Commit Graph

391 Commits

Author SHA1 Message Date
Sweetbread 071567fa73 Fix NixOS GUI issues
Fixes #380, #414
2026-04-13 09:27:21 +03:00
Revertron 489f16e462 Added forgotten file, fixed CI. 2026-04-06 02:40:45 +02:00
Revertron b01ade19b1 Fixed new sync. 2026-04-06 02:18:23 +02:00
Revertron 9bea173f21 Initial sync made a lot faster. 2026-04-05 12:13:30 +02:00
Revertron d86fb6916f Disabled 0x20 encoding for NS queries. 2026-04-04 16:19:58 +02:00
Revertron 5044064f6c Fixed 0x20 encoding in cache. 2026-04-04 15:49:16 +02:00
Revertron c90458eaaf Fixed #411 (very big DNS result over DoH). 2026-04-04 15:37:25 +02:00
Revertron cfb3cf6cf8 Added parsing of bare IPs for forwarders in config. 2026-03-29 18:55:59 +02:00
Revertron c8fa174ac0 Added adaptive RTT-based server selection for forwarders too. 2026-03-29 18:43:55 +02:00
Revertron 9624484b29 Added adaptive NS server selection with RTT banding. 2026-03-29 18:15:06 +02:00
Revertron eee73be58e Fixed old test. 2026-03-20 11:38:19 +01:00
Revertron eb30037f53 Fixed bug with TXT parsing. 2026-03-20 11:13:00 +01:00
Revertron 2e1f05cadb Implemented memory limit for DNS cache. 2026-01-05 16:50:20 +01:00
Revertron 09c1cd5ddc Updated styles, adding dark theme. 2026-01-05 15:43:30 +01:00
Revertron bb162bccee Fixed Windows build. 2025-10-29 16:54:29 +01:00
Revertron 7c11c7fbd7 Tested and fixed tray icon on Linux. 2025-10-29 16:39:44 +01:00
Revertron 8f4cbf7dc0 Added tray icon and ability to run UI hidden, but shown by tray icon actions. 2025-10-29 16:01:41 +01:00
Revertron bb3a33c103 Tuned HTTPs client for DoH. 2025-10-29 15:59:19 +01:00
Revertron 0835df14ac Disabled DevTools & context menu in release build. 2025-10-28 23:08:49 +01:00
Revertron 6e5b64545e Made some ureq trace logs silent. 2025-10-28 22:55:20 +01:00
Revertron f35dc56598 Made DNS server start earlier. Made Windows service more robust. 2025-10-28 22:16:56 +01:00
Revertron 4f2aef91c0 Added support for HTTPS (65) DNS record type. 2025-10-28 15:25:59 +01:00
Revertron 6950600bdd On some Linux machines ALFIS is unable to get primary monitor (what do you expect from Linux?). Fixed that. 2025-10-28 13:24:34 +01:00
Revertron a29a6190fb Fix DNS domain name case preservation and DNS 0x20 encoding issues.
Fixed DNS 0x20 encoding bug in worker threads and removed automatic lowercasing in DNS buffer parsing to preserve case from authoritative sources. Implemented case-insensitive lookups for cache and blockchain while ensuring restoration of the original client query case in all response paths instead of returning randomized DNS 0x20 case from upstream servers.
2025-10-28 13:11:56 +01:00
Revertron 8e11f63479 Fixed centering of the window. 2025-10-27 22:09:11 +01:00
Revertron 19f67e8b77 Moved from webview crate to "wry" to fix Linux's inability to maintain compatibility. 2025-10-27 20:36:37 +01:00
Revertron 8a0677caf2 Added automatic config migration for incorrect test port 42440 → 4244
Automatically fixes net.listen port for public nodes that have the incorrect
test port 42440. Migration preserves comments and formatting by using text
replacement instead of TOML re-serialization.
2025-10-27 14:56:32 +01:00
Revertron 5de0341ab4 Enhanced DNS security with ephemeral ports and DNS 0x20 encoding
Significantly improve DNS client security against cache poisoning attacks through multiple defense layers:

Security Improvements:
- Bind UDP sockets to OS-assigned ephemeral ports (0.0.0.0:0) instead of predictable random ports, eliminating port-based attack vectors
- Implement DNS 0x20 encoding with strict case validation, adding 10-15 bits of entropy per query by randomizing domain name case
- Randomize transaction ID starting point using AtomicU16 for better entropy distribution

Attack difficulty increased from ~16 bits (65K attempts) to ~42-47 bits
(4.4-140 trillion attempts), making spoofing 1,000x to 32,000x harder.

Configuration:
- Add 'enable_0x20' option to DNS settings (default: true)
- Users can disable for compatibility with legacy resolvers if needed
- Feature is configurable via alfis.toml
2025-10-27 14:39:47 +01:00
Revertron d3cdf6ea76 Fixed warnings in some tests. 2025-10-27 01:37:38 +01:00
Revertron 81f5568957 Updated all dependencies. 2025-10-27 01:22:02 +01:00
Revertron 61f2d89ef1 Fixed GLUE records return on NS requests. 2025-10-23 22:48:48 +02:00
Revertron 4169ede074 Added DNS timeouts here and there.
Fixed macOS and Ubuntu pipelines.
2025-10-23 21:26:03 +02:00
Revertron d2b7080c96 Many DNS fixes! 2025-10-22 22:55:58 +02:00
Revertron 3f36f4ede3 Small DNS fix. 2024-11-18 12:43:18 +01:00
Revertron 4945f18fae A lot of DNS fixes. 2024-11-18 00:44:04 +01:00
Revertron 2f7df4859d Small changes, updated dependencies. 2024-11-17 13:39:23 +01:00
Revertron e7eb383a35 Small network fix. 2024-07-10 22:46:44 +02:00
Revertron de46148e01 Fixed UI for TXT records, updated all dependencies, made better connectivity, added log info to network thread. 2024-07-10 20:15:33 +02:00
Revertron 080d4f3eb2 More dependencies updates. 2024-01-11 01:49:06 +01:00
Revertron a92799fb2d Updated crypto dependencies. 2024-01-11 01:32:18 +01:00
Revertron b74b0e00a0 Added a debug system to catch some deadlock. 2023-12-03 02:11:40 +01:00
Revertron 709125752f Fixed linux builds. 2023-10-04 00:54:08 +02:00
Revertron aa500b3ad8 Added Windows service mode! 2023-06-08 00:07:15 +02:00
Revertron 09303149d9 Attempt to eliminate stale peers. 2023-05-27 13:09:06 +02:00
Revertron e2f0fdf2d8 Fixed TLSA records resolution. 2023-03-27 22:58:40 +02:00
Revertron 8d36119332 Small UI fix. 2023-03-18 18:15:04 +01:00
Revertron 829ee753a0 Stability fixes. 2023-03-18 18:07:30 +01:00
Revertron 167b6db426 Updated sqlite dependency. 2023-03-01 13:57:08 +01:00
Revertron 748ec8273f Updated dependencies. 2023-03-01 13:18:18 +01:00
Revertron 17456e7a6c Optimized failing nodes banning. 2023-01-30 15:19:36 +01:00