GoodbyeDPI

Commit Graph

Author	SHA1	Message	Date
EgorWeders	420dad3bcd	Malloc return value check	2 years ago
ValdikSS	62f2953515	Ignore all RSTs with -p	2 years ago
ValdikSS	7b66094f56	Fix help print (`--help`), '?' is reserved in getopt. Broken due to `16f2a8fb81`	2 years ago
ValdikSS	a6c7169033	Allow to add the whole root zones into blacklist. Fixes #564 .	2 years ago
EgorWeders	ed210cdf44	Removed not recommended --image-base linker param Tested only on windows 10 locally and in github actions image	2 years ago
ValdikSS	dcff8389b3	Fix fox `16f2a8fb81`	2 years ago
EgorWeders	16f2a8fb81	Added argument --debug-exit (#512 ) * Added argument --debug-exit	2 years ago
ValdikSS	e9ac13bcda	Enum style fixes. Closes #504 , #507 .	2 years ago
EgorWeders	78ae517871	Changed to enum	2 years ago
EgorWeders	ed45c42c9e	Added different return codes	2 years ago
ValdikSS	aab7842a76	Partial revert "Bump version to v0.2.3. Closes #429" This reverts commit `6b2f3cfa74`. Accidential commit of a new fake packet	2 years ago
ValdikSS	abcca5ea84	Print errorcode in WinDivert error message	2 years ago
JijogBf	8401dfcc1a	FIX: Comment's indexes in printf block at main function (line 979)	2 years ago
ValdikSS	c4bbd0b8e2	Print human-readable WinDivert error messages	2 years ago
ValdikSS	6b2f3cfa74	Bump version to v0.2.3. Closes #429	2 years ago
ValdikSS	9bfce3156e	Make mode -9 the default, instead of -5 Auto-ttl gives many false positives in TTL detection, which breaks non-blocked websites. Use the combination of wrong-seq and wrong-chksum and hope to the best. Also block QUIC to workaround possible throttling, as right now it is not dissected.	2 years ago
ValdikSS	f7362094d3	New modes: -8 and -9 -8 is -7 with added --wrong-seq, it sends two subsequent fake packets, one with incorrect sequence, and another one with incorrect checksum. -9 is -8 with QUIC block.	2 years ago
ValdikSS	f1aece75ae	New mode: -7 - As -6 but with wrong chksum	2 years ago
ValdikSS	60dd3cb004	Make ClientHello ignore --max-payload limits Receive TLS ClientHello despite max-payload limit set, to get all the benefits of the option (decreased CPU consumption) but still handle all TLS connections, including Kyber.	2 years ago
ValdikSS	d031ae65bf	New option: -q - block QUIC/HTTP3 Only Initial packet in Long Header Packets are blocked. The packet should be at least 1200 bytes in size.	2 years ago
ValdikSS	3837635f2c	Use non-prefixed windres for msys2. #372	2 years ago
ValdikSS	15eb10ac68	Fragment packet by the beginning of SNI value. #357 It has been reported that the DPI systems in Saudi Arabia and United Arab Emirates are started to search for the beginning of SNI extension header and its value, without parsing the TLS ClientHello packet, in any part of TCP session. Workaround the issue by splitting the packet right after the end of extension headers and before its value. https://ntc.party/t/goodbyedpi-in-saudi-arabia/7884 https://ntc.party/t/goodbyedpi-in-uae/7914	2 years ago
ValdikSS	4c846c712d	Handle TLSv1.2 record version handshakes (16 03 03). #353	2 years ago
mohadangKim	54349a1c31	fix memcpy usage	4 years ago
ValdikSS	4f18a73239	Print correct set-ttl/auto-ttl mode in the status	4 years ago
ValdikSS	67629fb6ef	Disable auto-ttl if set-ttl has been used after auto-ttl	4 years ago
ValdikSS	27a6d256f0	Handle HTTP GET and POST in packets larger than --max-payload If --max-payload 1200 is used and there's HTTP request with lots of cookies which exceed 1200 bytes in size, this packet would have been skipped as 'too large', and the circumvention won't be applied. Fix this by checking for "GET " or "POST" in the beginning of the packet regardless of its size.	4 years ago
ValdikSS	99c403ca62	GoodbyeDPI v0.2.2	4 years ago
ValdikSS	6ee4101f58	Fix --set-ttl when used with --min-ttl	4 years ago
ValdikSS	55a3a94065	Handle "0" in domain names	4 years ago
ValdikSS	8383ecaadf	Change argument order for calloc()	4 years ago
ValdikSS	8deacbc438	Allocate (argc + 1) for the service arguments, with calloc It was assumed that getopt checks argc count and does not require null-terminated argv pointer to determine argv end for optional parameter. That is wrong. Add null-terminated latest argv. Fixes #246	4 years ago
ValdikSS	1cfd2b1b9f	Allow to set --max-payload to zero	4 years ago
ValdikSS	871670845f	Document forgotten --max-payload in -5 and -6 modes (v0.2.0+)	4 years ago
ValdikSS	4a8f7ac4fb	Call WinDivertShutdown on shutdown	4 years ago
ValdikSS	ee4ce8893c	Initial support for WinDivert 2.0+ This patch adds WinDivert 2.0+ support in a backward-incompatible way. WinDivert 1.4 won't work after this commit anymore.	4 years ago
ValdikSS	406cf2ca68	GoodbyeDPI v0.2.1	5 years ago
ValdikSS	277b1fb4ef	SNI extraction bugfix: add forgotten hyphen as an allowed domain character This fixes --allow-no-sni option for domains with hyphen.	5 years ago
ValdikSS	5494be72ba	GoodbyeDPI v0.2.0	5 years ago
ValdikSS	c92cd77c51	Ensure the resource file to be compiled before linking	5 years ago
ValdikSS	f97a2d04f0	Use --max-payload-size=1200 for -5 and -6 modes.	5 years ago
ValdikSS	d7c681d1a2	Add Max Payload Size limit option (`--max-payload-size`) This option excludes TCP packets with the data payload larger than defined value from being copied by WinDivert driver to GoodbyeDPI. As most of HTTP and TLS ClientHello packets are repatively small, and file transfers are usually big and are sent/received using the whole available MTU/MSS, we can just exclude them from being processed by our userspace program to reduce unnecessary CPU load.	5 years ago
ValdikSS	cc1676ad92	--allow-no-sni option. Useful with --blacklist and undetectable SNI. This option is added specially for protonmail.com, as it sends low Window Size in SYN-ACK for requests from Russia, to force the client to fragment the packet. GoodbyeDPI doesn't do reassembling and can't extract SNI in this case, thus won't circumvent the censorship if --blacklist option is used.	5 years ago
ValdikSS	7f59593a28	Check TLS Handshake ClientHello byte if packet length is enough	5 years ago
ValdikSS	372cc6a45d	Properly handle Native Fragmentation packet of bigger or equal size than the fragment size	5 years ago
ValdikSS	46c4f36de8	Add Fake Packet maximum TTL limit to Auto TTL mode This patchset adds maximum TTL size of the fake packet to be sent, to further improve compatibility with asymmertic routing and non-standard TTL value set on servers.	5 years ago
ValdikSS	8911e459d8	Exit when native fragmentation is enabled but http/https values are not set	5 years ago
ValdikSS	f4edcf7b4f	Small text output enhancements	5 years ago
ValdikSS	bb8bafb663	Add Auto TTL range adjustment, introduce min-ttl and use it for --set-ttl as well.	5 years ago
ValdikSS	e25d7432de	Better Auto TTL adjusting algorithm which honors short distance Say you set --auto-ttl to 4. If the TTL distance to the destination host is too short, say 6, auto-ttl would decrease it by 4 and send a fake packet with TTL 2, which is too low for the packet to travel via DPI system. But if you set --auto-ttl to a lower value such as 2, that may introduce issues over long lines where outgoing-path TTL and incoming-path TTL may have difference more than 2 hops due to higher chance of assymetric routing along the path. To solve this issue, this commit introduce auto-ttl range of two values. If the incoming TTL distance is more than autottl2, it is subtracted by autottl2 value. If the distance is less than autottl2, the distance value is used as a normalized weigth of [autottl1; autottl2] scale. The simplified formula is as follows: 128 > extracted_ttl > 98: // Server is running Windows nhops = 128 - extracted_ttl 64 > extracted_ttl > 34: // Server is running Linux/FreeBSD/other nhops = 64 - extracted_ttl if (nhops - autottl2 < autottl2) ttl_of_fake_packet = nhops - autottl1 - trunc((autottl2 - autottl1) * ((float)nhops/10)); else ttl_of_fake_packet = nhops - autottl2	5 years ago

1 2

90 Commits (d772a7fe92a9136ab197611738e66f50642bc688)