diff --git a/blockcheck.sh b/blockcheck.sh index 63e48f4..40dc31d 100755 --- a/blockcheck.sh +++ b/blockcheck.sh @@ -396,6 +396,8 @@ check_system() PKTWS="$WINWS" PKTWSD=winws FWTYPE=windivert + # ts fooling requires timestamps. they are disabled by default in windows. + netsh interface tcp set global timestamps=enabled >/dev/null ;; *) echo $UNAME not supported @@ -1195,6 +1197,7 @@ warn_fool() echo "WARNING ! fakedsplit/fakeddisorder with md5sig fooling and low split position causes MTU overflow with multi-segment TLS (kyber)" ;; datanoack) echo 'WARNING ! although datanoack fooling worked it may break NAT and may only work with external IP. Additionally it may require nftables to work correctly.' ;; + ts) echo 'WARNING ! although ts fooling worked it will not work without timestamps being enabled in the client OS. In windows timestamps are DISABLED by default.' esac } pktws_curl_test_update_vary() @@ -1321,7 +1324,7 @@ pktws_check_domain_http_bypass_() } f= [ "$UNAME" = "OpenBSD" ] || f="badsum" - f="$f badseq datanoack md5sig" + f="$f badseq datanoack ts md5sig" [ "$IPV" = 6 ] && f="$f hopbyhop hopbyhop2" for fooling in $f; do ok=0 diff --git a/docs/changes.txt b/docs/changes.txt index 30245ea..8406d39 100644 --- a/docs/changes.txt +++ b/docs/changes.txt @@ -531,3 +531,6 @@ v71.3 init.d: FILTER_MARK nfqws: ts fooling +blockcheck: test ts fooling +blockcheck: silently enable tcp timestamps in windows +