dpibreak.git/src/platform, branch v0.3.0System-wide DPI circumvention with minimal configuration
http://git.dilluti0n.com/dpibreak.git/atom?h=v0.3.02026-01-23T06:55:09Zwindows: extend WinDivert filter for --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T05:41:11Zurn:sha1:ec0cd64df8f834211673c0116586b0a3b2633b32
Build WinDivert filter at runtime:
- Default: outbound TLS ClientHello packets
- --fake-autottl: also capture inbound SYN/ACK from tcp sport 443
Keep !impostor to avoid recapture.
linux: iptables: implement SYN/ACK capture on --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T04:12:59Zurn:sha1:6780cc913016e0e567b20518a3577f966417b447
- Add mangle/INPUT jump to DPIBREAK
- Queue tcp sport 443 SYN/ACK packets (NFQUEUE --queue-bypass)
- Cleanup removes INPUT jump as well
linux: nftables: queue SYN/ACK on --fake-autottl2026-01-23T06:55:09Zdilluti0nhskimse1@gmail.com2026-01-20T03:34:13Zurn:sha1:a1618d0f7b576e55230ef709af750f2933a65db4
- simplify nftables rules by removing DPIBREAK chain
linux: refactor rules backend into iptables/nftables modules2026-01-22T15:18:43Zdilluti0nhskimse1@gmail.com2026-01-20T05:23:56Zurn:sha1:7555c95ccd072335762cf2248edcfa83711c6437
Split iptables and nftables rule management into dedicated modules.
Keep linux.rs focused on shared helpers and rule dispatch.
(cherry picked from commit 60c0011ca0cf5a463056fca17f2f747e762e19f9)
linux: drop iptables crate (regex dep) to reduce binary size2026-01-17T15:28:22Zdilluti0nhskimse1@gmail.com2026-01-17T15:28:22Zurn:sha1:5658f5287dec0a6f300382b1de96c900e7edf174
Introduce minimal iptables wrapper.
Refactor main.rs; modulize opt.rs and pkt.rs2026-01-16T07:29:31Zdilluti0nhskimse1@gmail.com2026-01-16T06:22:14Zurn:sha1:0dffd9a4df59b503eaaf26524f17f58831d01eec
Move option parsing to opt.rs and packet handling to pkt.rs from
main.rs
windows: do not recalculate tcp checksum when send_to_raw2026-01-16T04:12:09Zdilluti0nhskimse1@gmail.com2026-01-14T11:26:57Zurn:sha1:27a0899098e908c3fab4fbe026563057b1f08599
For --fake-badsum work; Anyway, it is already calculated
Normalize option handling and OPT_* naming2025-12-30T11:00:07Zdilluti0nhskimse1@gmail.com2025-12-30T11:00:07Zurn:sha1:9e38b2c679ee5a3ab9acad9a0ab53aedeb492c26
Log runtime options on startup
Prevent infinite loop on packet injection/filtering2025-12-30T08:15:22Zdilluti0nhskimse1@gmail.com2025-12-29T12:41:16Zurn:sha1:08d97bba88329315040bd4820ab4d799ee537181
- linux: fix infinite NFQUEUE loop by marking injected packets
- windows: by marking packet to impostor
linux: extract process execution into `exec_process` helper2025-12-29T09:07:58Zdilluti0nhskimse1@gmail.com2025-12-29T08:59:47Zurn:sha1:7bfef8fafc5369f65bd6f12c83e89f3443b923c0
Introduce exec_process() to handle external command execution, stdin
piping, and error reporting. Now cleanup() and apply_nft_rules() call
exec_process() to call modprobe, nft respectively.
This improves error handling for cleanup xt_u32.