Commit Graph

723 Commits

Author SHA1 Message Date
Revertron c8fa174ac0 Added adaptive RTT-based server selection for forwarders too. 2026-03-29 18:43:55 +02:00
Revertron 9624484b29 Added adaptive NS server selection with RTT banding. 2026-03-29 18:15:06 +02:00
Revertron eee73be58e Fixed old test. 2026-03-20 11:38:19 +01:00
Revertron eb30037f53 Fixed bug with TXT parsing. 2026-03-20 11:13:00 +01:00
Revertron 2e1f05cadb Implemented memory limit for DNS cache. 2026-01-05 16:50:20 +01:00
Revertron 09c1cd5ddc Updated styles, adding dark theme. 2026-01-05 15:43:30 +01:00
Revertron bb162bccee Fixed Windows build. 2025-10-29 16:54:29 +01:00
Revertron d1bf9163f7 Merge pull request #397 from Revertron/feature/tray-icon
Added tray icon and ability to start ALFIS with hidden UI, shown by tray icon actions.
2025-10-29 16:41:39 +01:00
Revertron 7c11c7fbd7 Tested and fixed tray icon on Linux. 2025-10-29 16:39:44 +01:00
Revertron 8f4cbf7dc0 Added tray icon and ability to run UI hidden, but shown by tray icon actions. 2025-10-29 16:01:41 +01:00
Revertron bb3a33c103 Tuned HTTPs client for DoH. 2025-10-29 15:59:19 +01:00
Revertron 0835df14ac Disabled DevTools & context menu in release build. 2025-10-28 23:08:49 +01:00
Revertron 6e5b64545e Made some ureq trace logs silent. 2025-10-28 22:55:20 +01:00
Revertron f35dc56598 Made DNS server start earlier. Made Windows service more robust. 2025-10-28 22:16:56 +01:00
Revertron 71674e3de8 Fixes for CI, for future releases. 2025-10-28 16:31:05 +01:00
Revertron 4f2aef91c0 Added support for HTTPS (65) DNS record type. 2025-10-28 15:25:59 +01:00
Revertron 6950600bdd On some Linux machines ALFIS is unable to get primary monitor (what do you expect from Linux?). Fixed that. 2025-10-28 13:24:34 +01:00
Revertron a29a6190fb Fix DNS domain name case preservation and DNS 0x20 encoding issues.
Fixed DNS 0x20 encoding bug in worker threads and removed automatic lowercasing in DNS buffer parsing to preserve case from authoritative sources. Implemented case-insensitive lookups for cache and blockchain while ensuring restoration of the original client query case in all response paths instead of returning randomized DNS 0x20 case from upstream servers.
2025-10-28 13:11:56 +01:00
Revertron b10402ee1e Updated README. 2025-10-28 00:25:32 +01:00
Revertron dbf3df9ff9 Updated CI for release building. 2025-10-27 22:55:59 +01:00
Revertron 6b3f88f6bb Updated dependencies. Updated adblock.txt. 2025-10-27 22:44:24 +01:00
Revertron 50569d2a20 Merge pull request #395 from Revertron/move_to_wry
Migrated UI from unsupported webview crate to wry.
2025-10-27 22:39:44 +01:00
Revertron 664715f02b CI fixes. 2025-10-27 22:18:36 +01:00
Revertron 8e11f63479 Fixed centering of the window. 2025-10-27 22:09:11 +01:00
Revertron 19f67e8b77 Moved from webview crate to "wry" to fix Linux's inability to maintain compatibility. 2025-10-27 20:36:37 +01:00
Revertron 8a0677caf2 Added automatic config migration for incorrect test port 42440 → 4244
Automatically fixes net.listen port for public nodes that have the incorrect
test port 42440. Migration preserves comments and formatting by using text
replacement instead of TOML re-serialization.
2025-10-27 14:56:32 +01:00
Revertron 5de0341ab4 Enhanced DNS security with ephemeral ports and DNS 0x20 encoding
Significantly improve DNS client security against cache poisoning attacks through multiple defense layers:

Security Improvements:
- Bind UDP sockets to OS-assigned ephemeral ports (0.0.0.0:0) instead of predictable random ports, eliminating port-based attack vectors
- Implement DNS 0x20 encoding with strict case validation, adding 10-15 bits of entropy per query by randomizing domain name case
- Randomize transaction ID starting point using AtomicU16 for better entropy distribution

Attack difficulty increased from ~16 bits (65K attempts) to ~42-47 bits
(4.4-140 trillion attempts), making spoofing 1,000x to 32,000x harder.

Configuration:
- Add 'enable_0x20' option to DNS settings (default: true)
- Users can disable for compatibility with legacy resolvers if needed
- Feature is configurable via alfis.toml
2025-10-27 14:39:47 +01:00
Revertron d3cdf6ea76 Fixed warnings in some tests. 2025-10-27 01:37:38 +01:00
Revertron 81f5568957 Updated all dependencies. 2025-10-27 01:22:02 +01:00
Revertron 61f2d89ef1 Fixed GLUE records return on NS requests. 2025-10-23 22:48:48 +02:00
Revertron 429563eee9 Another try to build for macOS. 2025-10-23 21:46:16 +02:00
Revertron fc7360ea00 Another try to build for macOS. 2025-10-23 21:43:22 +02:00
Revertron 914e8b6d67 Another try to build for macOS. 2025-10-23 21:35:45 +02:00
Revertron 4169ede074 Added DNS timeouts here and there.
Fixed macOS and Ubuntu pipelines.
2025-10-23 21:26:03 +02:00
Revertron d2b7080c96 Many DNS fixes! 2025-10-22 22:55:58 +02:00
Revertron a9d7ec1093 Merge pull request #375 from WaffleLapkin/patch-2
Correctly scale nixos logo in readme
2025-02-07 13:02:41 +01:00
waffle 8ad1e53375 correctly scale nix logo in readme 2025-02-06 17:51:26 +01:00
Revertron 3f36f4ede3 Small DNS fix. 2024-11-18 12:43:18 +01:00
Revertron 4945f18fae A lot of DNS fixes. 2024-11-18 00:44:04 +01:00
Revertron 2f7df4859d Small changes, updated dependencies. 2024-11-17 13:39:23 +01:00
Revertron 95188ec0bd Updated readme. 2024-07-29 20:04:59 +02:00
Revertron dd12397c39 Removed mips and mipsel from build matrix. 2024-07-13 13:39:22 +02:00
Revertron 7c5cc1879b Another fix of CI for releases. 2024-07-12 15:02:32 +02:00
Revertron 083d304e61 Last (I hope) fix of CI for releases. 2024-07-12 14:50:50 +02:00
Revertron b4f68c6a05 Another fix of CI for releases. 2024-07-12 14:42:20 +02:00
Revertron eebd53b177 Fixed linux builds. 2024-07-12 14:31:31 +02:00
Revertron 38a0239f19 Fixed CI for releases. 2024-07-12 13:50:20 +02:00
Revertron e7eb383a35 Small network fix. 2024-07-10 22:46:44 +02:00
Revertron de46148e01 Fixed UI for TXT records, updated all dependencies, made better connectivity, added log info to network thread. 2024-07-10 20:15:33 +02:00
Revertron 28431ec053 Merge pull request #365 from rex4539/pipes
Fix RUSTSEC-2024-0019
2024-03-09 01:53:57 +01:00