miracle091/dnscrypt-proxy
miracle091/dnscrypt-proxy
1
0
Fork 0
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2024-12-15 23:00:18 +01:00
Code Issues Releases Wiki Activity
625 Commits 5 Branches 89 Tags 62 MiB
33537be040
Commit Graph

625 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Frank Denis
eb4f392071
Merge pull request #31 from Zirkelite/master 
Fix systemd socket support
 2018-01-25 11:17:42 +01:00
Adrián Laviós Gomis
023c3e78ee Fix systemd socket support 2018-01-25 10:24:28 +01:00
Frank Denis
81715555be Update deps 2018-01-24 20:08:48 +01:00
Frank Denis
1d5cce9cd1 Don't compress executables any more. 
Fixes #26
 2018-01-24 17:03:20 +01:00
Frank Denis
996d9be4e3 Improve message if /proc/self/exe doesn't exist (?) 
Fixes #26
 2018-01-24 16:55:28 +01:00
Frank Denis
732c451dd4 Add max_clients to cap the maximum number of client queries 2018-01-24 16:51:26 +01:00
Frank Denis
e272dd84f7 up 2018-01-24 16:04:52 +01:00
Frank Denis
285cd09831 Don't compress on mips64 2018-01-24 15:41:48 +01:00
Frank Denis
81ec92d837 Remove --brute for now, for speed 2018-01-24 15:34:38 +01:00
Frank Denis
1dbc765fd7 crlf 2018-01-24 15:23:03 +01:00
Frank Denis
b11c536fcc Compress only on relevant targets 2018-01-24 15:21:24 +01:00
Frank Denis
94f9c14ad7 Only attempt to use systemd on linux 
Remove plan9 builds
 2018-01-24 15:14:48 +01:00
Frank Denis
d208d38f3f Update go, compress executables 2018-01-24 15:03:58 +01:00
Frank Denis
0b52211fa3 Update dnsc:// leftovers 2018-01-24 14:48:48 +01:00
Frank Denis
c184ce1a03 systemd support 
How does it work? I don't know. Does it work? I don't know.
Would I encourage its use? No.
 2018-01-24 14:44:32 +01:00
Frank Denis
0ce20518db Make the UDP and TCP listeners more generic 2018-01-24 14:22:56 +01:00
Frank Denis
1bcb791270 up 2018-01-24 14:13:29 +01:00
Frank Denis
abb659eed2 Nits 2018-01-23 15:51:57 +01:00
Frank Denis
3a3535dcbc Still tolerate hex-encoded pks, but emit a warning 2018-01-23 15:42:22 +01:00
Frank Denis
ccbdd41f5d Add support for shorter stamps with binary public keys 2018-01-23 15:23:11 +01:00
Frank Denis
2d7920af22 Prefer sdns:// which is less application-tainted 2018-01-22 12:00:42 +01:00
Frank Denis
d7b8217018 Only cache specific Rcodes 2018-01-22 11:19:57 +01:00
Frank Denis
a9476fe04b Mention how to run as a non-root user on Linux 2018-01-22 10:56:52 +01:00
Frank Denis
973b53afdc Simplify 2018-01-22 10:02:06 +01:00
Frank Denis
8324b29b42 Require stamps in static server definitions 
Provider names, etc. are not future-proof. In particular, they are
incompatible with other protocols such as DoH.
 2018-01-22 09:59:32 +01:00
Frank Denis
1d18a230c0 Consistent casing 2018-01-21 22:18:20 +01:00
Frank Denis
3dcedac390 beta8 2018-01-21 19:52:51 +01:00
Frank Denis
29fee1585f abc.ex.com should be rejected if both ex.com and bc.ex.com are listed in a blacklist 
With the following ruleset:

ex.com
bc.ex.com

"abc.ex.com" finds "bc.ex.com" as the longest suffix. However, since it's
not at a label boundary, it is not rejected.

However, there is a more general rule that should be considered, ex.com.

So we need to perform at least two lookups in that case.
 2018-01-21 19:47:19 +01:00
Frank Denis
6ca2697128 Clear certIgnoreTimestamp if we found at live 1 live server 2018-01-21 18:14:37 +01:00
Frank Denis
8bcba92f97 Add an undocumented option to ignore cert timestamps 2018-01-21 18:10:38 +01:00
Frank Denis
05e07e8b69 Add a simple built-in DNS client for testing 2018-01-21 18:02:32 +01:00
Frank Denis
d9b5625226 IP blocking 2018-01-21 16:07:44 +01:00
Frank Denis
1c80e80a0d Do not recommend block_ipv6 2018-01-21 00:54:20 +01:00
Frank Denis
f80c16ed2a Slightly change the way we block ipv6 2018-01-20 22:30:36 +01:00
Frank Denis
f7b8b70322 Revert "AAAA filter: Reject instead of sending an empty response" 
This reverts commit aceb8b30f7.
 2018-01-20 22:06:40 +01:00
Frank Denis
aceb8b30f7 AAAA filter: Reject instead of sending an empty response 
Empty responses can cause issues with CNAME records
 2018-01-20 20:37:02 +01:00
Frank Denis
f33b8a964a Use softfloat on mips builds 2018-01-20 19:20:50 +01:00
Frank Denis
4f0c36ac27 Don't log blocked suffixes in reverse 2018-01-20 17:25:16 +01:00
Frank Denis
9a85a50efd beta6 2018-01-20 17:14:53 +01:00
Frank Denis
a1461f3452 Remove unused variable 2018-01-20 17:14:21 +01:00
Frank Denis
5dd08fe56b Fix swapped out arguments in substring check 
*example.com* was matching ample.com, not xxxexample.comxxx

Fixes #14
 2018-01-20 17:11:46 +01:00
Frank Denis
4f42dd01a4 nxlog 2018-01-20 17:03:48 +01:00
Frank Denis
1e0e01e8e1 NXLOG: a new output plugin to log suspicious queries 2018-01-20 16:59:40 +01:00
Frank Denis
caca210568 Regen deps 2018-01-20 14:20:45 +01:00
Frank Denis
47fdc45b2d beta5 2018-01-20 14:15:20 +01:00
Frank Denis
ed50798049 Preliminary implementation of stamps 2018-01-20 14:13:11 +01:00
Frank Denis
88414e1448 Print stamps; require an env variable for debug level 2018-01-20 13:56:26 +01:00
Frank Denis
0fe21b2d57 Shortcut filters for the root zone 2018-01-20 13:30:19 +01:00
Frank Denis
066db6a080 Replace logged_qtypes with ignored_qtypes 2018-01-20 13:27:37 +01:00
Frank Denis
5080502381 " -> ' \because\people\still\use\backslahes\to\separate\path\components 2018-01-20 13:20:30 +01:00