860f483ac3
IPv6 DNS redirection
2018-02-16 19:45:55 +03:00
3d36127f5b
Handle IPv6 packets and prepare for IPv6 DNS redirection
2018-02-16 17:35:24 +03:00
8e7f4ff505
Properly exclude Teredo
2017-12-25 00:05:28 +03:00
5e9e1f0eb6
Preliminary IPv6 support.
...
No IPv6 support in DNS redirection code. IPv6 DNS request packets
would be dropped.
2017-12-24 20:21:32 +03:00
3ffce30871
Minor modifications.
...
* puts() instead of printf("%s")
* strdup() instead of malloc + strcpy
2017-12-24 20:19:18 +03:00
eaac2d1a80
Minor service fixes
2017-12-21 23:52:23 +03:00
ccd21a4281
ntohs -> htons (they produce the same output, but still)
2017-12-21 23:50:07 +03:00
23babdc8fa
Windows Service support.
...
Program can now be started as a Windows Service. No additional
arguments needed. Refer to `service_install` and `service_remove`
scripts in released zip file.
2017-12-20 17:03:22 +03:00
95765f3ed9
Store fragment_size_message as a pointer
2017-12-20 17:01:21 +03:00
a5b185c2a9
Set proper options if started without arguments
2017-12-20 12:36:21 +03:00
c9cd3ac8c7
Fix signed/unsigned integer comparison warning for HTTP fragmentation
2017-12-20 04:05:28 +03:00
fab9662ac9
Use WinDivert TCP Header structure to change Window Size
2017-12-20 04:04:40 +03:00
a88ab4337e
Apply HTTP Persistent fragmentation only for sufficiently large packets
2017-12-20 03:33:30 +03:00
582503452f
Implement TCP fragmentation for HTTP Persistent (keep-alive) sessions.
...
New option `-k` splits HTTP request into two segments, and either
send only the first one (Windows would retransmit the other one
based on ACK number in ACK reply) or both (with `-n` enabled).
This fixes behaviour on some DPI which trace persistent sessions
but do not reassemble packages.
2017-12-20 02:10:59 +03:00
03e36b968a
Free allocated error message string
2017-12-20 01:48:38 +03:00
312d2b1d55
Remove unused IPV4_TOTALLEN_OFFSET
2017-12-20 01:48:20 +03:00
6827b6ad51
Do not add hostnames less than 4 characters long
2017-12-17 01:46:32 +03:00
60e87f769a
Minor modifications
2017-12-17 00:28:11 +03:00
bfed8638e5
Implement blacklist.
...
Only domains and subdomains from the blacklist file would be processed
with HTTP modifications. Does not affect HTTPS data.
2017-12-17 00:26:11 +03:00
72516c0b2b
Add information about --dns-verb option
2017-12-16 20:24:40 +03:00
f11ca2400c
Fix memory leak in dnsredir
2017-12-16 17:53:06 +03:00
dd4d6bc5c6
Do not print DNS warnings by default and drop duplicate requests.
...
Windows is known to use all available interfaces for DNS requests,
which is handled as a duplicate (retransmission) in dns redirector.
It's safe to just drop these duplicates.
2017-12-16 14:30:42 +03:00
30bb1a665a
make it more usable with MSYS and linux MinGW both ( #48 )
...
* make it more usable
* update README
2017-12-13 18:13:54 +04:00
5f231996d4
Fix incorrect host header memmove()s. Fixes #47
2017-12-13 01:42:29 +03:00
81718f1a53
Small fix for dnsredir
2017-12-10 20:44:50 +03:00
064cf575b6
Parse DNS packet only when DNS redirection is enabled
2017-12-09 02:36:45 +03:00
a67f42eebc
Use defined HOST_MAXLEN
2017-12-07 22:38:41 +03:00
363b2dca37
Flush DNS cache if --dns-addr is used
2017-12-07 22:38:21 +03:00
1e8835cfe5
Small fixes
2017-12-07 13:03:01 +03:00
c6c071e35f
Update README.md
2017-12-06 03:21:07 +03:00
a182f52207
New experimental feature: UDP DNS redirection
2017-12-06 03:09:58 +03:00
61e39bc095
New feature: additional processed TCP ports
2017-12-06 03:07:16 +03:00
9b9be302cb
New option "-w": try to find and parse HTTP traffic on all processed ports (not only on port 80)
2017-12-06 03:07:11 +03:00
c7905f0b31
Mix HTTP Host header value
2017-12-04 22:06:46 +03:00
da1e2e8aac
Serious refactoring
2017-12-04 22:01:25 +03:00
87c354addf
Update Makefile
2017-09-07 17:35:57 +03:00
9fa2956065
Calculate checksums even there's no packet modifications.
2017-09-07 17:35:25 +03:00
2f0429027d
Small refactoring
2017-09-04 22:14:17 +03:00
feb03c74c8
Print message of HTTP fragmentation > 2 incompatibility.
...
We can't reliably distinguish HTTP data from other data on port 80 when fragmentation is used.
HTTP method code has a special case which tries to find HTTP method when fragmentation = 1 or 2 is used,
but not for other values.
2017-08-28 11:46:59 +03:00
4c13435ee3
Handle Host header after User-Agent header in the HTTP packet. Fixes #29 .
...
Most browsers would put Host header as early as they could, but not Microsoft Edge.
2017-08-28 11:45:05 +03:00
ee665ee3bd
Search for HTTP methods in fragmented packets with Window Size 1 or 2. Fixes #30 .
2017-08-28 11:43:55 +03:00
00e4964e73
Remove webdav HTTP methods. They are rarely used and less probably filtered.
2017-08-28 11:42:30 +03:00
2fe377a23f
Do not handle traffic from private IP ranges
2017-08-15 14:09:47 +03:00
b74c974235
Print error message if filter initialization fails
2017-08-15 14:09:06 +03:00
96fb5f9516
Block passive DPI packets only with "Connection: close". Fixes #17 .
...
Some servers set "don't fragment" flag and never increase TCP ID
field. If they send HTTP redirection to another website, it would
be blocked by the program.
This is a hack to block redirects only with "Connection: close"
header as presumably legal redirects are most likely would
use keep-alive.
2017-08-15 08:28:25 +03:00
c1ca4f9804
Merge pull request #10 from beatcracker/patch-1
...
Fixed typos
2017-07-10 20:01:56 +04:00
13261e1a92
Fixed typos
2017-07-10 18:44:56 +03:00
4387e7c690
Merge pull request #7 from pash7ka/patch-2
...
bugfix: wrong config file name
2017-06-14 12:23:33 +04:00
08902b9a57
bugfix: wrong config file name
2017-06-14 02:13:39 +03:00
f5ac7c0d67
Change TCP Window Size based on SrcPort, not DstPort.
...
When HTTPS fragment size was set, the program always used it for HTTP, even
if HTTP fragmentation was disabled. This is due to a bug which checked DstPort,
not SrcPort, and the packets passed DstPort != htons(80) HTTPS check.
2017-06-11 21:50:22 +03:00
ValdikSS
R4SAS
beatcracker
Pavel Rubin