cfb3cf6cf8
Added parsing of bare IPs for forwarders in config.
2026-03-29 18:55:59 +02:00
c8fa174ac0
Added adaptive RTT-based server selection for forwarders too.
2026-03-29 18:43:55 +02:00
9624484b29
Added adaptive NS server selection with RTT banding.
2026-03-29 18:15:06 +02:00
eee73be58e
Fixed old test.
2026-03-20 11:38:19 +01:00
eb30037f53
Fixed bug with TXT parsing.
2026-03-20 11:13:00 +01:00
2e1f05cadb
Implemented memory limit for DNS cache.
2026-01-05 16:50:20 +01:00
09c1cd5ddc
Updated styles, adding dark theme.
2026-01-05 15:43:30 +01:00
bb162bccee
Fixed Windows build.
2025-10-29 16:54:29 +01:00
7c11c7fbd7
Tested and fixed tray icon on Linux.
2025-10-29 16:39:44 +01:00
8f4cbf7dc0
Added tray icon and ability to run UI hidden, but shown by tray icon actions.
2025-10-29 16:01:41 +01:00
bb3a33c103
Tuned HTTPs client for DoH.
2025-10-29 15:59:19 +01:00
0835df14ac
Disabled DevTools & context menu in release build.
2025-10-28 23:08:49 +01:00
6e5b64545e
Made some ureq trace logs silent.
2025-10-28 22:55:20 +01:00
f35dc56598
Made DNS server start earlier. Made Windows service more robust.
2025-10-28 22:16:56 +01:00
4f2aef91c0
Added support for HTTPS (65) DNS record type.
2025-10-28 15:25:59 +01:00
6950600bdd
On some Linux machines ALFIS is unable to get primary monitor (what do you expect from Linux?). Fixed that.
2025-10-28 13:24:34 +01:00
a29a6190fb
Fix DNS domain name case preservation and DNS 0x20 encoding issues.
...
Fixed DNS 0x20 encoding bug in worker threads and removed automatic lowercasing in DNS buffer parsing to preserve case from authoritative sources. Implemented case-insensitive lookups for cache and blockchain while ensuring restoration of the original client query case in all response paths instead of returning randomized DNS 0x20 case from upstream servers.
2025-10-28 13:11:56 +01:00
8e11f63479
Fixed centering of the window.
2025-10-27 22:09:11 +01:00
19f67e8b77
Moved from webview crate to "wry" to fix Linux's inability to maintain compatibility.
2025-10-27 20:36:37 +01:00
8a0677caf2
Added automatic config migration for incorrect test port 42440 → 4244
...
Automatically fixes net.listen port for public nodes that have the incorrect
test port 42440. Migration preserves comments and formatting by using text
replacement instead of TOML re-serialization.
2025-10-27 14:56:32 +01:00
5de0341ab4
Enhanced DNS security with ephemeral ports and DNS 0x20 encoding
...
Significantly improve DNS client security against cache poisoning attacks through multiple defense layers:
Security Improvements:
- Bind UDP sockets to OS-assigned ephemeral ports (0.0.0.0:0) instead of predictable random ports, eliminating port-based attack vectors
- Implement DNS 0x20 encoding with strict case validation, adding 10-15 bits of entropy per query by randomizing domain name case
- Randomize transaction ID starting point using AtomicU16 for better entropy distribution
Attack difficulty increased from ~16 bits (65K attempts) to ~42-47 bits
(4.4-140 trillion attempts), making spoofing 1,000x to 32,000x harder.
Configuration:
- Add 'enable_0x20' option to DNS settings (default: true)
- Users can disable for compatibility with legacy resolvers if needed
- Feature is configurable via alfis.toml
2025-10-27 14:39:47 +01:00
d3cdf6ea76
Fixed warnings in some tests.
2025-10-27 01:37:38 +01:00
81f5568957
Updated all dependencies.
2025-10-27 01:22:02 +01:00
61f2d89ef1
Fixed GLUE records return on NS requests.
2025-10-23 22:48:48 +02:00
4169ede074
Added DNS timeouts here and there.
...
Fixed macOS and Ubuntu pipelines.
2025-10-23 21:26:03 +02:00
d2b7080c96
Many DNS fixes!
2025-10-22 22:55:58 +02:00
3f36f4ede3
Small DNS fix.
2024-11-18 12:43:18 +01:00
4945f18fae
A lot of DNS fixes.
2024-11-18 00:44:04 +01:00
2f7df4859d
Small changes, updated dependencies.
2024-11-17 13:39:23 +01:00
e7eb383a35
Small network fix.
2024-07-10 22:46:44 +02:00
de46148e01
Fixed UI for TXT records, updated all dependencies, made better connectivity, added log info to network thread.
2024-07-10 20:15:33 +02:00
080d4f3eb2
More dependencies updates.
2024-01-11 01:49:06 +01:00
a92799fb2d
Updated crypto dependencies.
2024-01-11 01:32:18 +01:00
b74b0e00a0
Added a debug system to catch some deadlock.
2023-12-03 02:11:40 +01:00
709125752f
Fixed linux builds.
2023-10-04 00:54:08 +02:00
aa500b3ad8
Added Windows service mode!
2023-06-08 00:07:15 +02:00
09303149d9
Attempt to eliminate stale peers.
2023-05-27 13:09:06 +02:00
e2f0fdf2d8
Fixed TLSA records resolution.
2023-03-27 22:58:40 +02:00
8d36119332
Small UI fix.
2023-03-18 18:15:04 +01:00
829ee753a0
Stability fixes.
2023-03-18 18:07:30 +01:00
167b6db426
Updated sqlite dependency.
2023-03-01 13:57:08 +01:00
748ec8273f
Updated dependencies.
2023-03-01 13:18:18 +01:00
17456e7a6c
Optimized failing nodes banning.
2023-01-30 15:19:36 +01:00
c199a62a04
Optimized network connections (added write timeouts).
2023-01-30 14:40:59 +01:00
aa246571a7
Fixed unimportant warning, and changed some constants in DoH client.
2022-11-03 17:55:32 +01:00
b3d077c2a0
Fixed max-nodes constant, changed by mistake.
2022-11-03 14:48:23 +01:00
e5657d6802
Reworked DNS-resolver.
2022-11-03 14:46:35 +01:00
287e88c7e2
Updated dependencies.
2022-11-03 13:56:17 +01:00
9bf98214d4
Network optimizations, part 2.
2022-09-06 20:31:01 +02:00
74b84f0e65
Network optimizations.
2022-09-06 19:17:04 +02:00
Revertron
Revertron