489f16e462
Added forgotten file, fixed CI.
2026-04-06 02:40:45 +02:00
f4c8b1fe42
Updated the CI for releases.
2026-04-06 02:28:56 +02:00
b01ade19b1
Fixed new sync.
2026-04-06 02:18:23 +02:00
9bea173f21
Initial sync made a lot faster.
2026-04-05 12:13:30 +02:00
ef573436d9
Updated dependencies.
2026-04-04 16:24:21 +02:00
d86fb6916f
Disabled 0x20 encoding for NS queries.
2026-04-04 16:19:58 +02:00
5044064f6c
Fixed 0x20 encoding in cache.
2026-04-04 15:49:16 +02:00
c90458eaaf
Fixed #411 (very big DNS result over DoH).
2026-04-04 15:37:25 +02:00
cfb3cf6cf8
Added parsing of bare IPs for forwarders in config.
2026-03-29 18:55:59 +02:00
c8fa174ac0
Added adaptive RTT-based server selection for forwarders too.
2026-03-29 18:43:55 +02:00
9624484b29
Added adaptive NS server selection with RTT banding.
2026-03-29 18:15:06 +02:00
eee73be58e
Fixed old test.
2026-03-20 11:38:19 +01:00
eb30037f53
Fixed bug with TXT parsing.
2026-03-20 11:13:00 +01:00
2e1f05cadb
Implemented memory limit for DNS cache.
2026-01-05 16:50:20 +01:00
09c1cd5ddc
Updated styles, adding dark theme.
2026-01-05 15:43:30 +01:00
bb162bccee
Fixed Windows build.
2025-10-29 16:54:29 +01:00
d1bf9163f7
Merge pull request #397 from Revertron/feature/tray-icon
...
Added tray icon and ability to start ALFIS with hidden UI, shown by tray icon actions.
2025-10-29 16:41:39 +01:00
7c11c7fbd7
Tested and fixed tray icon on Linux.
2025-10-29 16:39:44 +01:00
8f4cbf7dc0
Added tray icon and ability to run UI hidden, but shown by tray icon actions.
2025-10-29 16:01:41 +01:00
bb3a33c103
Tuned HTTPs client for DoH.
2025-10-29 15:59:19 +01:00
0835df14ac
Disabled DevTools & context menu in release build.
2025-10-28 23:08:49 +01:00
6e5b64545e
Made some ureq trace logs silent.
2025-10-28 22:55:20 +01:00
f35dc56598
Made DNS server start earlier. Made Windows service more robust.
2025-10-28 22:16:56 +01:00
71674e3de8
Fixes for CI, for future releases.
2025-10-28 16:31:05 +01:00
4f2aef91c0
Added support for HTTPS (65) DNS record type.
2025-10-28 15:25:59 +01:00
6950600bdd
On some Linux machines ALFIS is unable to get primary monitor (what do you expect from Linux?). Fixed that.
2025-10-28 13:24:34 +01:00
a29a6190fb
Fix DNS domain name case preservation and DNS 0x20 encoding issues.
...
Fixed DNS 0x20 encoding bug in worker threads and removed automatic lowercasing in DNS buffer parsing to preserve case from authoritative sources. Implemented case-insensitive lookups for cache and blockchain while ensuring restoration of the original client query case in all response paths instead of returning randomized DNS 0x20 case from upstream servers.
2025-10-28 13:11:56 +01:00
b10402ee1e
Updated README.
2025-10-28 00:25:32 +01:00
dbf3df9ff9
Updated CI for release building.
2025-10-27 22:55:59 +01:00
6b3f88f6bb
Updated dependencies. Updated adblock.txt.
2025-10-27 22:44:24 +01:00
50569d2a20
Merge pull request #395 from Revertron/move_to_wry
...
Migrated UI from unsupported webview crate to wry.
2025-10-27 22:39:44 +01:00
664715f02b
CI fixes.
2025-10-27 22:18:36 +01:00
8e11f63479
Fixed centering of the window.
2025-10-27 22:09:11 +01:00
19f67e8b77
Moved from webview crate to "wry" to fix Linux's inability to maintain compatibility.
2025-10-27 20:36:37 +01:00
8a0677caf2
Added automatic config migration for incorrect test port 42440 → 4244
...
Automatically fixes net.listen port for public nodes that have the incorrect
test port 42440. Migration preserves comments and formatting by using text
replacement instead of TOML re-serialization.
2025-10-27 14:56:32 +01:00
5de0341ab4
Enhanced DNS security with ephemeral ports and DNS 0x20 encoding
...
Significantly improve DNS client security against cache poisoning attacks through multiple defense layers:
Security Improvements:
- Bind UDP sockets to OS-assigned ephemeral ports (0.0.0.0:0) instead of predictable random ports, eliminating port-based attack vectors
- Implement DNS 0x20 encoding with strict case validation, adding 10-15 bits of entropy per query by randomizing domain name case
- Randomize transaction ID starting point using AtomicU16 for better entropy distribution
Attack difficulty increased from ~16 bits (65K attempts) to ~42-47 bits
(4.4-140 trillion attempts), making spoofing 1,000x to 32,000x harder.
Configuration:
- Add 'enable_0x20' option to DNS settings (default: true)
- Users can disable for compatibility with legacy resolvers if needed
- Feature is configurable via alfis.toml
2025-10-27 14:39:47 +01:00
d3cdf6ea76
Fixed warnings in some tests.
2025-10-27 01:37:38 +01:00
81f5568957
Updated all dependencies.
2025-10-27 01:22:02 +01:00
61f2d89ef1
Fixed GLUE records return on NS requests.
2025-10-23 22:48:48 +02:00
429563eee9
Another try to build for macOS.
2025-10-23 21:46:16 +02:00
fc7360ea00
Another try to build for macOS.
2025-10-23 21:43:22 +02:00
914e8b6d67
Another try to build for macOS.
2025-10-23 21:35:45 +02:00
4169ede074
Added DNS timeouts here and there.
...
Fixed macOS and Ubuntu pipelines.
2025-10-23 21:26:03 +02:00
d2b7080c96
Many DNS fixes!
2025-10-22 22:55:58 +02:00
a9d7ec1093
Merge pull request #375 from WaffleLapkin/patch-2
...
Correctly scale nixos logo in readme
2025-02-07 13:02:41 +01:00
8ad1e53375
correctly scale nix logo in readme
2025-02-06 17:51:26 +01:00
3f36f4ede3
Small DNS fix.
2024-11-18 12:43:18 +01:00
4945f18fae
A lot of DNS fixes.
2024-11-18 00:44:04 +01:00
2f7df4859d
Small changes, updated dependencies.
2024-11-17 13:39:23 +01:00
95188ec0bd
Updated readme.
2024-07-29 20:04:59 +02:00
Revertron
Revertron
Revertron
waffle