Commit Graph

421 Commits

Author SHA1 Message Date
Frank Denis 73a43b31b9 Automatically restart after unexpected errors 2018-07-01 23:06:28 +02:00
Frank Denis f9b6994fd2 An easier way to remove args[0] 2018-07-01 22:48:50 +02:00
Frank Denis cc327fdc48 OPT records don't have any class 2018-06-26 15:46:31 +02:00
Frank Denis 97f604670c Don't update OPT records
Fixes #527
2018-06-26 08:24:13 +02:00
John Spurlock 74093a65a2 Quick typo fix in example config. (#511) 2018-06-20 00:55:28 +02:00
Frank Denis a1c8012fc6 Error handling when TCP connections fail 2018-06-18 19:19:53 +02:00
Frank Denis 2cb5bb5110 Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
* 'master' of github.com:jedisct1/dnscrypt-proxy:
  Note that Windows doesn't support username option (#494)
2018-06-14 19:14:24 +02:00
Frank Denis 34e78a2446 Don't create a new session; it breaks `-service stop`. 2018-06-14 19:13:52 +02:00
Sebastian Schmidt 8f2972845d Note that Windows doesn't support username option (#494) 2018-06-14 09:35:13 +02:00
Frank Denis 7f8b8d043e Remove old daemonization code
We will be able do it using fork+exec
2018-06-13 17:31:47 +02:00
Frank Denis 09e39c785a Keep the process running in foreground to avoid a breaking change/allow monitoring
This currently doesn't replace the previous process. Maybe there is a way to achieve
this in Go. Need to look closer at os.exec

Also start-child -> child
2018-06-13 17:24:16 +02:00
Frank Denis fe0aa52fba Make description more accessible in the example configuration file
Also don't enable this by default, as "nobody" may not exist everywhere
2018-06-13 16:54:57 +02:00
Sebastian Schmidt aab7e6380f Drop privileges with exec (#467)
* Drop privileges with exec and SysProcAttr

* Fix windows build

* Fix passing logfile fd
2018-06-13 16:52:41 +02:00
Frank Denis ae54a7aafc Revert "Do not mention systemd activation until #480 is solved"
This reverts commit 066345123b.
2018-06-13 16:49:57 +02:00
dwimmer b498e6655e Fix systemd socket connections (#492)
Upstream systemd go library broke use of TCP and UDP sockets at the same time.
Changed to use lower level API to work around this. Also improved logging of
systemd socket connections to include systemd unit file name and address.
2018-06-13 16:49:32 +02:00
Frank Denis 066345123b Do not mention systemd activation until #480 is solved 2018-06-08 06:35:47 +02:00
Frank Denis 9135efcaec Use net.Conn everywhere
I don't know how to use a TCPConn as a Conn.
2018-06-06 19:06:44 +02:00
Frank Denis 7866e6da51 Bump 2018-06-06 16:14:31 +02:00
Frank Denis 0166f21b27 Add built-in support for Tor 2018-06-06 15:54:51 +02:00
Frank Denis 977dcad826 Improved return codes 2018-06-04 23:18:28 +02:00
Frank Denis 3bbdf93095 Log return codes in LTSV qeruylog files
DNS return codes are not enough; we need to change this to something
more expressive.

In particular, we can't use them to distinguish between a server block,
a blacklist block, and a plugin block such as the IPv6 blocker.
2018-06-04 21:35:07 +02:00
Frank Denis b6e6a19b50 Make logging plugins independent from query/response plugins 2018-06-04 20:52:16 +02:00
Frank Denis e747cf8704 Adapt to the new systemd API 2018-05-31 19:58:33 +02:00
Frank Denis 26579df8d1 Bump 2018-05-19 10:40:15 +02:00
Frank Denis da06657963 application/dns-message 2018-05-19 02:39:32 +02:00
Frank Denis 33537be040 Use a netprobe address less likely to be blocked/considered invalid 2018-05-19 00:06:28 +02:00
Frank Denis d87f3618ac Bump 2018-05-16 11:41:55 +02:00
Frank Denis 281c2fa7f4 Don't add padding if the query matches the block size
Fixes #446
2018-05-16 11:31:47 +02:00
Frank Denis 255423588c REFUSED responses are fine for filtering resolvers 2018-05-11 03:31:25 +02:00
Frank Denis 7774d9cf05 Avoid long lines 2018-05-10 22:19:04 +02:00
Frank Denis 6f047e07b8 Bump 2018-05-10 22:17:57 +02:00
Frank Denis ce62981c44 Wait for network connectivity before starting the proxy 2018-05-10 21:59:25 +02:00
Frank Denis 3c1d7acdaf Synthetic SOAs can have constant serial/mail 2018-05-10 10:54:15 +02:00
Frank Denis cdf5b9ce6b IPv6 issues on macOS should be gone 2018-05-10 10:46:11 +02:00
Frank Denis 17dd7336a8 Use a root server as the NS in synthetic SOA responses 2018-05-10 10:45:56 +02:00
Frank Denis 0b5c0af5ee IPv6 blocking: add a synthetic SOA record 2018-05-10 10:39:21 +02:00
Frank Denis 8509cc1bd7 forwarding: explain that example.com also matches *.example.com 2018-04-29 21:47:39 +02:00
Frank Denis 7f999f59e1 Recommend against disable_ipv6 when using chained caches
Fixes #398
2018-04-27 16:20:24 +02:00
Frank Denis bcaff6e3bd 2.0.11 2018-04-27 00:12:09 +02:00
Anonymous User c83ae78dba anonymous commit (#397) 2018-04-21 20:21:11 +02:00
Frank Denis dd878d4c60 Clarify that UDP is no less secure than TCP 2018-04-20 23:17:48 +02:00
Frank Denis f20da6b611 Remove support for legacy CSV files 2018-04-18 19:06:50 +02:00
Frank Denis 3d67c81697 Deps update 2018-04-18 18:58:39 +02:00
Frank Denis f63dc17f90 stamps -> dnsstamps 2018-04-18 18:47:10 +02:00
gdm85 eb5f391fa6 Split stamps into package 2018-04-18 18:36:47 +02:00
Frank Denis b1447160a0 Add cache_neg_min_ttl and cache_neg_max_ttl 2018-04-17 00:24:49 +02:00
Frank Denis 0f349c793e Clarify
Fixes #356
2018-04-16 22:24:45 +02:00
Frank Denis a5b8401131 Bump 2018-04-16 02:33:10 +02:00
Frank Denis ace955fd9f More accurate description 2018-04-16 02:25:59 +02:00
Frank Denis 5be294a6e2 packetLength can be negative
Fixes #359
2018-04-16 02:05:28 +02:00