GoodbyeDPI

Commit Graph

Author	SHA1	Message	Date
ValdikSS	582503452f	Implement TCP fragmentation for HTTP Persistent (keep-alive) sessions. New option `-k` splits HTTP request into two segments, and either send only the first one (Windows would retransmit the other one based on ACK number in ACK reply) or both (with `-n` enabled). This fixes behaviour on some DPI which trace persistent sessions but do not reassemble packages.	7 years ago
ValdikSS	03e36b968a	Free allocated error message string	7 years ago
ValdikSS	312d2b1d55	Remove unused IPV4_TOTALLEN_OFFSET	7 years ago
ValdikSS	60e87f769a	Minor modifications	7 years ago
ValdikSS	bfed8638e5	Implement blacklist. Only domains and subdomains from the blacklist file would be processed with HTTP modifications. Does not affect HTTPS data.	7 years ago
ValdikSS	72516c0b2b	Add information about --dns-verb option	7 years ago
ValdikSS	dd4d6bc5c6	Do not print DNS warnings by default and drop duplicate requests. Windows is known to use all available interfaces for DNS requests, which is handled as a duplicate (retransmission) in dns redirector. It's safe to just drop these duplicates.	7 years ago
ValdikSS	5f231996d4	Fix incorrect host header memmove()s. Fixes #47	7 years ago
ValdikSS	81718f1a53	Small fix for dnsredir	7 years ago
ValdikSS	064cf575b6	Parse DNS packet only when DNS redirection is enabled	7 years ago
ValdikSS	a67f42eebc	Use defined HOST_MAXLEN	7 years ago
ValdikSS	363b2dca37	Flush DNS cache if --dns-addr is used	7 years ago
ValdikSS	1e8835cfe5	Small fixes	7 years ago
ValdikSS	a182f52207	New experimental feature: UDP DNS redirection	7 years ago
ValdikSS	61e39bc095	New feature: additional processed TCP ports	7 years ago
ValdikSS	9b9be302cb	New option "-w": try to find and parse HTTP traffic on all processed ports (not only on port 80)	7 years ago
ValdikSS	c7905f0b31	Mix HTTP Host header value	7 years ago
ValdikSS	da1e2e8aac	Serious refactoring	7 years ago
ValdikSS	9fa2956065	Calculate checksums even there's no packet modifications.	8 years ago
ValdikSS	2f0429027d	Small refactoring	8 years ago
ValdikSS	feb03c74c8	Print message of HTTP fragmentation > 2 incompatibility. We can't reliably distinguish HTTP data from other data on port 80 when fragmentation is used. HTTP method code has a special case which tries to find HTTP method when fragmentation = 1 or 2 is used, but not for other values.	8 years ago
ValdikSS	4c13435ee3	Handle Host header after User-Agent header in the HTTP packet. Fixes #29 . Most browsers would put Host header as early as they could, but not Microsoft Edge.	8 years ago
ValdikSS	ee665ee3bd	Search for HTTP methods in fragmented packets with Window Size 1 or 2. Fixes #30 .	8 years ago
ValdikSS	00e4964e73	Remove webdav HTTP methods. They are rarely used and less probably filtered.	8 years ago
ValdikSS	2fe377a23f	Do not handle traffic from private IP ranges	8 years ago
ValdikSS	b74c974235	Print error message if filter initialization fails	8 years ago
ValdikSS	96fb5f9516	Block passive DPI packets only with "Connection: close". Fixes #17 . Some servers set "don't fragment" flag and never increase TCP ID field. If they send HTTP redirection to another website, it would be blocked by the program. This is a hack to block redirects only with "Connection: close" header as presumably legal redirects are most likely would use keep-alive.	8 years ago
ValdikSS	f5ac7c0d67	Change TCP Window Size based on SrcPort, not DstPort. When HTTPS fragment size was set, the program always used it for HTTP, even if HTTP fragmentation was disabled. This is due to a bug which checked DstPort, not SrcPort, and the packets passed DstPort != htons(80) HTTPS check.	8 years ago
ValdikSS	d9e27f193c	Reimplement -s option to fix unACKed data Old code used to reduce packet size by one byte to remove space in HTTP Host header. This introduces one unACKed byte which OS later tried to send to the host. This byte was \n (the last byte in original packet) which broke POST requests. New code in this commit moves "stolen" space in the end of User-Agent header value and do not reduce packet size anymore. User-Agent value is used because not all web servers are compatible with additional space in the end of Host value. Fix #3	8 years ago
ValdikSS	c721ab0506	Always check for valid HTTP method before any modifications	8 years ago
ValdikSS	70765fa895	New option: additional space between Method and Request-URI (enables -s, may break sites)	8 years ago
ValdikSS	a2d5be1eed	const char for window size function	8 years ago
ValdikSS	30fd25bc24	Replace char* with const char* where appropriate	8 years ago
ValdikSS	9fea771d2c	Less invasive Passive DPI block. Fix #2 .	8 years ago
ValdikSS	bb05d357a7	Fix for getopt -4	8 years ago
ValdikSS	609d8aa037	New mode -3 (old -3 is now -4)	8 years ago
ValdikSS	46af3c2edb	Switch to getopt() and slightly update fragmentation code	8 years ago
ValdikSS	6b40623dce	Remove old code	8 years ago
ValdikSS	c43d5477b5	Use EXIT_SUCCESS and EXIT_FAILURE	8 years ago
ValdikSS	5bb0e65d20	Initial commit	8 years ago

40 Commits (0.1.3)