| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
| |
Introduce minimal iptables wrapper.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
| |
Initialize log_level from DEFAULT_LOG_LEVEL instead of duplicated
cfg(debug_assertions) branches in parse_args_1().
|
| | |
|
| | |
|
| |
|
|
|
| |
Move option parsing to opt.rs and packet handling to pkt.rs from
main.rs
|
| |
|
|
|
|
| |
- Extend split_packet_0 to optionally override TCP checksum.
- Compute L3 header length for IPv4/IPv6 and patch checksum field when requested.
- Wire fake_clienthello to set checksum to 0 when fake_badsum() is enabled.
|
| |
|
|
| |
For --fake-badsum work; Anyway, it is already calculated
|
| | |
|
| |
|
|
| |
Fake was enabled by default.....
|
| |
|
|
| |
Log runtime options on startup
|
| |
|
|
|
| |
- Add --fake flag to enable fake ClientHello injection
- Add --fake-ttl option to override TTL of fake packets
|
| |
|
|
| |
Introduce send_segment abstraction
|
| |
|
|
|
| |
- linux: fix infinite NFQUEUE loop by marking injected packets
- windows: by marking packet to impostor
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
| |
Introduce exec_process() to handle external command execution, stdin
piping, and error reporting. Now cleanup() and apply_nft_rules() call
exec_process() to call modprobe, nft respectively.
This improves error handling for cleanup xt_u32.
|
| |
|
|
|
| |
Do not log errors if cleanup fails during startup.
Retain error logging for cleanup failures on shutdown.
|
| |
|
|
|
| |
nftables-rs didn’t fit use case, so it was decoupled, and logging was
improved.
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
`CloseAction::Uninstall` triggers ERROR_INVALID_NAME (0x8007007B) on Windows,
likely due to the crate passing a non–NUL-terminated "WinDivert" string to
`OpenServiceA`. For now, skip uninstallation and just close the handle
normally. Added a FIXME comment with details.
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
| |
Add additional nftables match expressions to detect TLS records
(ContentType 0x16 = Handshake): and specifically ClientHello
(HandshakeType 0x01):. Packets matching this pattern are queued to
NFQUEUE. Mark xt_u32 as supported when nftables filtering is
successfully applied.
|
| |
|
|
|
|
|
|
|
|
| |
Introduce nftables rules under a dedicated "dpibreak" table and
chain. Traffic on TCP port 443 is queued using NFQUEUE. If nftables
is not supported, fall back to the existing iptables-based rules
for both IPv4 and IPv6.
Also update cleanup logic to remove nftables table if used, or
iptables rules otherwise.
|
| | |
|
| |
|
|
|
|
|
| |
* Extracted: repeated split/send/sleep logic from `handle_packet` into
new `split_packet_1` function for clarity and reuse.
* Simplifies: `handle_packet` by replacing manual steps with a single
call.
|
| |
|
|
| |
This removes unnecessary allocations per packet handling.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* Introduce: `splash!` macro in `log.rs` to print startup messages
conditionally, based on `--no-splash` flag.
* Move: `NO_SPLASH` management into `log.rs` with helper
functions: (`set_no_splash`, `no_splash`).
* Remove: old `splash()` function in `main.rs` and replace with
`splash!` macro usage.
* Set: default `LogLevel` according to build profile (Debug → Debug,
Release → Warning).
* Print: unified startup messages across Linux and Windows, including
`MESSAGE_AT_RUN`.
|
| | |
|
| | |
|
| |
|
|
| |
* Use: Cargo.toml inside on program
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Introduce: `DEFAULT_LOG_LEVEL` and `LOG_LEVEL_OVERRIDE` (OnceLock)
in log.rs.
* Add: `set_log_level()` and `current_log_level()`; gate defaults by
`debug_assertions`.
* Implement: `FromStr` for `LogLevel` with a proper error
type (`ParseLogLevelError`).
* Update: `log_println!` to respect `current_log_level()` and use
`format_args!`.
* Extend: CLI: `--loglevel <debug|info|warning|error>` and reflect it
in `usage()`.
* Replace: ad-hoc prints with `log_println!` and plumb parsed level
into `set_log_level`.
|
| |
|
|
|
|
| |
* Remove: unused `Fatal` variant from `LogLevel`.
* Update: comment on `Error` to indicate it represents unrecoverable
errors.
|
| |
|
|
|
|
|
|
|
| |
* Set: `LOG_LEVEL` to `Debug` in debug builds and `Warning` in release
builds via `#[cfg(debug_assertions)]`.
* Replace: direct `println!` calls with `log_println!` for packet
handling, warning messages, and argument parsing errors.
* Ensures: consistent log formatting and respects the global log level
configuration across the codebase.
|
| |
|
|
|
|
|
|
|
| |
Introduce `EnsureCleanup` struct with a `Drop` implementation that
calls `platform::cleanup()`. This guarantees cleanup is always
performed after a successful bootstrap, regardless of how execution
exits. Error handling is centralized in `main()`, where errors are
logged once with their cause chain, and the process exits with the
appropriate status code.
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
| |
Define the TCP:443 outbound filter as a constant and reuse it in
WinDivert::network. Add a log message when the handle is successfully
constructed for better visibility during runtime.
|
| | |
|
| | |
|