van
f10d17469e fakes: quic google.com 2022-03-23 14:54:22 +03:00
bol-van
5244af1838 nftables: flush predefrag chain 2022-03-22 14:24:41 +03:00
bol-van
38883a67a9 nftables: use after-srcnat postrouting hook. enable ipfrag notrack 2022-03-22 13:58:02 +03:00
bol-van
f3508030b1 install_easy: ignore GET_LIST result 2022-03-22 13:10:44 +03:00
bol-van
4515c3c335 rename fakes 2022-03-21 13:30:21 +03:00
bol-van
771963eef2 more fakes 2022-03-21 13:28:30 +03:00
bol-van
49771f160d nfqws: QUIC protocol recognition 2022-03-20 20:50:16 +03:00
bol-van
0a5ffc1a54 nfqws: QUIC protocol recognition 2022-03-20 20:46:39 +03:00
bol-van
38dca7da70 ipset: get_antizapret_domains use gzip in http query 2022-03-19 12:44:47 +03:00
bol-van
0d07831e1e ipset: get_exclude hup daemons in hostlist mode^C 2022-03-18 23:01:28 +03:00
bol-van
3cac53eb80 ipset: get_antizapret_domains.sh 2022-03-17 14:13:21 +03:00
bol-van
e079e3a607 ipset: rewrite IPSET_HOOK logic. now scripts outputs ip addresses 2022-03-17 13:26:06 +03:00
bol-van
027b3818c3 install_easy: fix version regression 2022-03-17 10:06:29 +03:00
bol-van
1e312e8c87 ipset: move ip,ipsum lists to antifilter.download 2022-03-17 10:01:31 +03:00
bol-van
82b937ded0 ipset: additional lists 2022-03-17 09:55:36 +03:00
bol-van
3536dd45d7 ipset: additional lists 2022-03-17 09:55:31 +03:00
bol-van
9be1551f5d ipset: post-apply hook 2022-03-16 19:35:07 +03:00
bol-van
3bc41d62be install_easy: flow offload linux check 2022-03-13 17:37:38 +03:00
bol-van
9aab32a35a readme: cosmetics 2022-03-13 10:35:47 +03:00
bol-van
649a46d73c readme: nftables old kernel notes 2022-03-13 10:35:06 +03:00
bol-van
bd0fc5a60c install_easy: nftables flow offloading for traditional linux systems 2022-03-13 10:26:11 +03:00
bol-van
e84c08a75d blockcheck: change curl user agent 2022-03-12 14:08:14 +03:00
bol-van
a0d3e470f2 init: add dpi-desync-any-protocol in custom-nfqws-quic4all 2022-03-04 20:09:24 +03:00
bol-van
68361f614a init: remove badsum from comments in custom-nfqws-quic4all 2022-03-04 20:06:04 +03:00
bol-van
378b7ebf26 init.d: QUIC customs 2022-03-04 19:41:34 +03:00
bol-van
e484808b3f move local var definitions 2022-03-04 19:06:26 +03:00
bol-van
7f5731c5d0 allow to specify protocol in helper function, do not fix tcp 2022-03-04 17:30:02 +03:00
bol-van
d572264a92 install_easy: cosmetics 2022-03-02 11:50:33 +03:00
bol-van
cae8be6667 install_easy: do not always remove/reinstall fw3 include 2022-03-02 11:47:27 +03:00
bol-van
8c4102eaef openwrt: reload only on ifup/ifdown 2022-03-02 11:26:24 +03:00
bol-van
a58575aa89 init: beautify 2022-02-23 22:46:04 +03:00
bol-van
3a4bf75ce6 init: reuse builtin mode in custom scripts 2022-02-23 22:39:49 +03:00
bol-van
09416dee64 nft: avoid using complex maps 2022-02-23 16:15:01 +03:00
bol-van
9fbada53d2 readme: nft 0.9.4 min required version note 2022-02-23 13:42:36 +03:00
bol-van
a9c898f5a5 readme: nft 0.9.4 min required version note 2022-02-23 13:42:29 +03:00
bol-van
38a9db77a8 init: openwrt optimize ifup/ifdown reloading 2022-02-23 13:06:34 +03:00
bol-van
6b3d9153f8 nft: use map for tpws DNAT6 targeting 2022-02-23 12:13:26 +03:00
bol-van
f49ad5d194 nft: do not flush ifsets on firewall stop 2022-02-18 15:50:53 +03:00
bol-van
6d63a4abf5 nftables_notes: nfset usage notes 2022-02-18 13:50:34 +03:00
bol-van
0c58537217 nft: do not delete all chains on firewall down 2022-02-18 13:40:49 +03:00
bol-van
4dd7415a2b readme: firewall hooks usage explanation 2022-02-18 13:03:25 +03:00