drygdryg/zapret
1
0
Fork 0
mirror of https://github.com/bol-van/zapret.git synced 2025-04-20 22:12:58 +03:00
Code Issues Packages Projects Releases Wiki Activity
637 Commits 1 Branch 20 Tags
Commit Graph

27 Commits

Author SHA1 Message Date
Evgeniy Khramtsov
11a68e521e nfq/darkmagic: unbreak IPv6 on FreeBSD 14 
https://github.com/freebsd/freebsd-src/blob/4da7282a1882/sys/netinet/ip_divert.c#L321
allows only AF_INET in sa, causing runtime issue with IPv6:
[...]
rawsend: sendto_divert: Address family not supported by protocol family
[...]

After hardcoding AF_INET in sa, sin_len check returns EINVAL:
[...]
rawsend: sendto_divert: Invalid argument
[...]

FreeBSD's div_output_outbound() past check still handles AF_INET6,
and --dpi-desync=fake,split works after hardcoding sa AF and len
to get past the check.
 2023-07-16 19:01:16 +00:00
Evgeniy Khramtsov
aed912e702 nfq: switch to PF_DIVERT/SOCK_RAW on FreeBSD 14 
FreeBSD/FreeBSD-src@8624f4347e ("divert: declare PF_DIVERT
domain and stop abusing PF_INET") deprecated IPPROTO_DIVERT
by introducing address family-independent PF_DIVERT.

Use socket(PF_DIVERT, SOCK_RAW, 0) to avoid deprecated behavior,
i.e. FreeBSD/FreeBSD-src@f70a2e2948.
 2023-07-16 18:56:25 +00:00
bol-van
04f8f7774d nfqws: do not complain if IPV6_FREEBIND not available 2022-07-29 08:20:57 +03:00
bol-van
895af0f629 nfqws: allow to decrease udp length 2022-07-27 12:00:36 +03:00
bol-van
01ec94806d nfqws: fix running on ipv6 disabled system 2022-05-20 11:21:38 +03:00
bol-van
877adbd6f6 nfqws: preserve fwmark. bind-fix 2022-05-15 15:54:35 +03:00
bol-van
ffda684a43 nfqws: fakeknown, udplen desync modes 2022-04-12 15:52:06 +03:00
bol-van
4aef7a96a4 nfqws: ipfrag1 desync mode 2022-02-05 15:41:46 +03:00
bol-van
b787ed0146 nfqws: cosmetics 2022-02-05 13:39:09 +03:00
bol-van
6151afe727 nfqws: destopt desync mode 2022-02-05 13:36:32 +03:00
bol-van
707e86bd90 nfqws: allow hopbyhop with 2nd phase desync 2022-02-02 15:18:35 +03:00
bol-van
427f16776c nfqws: hop-by-hop ipv6 fooling and desync 2022-02-01 20:35:52 +03:00
bol-van
6b39411454 nfqws: ipv6 fragment at transport header 2022-01-05 15:34:57 +03:00
bol-van
1221626b1d nfqws: IP_NODEFRAG not working for ipv6 2022-01-03 22:16:11 +03:00
bol-van
78de2c2137 nfqws: move IP_NODEFRAG sockopt 2022-01-03 21:30:42 +03:00
bol-van
94433e3279 nfqws: set IP_NODEFRAG sockopt 2022-01-03 21:14:55 +03:00
bol-van
690d458ec7 nfqws: ipfrag 2022-01-03 12:38:18 +03:00
bol-van
65830eb665 nfqws: udp protocol desync 2022-01-01 20:22:04 +03:00
bol-van
d1618faf40 nfqws: tunable badseq/badack increment, changed defaults 2021-12-26 17:11:21 +03:00
bol-van
37e3a11a77 source cosmetics 2021-11-12 12:36:25 +03:00
bol-van
29b905c1a1 nfqws: n prefix for network byte order vars 2021-03-21 11:51:38 +03:00
bol-van
5ddc0aa01b nfqws: extend conntrack 2021-03-19 15:39:32 +03:00
bol-van
b27cfbc813 nfqws: conntrack 2021-03-18 17:21:25 +03:00
bol-van
dccf672d8a nfqws: -artefact 2021-03-12 15:45:43 +03:00
bol-van
199bf7c9b0 nfqws: do not allow increasing scale factor 2021-03-12 15:44:25 +03:00
bol-van
53f36c7297 nfqws: wssize 2021-03-12 14:33:48 +03:00
bol-van
3703918a4b history purge 2021-03-04 14:30:38 +03:00