Domingo Dirutigliano
0c52014606
minor changes and bug fixes
2026-09-23 11:21:51 +02:00
Domingo Dirutigliano
d94c08293a
added additional tests
2026-09-19 02:17:51 +02:00
Domingo Dirutigliano
440b7c91ec
docs and code minor fixing
2026-09-18 23:01:11 +02:00
Domingo Dirutigliano
e491a14899
improved addr/int selection UI + change llhttp managment
2026-09-13 15:54:56 +02:00
Domingo Dirutigliano
9d2a4dc4bf
additional improves on UDP
2026-09-11 18:53:41 +02:00
Domingo Dirutigliano
9832e449c6
Initial commit for future 5.0.0 version: new UI, proxies and managment
2026-09-10 08:51:08 +02:00
Domingo Dirutigliano
2c3316b036
Harden the no-auth reverse-proxy mode
...
Rename the flag to --unsafe-disable-auth so the risk is visible at the call
site, and close the ways the mode could outlive itself:
- Keep an explicit -P/--startup-psw instead of dropping it. Without a password
in the database, --no-unsafe-disable-auth brought firegex up in its
initial-setup state, where anyone able to reach it could choose the password.
- Refuse /api/login, /api/set-password and /api/change-password while
authentication is disabled: an anonymous caller could otherwise plant a
credential that kept working once authentication was turned back on.
run.py config --password still works, writing to the database from the host.
- Print a banner on every start/restart with authentication disabled. The flag
is persisted in the config file, so a later bare `run.py start` inherits it.
- Report the change in `run.py config --unsafe-disable-auth`, which claimed
"No configuration changes specified" while persisting it, and stop that
command from nulling the stored port and host on the way.
- Expose the state as auth_disabled in /api/status and hide the logout button
and the change-password entry, which were silent no-ops in this mode.
Tests cover both directions of the toggle, the socket.io handler, the password
endpoints and the -P handling.
2026-09-03 01:07:51 +02:00
Domingo Dirutigliano
0943aeaa01
enforced security over import backup, minor changes
2026-07-23 18:38:22 +02:00
Domingo Dirutigliano
c37d2b31e8
graphics and TLS feature total refactoring
2026-07-23 13:39:01 +02:00
Sogoss
75c54f0155
Add transparent TLS proxying and certificate management for NFProxy and NFRegex
...
- Add Nginx stream proxy module for transparent TLS termination in NFProxy and NFRegex
- Add backend routes and SQLite schema for certificate management (upload, view, delete)
- Implement DNAT nftables redirection rules for deterministic TLS ports
- Add frontend React components (TLSConfigModal, TLSServiceFields) for certificate configuration
- Update Dockerfile and docker-entrypoint.sh to support Nginx stream module and sysctl forwarding
2026-07-20 12:25:30 +02:00
Domingo Dirutigliano
cf2cbfea80
auto-recognize version when using cloned firegex
2026-07-12 18:46:35 +02:00
Domingo Dirutigliano
16d0bfd169
CRITICAL: fix possible path traversal
2026-04-10 14:52:22 +02:00
Minei3oat
88f4f54b55
Allow binding to UNIX domain socket
...
UNIX domain sockets are the recommended configuration for proxying with Nginx:
https://uvicorn.dev/deployment/#running-behind-nginx
2025-10-01 01:49:28 +02:00
Domingo Dirutigliano
760529e37a
firegex custom host and better port config managment
2025-08-17 16:23:49 +02:00
Domingo Dirutigliano
d0b2c67554
Revert "using also bridge table on network hooking"
...
This reverts commit 33b22a174c
2025-04-12 20:32:52 +02:00
Domingo Dirutigliano
33b22a174c
using also bridge table on network hooking
2025-04-12 16:51:42 +02:00
Domingo Dirutigliano
d4b2b6c72d
niceness on firegex process
2025-03-26 22:25:09 +01:00
Domingo Dirutigliano
8ae533e8f7
push: code changes x2
2025-02-28 21:14:09 +01:00
Domingo Dirutigliano
6a11dd0d16
push: code changes
2025-02-25 23:53:04 +01:00
Domingo Dirutigliano
ece058d533
firewall fix, preparing for minor release
2025-02-18 14:37:11 +01:00
Domingo Dirutigliano
2fb77a348f
removed fastapi_socketio + general improves
2025-02-12 01:16:10 +01:00
Domingo Dirutigliano
49fea55bc7
c++ refactoring, init pypi projects, gh action added
2025-02-09 22:43:54 +01:00
Domingo Dirutigliano
ec279a4fc5
pushed edits
2025-02-02 22:27:12 +01:00
Domingo Dirutigliano
2d8f19679f
nfqueue to hyperscan and stream match, removed proxyregex
2025-02-02 19:54:42 +01:00
Domingo Dirutigliano
d64e0aa73c
add: filtering table of firewall + InterfaceSelector frontend fixes and improves
2024-10-19 18:39:42 +02:00
Domingo Dirutigliano
71edfc29c4
Firewall refactor
2023-09-28 20:45:58 +02:00
Domingo Dirutigliano
0c972baa9c
add(todo): additional setting to implement
2023-09-26 01:17:09 +02:00
Domingo Dirutigliano
594e6b4e00
firewall Frontend Improvements
2023-09-24 17:05:55 +02:00
Domingo Dirutigliano
ae8dbd9423
fix: backend optional types + firewall frontend initial code
2023-09-23 02:02:02 +02:00
Domingo Dirutigliano
e549d9cf2a
add: default policy
2023-09-23 00:23:01 +02:00
Domingo Dirutigliano
cc4db16f2d
fix: enable transaction in db.queries
2023-09-22 21:08:23 +02:00
Domingo Dirutigliano
7fda371dcb
adding firewall function to firegex!
2023-09-22 20:46:50 +02:00
Domingo Dirutigliano
1b414139a0
Frontend -> vite
2023-06-29 13:44:12 +02:00
Domingo Dirutigliano
3f2a1db324
fixed mantine forms and menu + improvements on dev mode with vite
2023-06-14 21:49:15 +02:00
Domingo Dirutigliano
2e65d803a2
updated changes from main branch
2023-06-05 09:22:11 +02:00
Domingo Dirutigliano
63a3014676
sysctl managmento for port hijacking
2023-04-12 23:53:43 +02:00
DomySh
25d2cfd562
Port hijack changes and start writing frontend
2022-08-12 11:55:30 +00:00
nik012003
f4fe3d3ab5
Refactoring code pt.1
2022-08-11 13:18:29 +00:00
nik012003
c10cf2b6ee
Initial Testing of Porthijacking
2022-08-10 21:35:30 +02:00
DomySh
b673d5df65
refactored nftable managment, and fixed stop of the container
2022-08-10 10:23:37 +00:00
DomySh
af59ea0ef4
Fixes and improvements in thread managment
2022-08-02 19:45:28 +00:00
DomySh
63ba0e94e7
Moduled Firegex, Merging pt1 (not finished and not working yet)
2022-07-21 20:25:39 +02:00
DomySh
0ed8bb635e
Restructurated backend
2022-07-21 01:02:46 +02:00
