dpibreak.git/src/platform/linux.rs, branch v0.1.1System-wide DPI circumvention with minimal configuration
http://git.dilluti0n.com/dpibreak.git/atom?h=v0.1.12025-12-30T11:00:07ZNormalize option handling and OPT_* naming2025-12-30T11:00:07Zdilluti0nhskimse1@gmail.com2025-12-30T11:00:07Zurn:sha1:9e38b2c679ee5a3ab9acad9a0ab53aedeb492c26
Log runtime options on startup
Prevent infinite loop on packet injection/filtering2025-12-30T08:15:22Zdilluti0nhskimse1@gmail.com2025-12-29T12:41:16Zurn:sha1:08d97bba88329315040bd4820ab4d799ee537181
- linux: fix infinite NFQUEUE loop by marking injected packets
- windows: by marking packet to impostor
linux: extract process execution into `exec_process` helper2025-12-29T09:07:58Zdilluti0nhskimse1@gmail.com2025-12-29T08:59:47Zurn:sha1:7bfef8fafc5369f65bd6f12c83e89f3443b923c0
Introduce exec_process() to handle external command execution, stdin
piping, and error reporting. Now cleanup() and apply_nft_rules() call
exec_process() to call modprobe, nft respectively.
This improves error handling for cleanup xt_u32.
linux: ignore cleanup errors at startup2025-12-22T05:26:25Zdilluti0nhskimse1@gmail.com2025-12-22T05:26:25Zurn:sha1:1245a0f138ac9536835d1f56260aae38d2734631
Do not log errors if cleanup fails during startup.
Retain error logging for cleanup failures on shutdown.
linux: switch to apply_nft_rules() from nftables-rs for rule setting2025-10-29T07:33:37Zdilluti0nhskimse1@gmail.com2025-10-29T07:24:05Zurn:sha1:40dbbcc52ab851586fcabf7316301bd3a755f907
nftables-rs didn’t fit use case, so it was decoupled, and logging was
improved.
linux: implement apply_nft_rules() to log output sanely2025-10-29T07:33:36Zdilluti0nhskimse1@gmail.com2025-10-29T06:46:58Zurn:sha1:02b0b6b6950a3add1e650e35a1d5d3592cce8d71linux: add option `--nft-command`2025-10-29T07:09:36Zdilluti0nhskimse1@gmail.com2025-10-29T06:46:27Zurn:sha1:ea6e2e1d08becc8570b53fff644bc35840ca9203platform: linux: filter only TLS ClientHello packets on nftables2025-10-03T06:51:36Zdilluti0nhskimse1@gmail.com2025-10-03T06:48:03Zurn:sha1:67c92fb447b12f9e5e1fee0c96b593e6aa8451b3
Add additional nftables match expressions to detect TLS records
(ContentType 0x16 = Handshake): and specifically ClientHello
(HandshakeType 0x01):. Packets matching this pattern are queued to
NFQUEUE. Mark xt_u32 as supported when nftables filtering is
successfully applied.
platform: linux: add nftables support with iptables fallback2025-10-03T06:28:57Zdilluti0nhskimse1@gmail.com2025-10-03T06:28:57Zurn:sha1:e4529084b42e6374af4e735a3c9023d4492b9dc0
Introduce nftables rules under a dedicated "dpibreak" table and
chain. Traffic on TCP port 443 is queued using NFQUEUE. If nftables
is not supported, fall back to the existing iptables-based rules
for both IPv4 and IPv6.
Also update cleanup logic to remove nftables table if used, or
iptables rules otherwise.
platform: linux: split iptables helpers on bootstrap/cleanup2025-09-27T10:52:30Zdilluti0nhskimse1@gmail.com2025-09-27T10:52:30Zurn:sha1:f4879e8eadb944f15b89f12de50e9454cde4c16c