a29a6190fb
Fix DNS domain name case preservation and DNS 0x20 encoding issues.
...
Fixed DNS 0x20 encoding bug in worker threads and removed automatic lowercasing in DNS buffer parsing to preserve case from authoritative sources. Implemented case-insensitive lookups for cache and blockchain while ensuring restoration of the original client query case in all response paths instead of returning randomized DNS 0x20 case from upstream servers.
2025-10-28 13:11:56 +01:00
b10402ee1e
Updated README.
2025-10-28 00:25:32 +01:00
dbf3df9ff9
Updated CI for release building.
2025-10-27 22:55:59 +01:00
6b3f88f6bb
Updated dependencies. Updated adblock.txt.
2025-10-27 22:44:24 +01:00
50569d2a20
Merge pull request #395 from Revertron/move_to_wry
...
Migrated UI from unsupported webview crate to wry.
2025-10-27 22:39:44 +01:00
664715f02b
CI fixes.
2025-10-27 22:18:36 +01:00
8e11f63479
Fixed centering of the window.
2025-10-27 22:09:11 +01:00
19f67e8b77
Moved from webview crate to "wry" to fix Linux's inability to maintain compatibility.
2025-10-27 20:36:37 +01:00
8a0677caf2
Added automatic config migration for incorrect test port 42440 → 4244
...
Automatically fixes net.listen port for public nodes that have the incorrect
test port 42440. Migration preserves comments and formatting by using text
replacement instead of TOML re-serialization.
2025-10-27 14:56:32 +01:00
5de0341ab4
Enhanced DNS security with ephemeral ports and DNS 0x20 encoding
...
Significantly improve DNS client security against cache poisoning attacks through multiple defense layers:
Security Improvements:
- Bind UDP sockets to OS-assigned ephemeral ports (0.0.0.0:0) instead of predictable random ports, eliminating port-based attack vectors
- Implement DNS 0x20 encoding with strict case validation, adding 10-15 bits of entropy per query by randomizing domain name case
- Randomize transaction ID starting point using AtomicU16 for better entropy distribution
Attack difficulty increased from ~16 bits (65K attempts) to ~42-47 bits
(4.4-140 trillion attempts), making spoofing 1,000x to 32,000x harder.
Configuration:
- Add 'enable_0x20' option to DNS settings (default: true)
- Users can disable for compatibility with legacy resolvers if needed
- Feature is configurable via alfis.toml
2025-10-27 14:39:47 +01:00
d3cdf6ea76
Fixed warnings in some tests.
2025-10-27 01:37:38 +01:00
81f5568957
Updated all dependencies.
2025-10-27 01:22:02 +01:00
61f2d89ef1
Fixed GLUE records return on NS requests.
2025-10-23 22:48:48 +02:00
429563eee9
Another try to build for macOS.
2025-10-23 21:46:16 +02:00
fc7360ea00
Another try to build for macOS.
2025-10-23 21:43:22 +02:00
914e8b6d67
Another try to build for macOS.
2025-10-23 21:35:45 +02:00
4169ede074
Added DNS timeouts here and there.
...
Fixed macOS and Ubuntu pipelines.
2025-10-23 21:26:03 +02:00
d2b7080c96
Many DNS fixes!
2025-10-22 22:55:58 +02:00
a9d7ec1093
Merge pull request #375 from WaffleLapkin/patch-2
...
Correctly scale nixos logo in readme
2025-02-07 13:02:41 +01:00
8ad1e53375
correctly scale nix logo in readme
2025-02-06 17:51:26 +01:00
3f36f4ede3
Small DNS fix.
2024-11-18 12:43:18 +01:00
4945f18fae
A lot of DNS fixes.
2024-11-18 00:44:04 +01:00
2f7df4859d
Small changes, updated dependencies.
2024-11-17 13:39:23 +01:00
95188ec0bd
Updated readme.
2024-07-29 20:04:59 +02:00
dd12397c39
Removed mips and mipsel from build matrix.
2024-07-13 13:39:22 +02:00
7c5cc1879b
Another fix of CI for releases.
2024-07-12 15:02:32 +02:00
083d304e61
Last (I hope) fix of CI for releases.
2024-07-12 14:50:50 +02:00
b4f68c6a05
Another fix of CI for releases.
2024-07-12 14:42:20 +02:00
eebd53b177
Fixed linux builds.
2024-07-12 14:31:31 +02:00
38a0239f19
Fixed CI for releases.
2024-07-12 13:50:20 +02:00
e7eb383a35
Small network fix.
2024-07-10 22:46:44 +02:00
de46148e01
Fixed UI for TXT records, updated all dependencies, made better connectivity, added log info to network thread.
2024-07-10 20:15:33 +02:00
28431ec053
Merge pull request #365 from rex4539/pipes
...
Fix RUSTSEC-2024-0019
2024-03-09 01:53:57 +01:00
9bd80f5115
Fix RUSTSEC-2024-0019
2024-03-08 22:11:22 +02:00
080d4f3eb2
More dependencies updates.
2024-01-11 01:49:06 +01:00
a92799fb2d
Updated crypto dependencies.
2024-01-11 01:32:18 +01:00
b74b0e00a0
Added a debug system to catch some deadlock.
2023-12-03 02:11:40 +01:00
709125752f
Fixed linux builds.
2023-10-04 00:54:08 +02:00
aa500b3ad8
Added Windows service mode!
2023-06-08 00:07:15 +02:00
09303149d9
Attempt to eliminate stale peers.
2023-05-27 13:09:06 +02:00
e2f0fdf2d8
Fixed TLSA records resolution.
2023-03-27 22:58:40 +02:00
8d36119332
Small UI fix.
2023-03-18 18:15:04 +01:00
829ee753a0
Stability fixes.
2023-03-18 18:07:30 +01:00
167b6db426
Updated sqlite dependency.
2023-03-01 13:57:08 +01:00
748ec8273f
Updated dependencies.
2023-03-01 13:18:18 +01:00
17456e7a6c
Optimized failing nodes banning.
2023-01-30 15:19:36 +01:00
c199a62a04
Optimized network connections (added write timeouts).
2023-01-30 14:40:59 +01:00
da7db8dfa4
Update FUNDING.yml
2022-12-18 10:42:24 +01:00
58e595c759
Merge pull request #320 from wegank/alfis-aarch64-darwin
...
build: fix build on aarch64-darwin
2022-11-13 19:23:42 +01:00
03b461a740
build: fix build on aarch64-darwin
2022-11-11 08:59:13 +01:00
Revertron
Revertron
Revertron
waffle
Dimitris Apostolou
Weijia Wang