dpibreak.git/src, branch v0.0.6System-wide DPI circumvention with minimal configuration
http://git.dilluti0n.com/dpibreak.git/atom?h=v0.0.62025-12-22T05:26:25Zlinux: ignore cleanup errors at startup2025-12-22T05:26:25Zdilluti0nhskimse1@gmail.com2025-12-22T05:26:25Zurn:sha1:1245a0f138ac9536835d1f56260aae38d2734631
Do not log errors if cleanup fails during startup.
Retain error logging for cleanup failures on shutdown.
linux: switch to apply_nft_rules() from nftables-rs for rule setting2025-10-29T07:33:37Zdilluti0nhskimse1@gmail.com2025-10-29T07:24:05Zurn:sha1:40dbbcc52ab851586fcabf7316301bd3a755f907
nftables-rs didn’t fit use case, so it was decoupled, and logging was
improved.
linux: implement apply_nft_rules() to log output sanely2025-10-29T07:33:36Zdilluti0nhskimse1@gmail.com2025-10-29T06:46:58Zurn:sha1:02b0b6b6950a3add1e650e35a1d5d3592cce8d71linux: add option `--nft-command`2025-10-29T07:09:36Zdilluti0nhskimse1@gmail.com2025-10-29T06:46:27Zurn:sha1:ea6e2e1d08becc8570b53fff644bc35840ca9203windows: avoid ERR_INVALID_NAME when uninstalling WinDivert2025-10-06T07:08:02Zdilluti0nhskimse1@gmail.com2025-10-06T07:05:15Zurn:sha1:b65ee42e2e420a2a86491a43b129baede4dd5289
`CloseAction::Uninstall` triggers ERROR_INVALID_NAME (0x8007007B) on Windows,
likely due to the crate passing a non–NUL-terminated "WinDivert" string to
`OpenServiceA`. For now, skip uninstallation and just close the handle
normally. Added a FIXME comment with details.
platform: windows: close handle and uninstall driver sanely2025-10-06T05:59:45Zdilluti0nhskimse1@gmail.com2025-10-06T05:59:45Zurn:sha1:8b1b002bf479dba7e0b3e143f022ef34aecc7707platform: windows: only divert clienthello packet to userspace2025-10-03T09:33:32Zdilluti0nhskimse1@gmail.com2025-10-03T09:33:32Zurn:sha1:980917bcf0c170a8b43082b16f5b3e288ee2e80cplatform: linux: filter only TLS ClientHello packets on nftables2025-10-03T06:51:36Zdilluti0nhskimse1@gmail.com2025-10-03T06:48:03Zurn:sha1:67c92fb447b12f9e5e1fee0c96b593e6aa8451b3
Add additional nftables match expressions to detect TLS records
(ContentType 0x16 = Handshake): and specifically ClientHello
(HandshakeType 0x01):. Packets matching this pattern are queued to
NFQUEUE. Mark xt_u32 as supported when nftables filtering is
successfully applied.
platform: linux: add nftables support with iptables fallback2025-10-03T06:28:57Zdilluti0nhskimse1@gmail.com2025-10-03T06:28:57Zurn:sha1:e4529084b42e6374af4e735a3c9023d4492b9dc0
Introduce nftables rules under a dedicated "dpibreak" table and
chain. Traffic on TCP port 443 is queued using NFQUEUE. If nftables
is not supported, fall back to the existing iptables-based rules
for both IPv4 and IPv6.
Also update cleanup logic to remove nftables table if used, or
iptables rules otherwise.
platform: linux: split iptables helpers on bootstrap/cleanup2025-09-27T10:52:30Zdilluti0nhskimse1@gmail.com2025-09-27T10:52:30Zurn:sha1:f4879e8eadb944f15b89f12de50e9454cde4c16c