Commit Graph

261 Commits

Author SHA1 Message Date
Domingo Dirutigliano
33b22a174c
using also bridge table on network hooking 2025-04-12 16:51:42 +02:00
Domingo Dirutigliano
c0a475a92f
using RST flag for closing connection 2025-04-12 12:50:22 +02:00
Domingo Dirutigliano
d4b2b6c72d
niceness on firegex process 2025-03-26 22:25:09 +01:00
Domingo Dirutigliano
8ddd8b44f2
pyhton and c related fixes on empty filters and mangling 2025-03-24 11:55:51 +01:00
Domingo Dirutigliano
81fb48c97c
minor code change 2025-03-23 11:04:30 +01:00
Domingo Dirutigliano
25d71c4b94
README: update 2025-03-09 23:52:34 +01:00
Domingo Dirutigliano
73c40d2f5d
data handler improves, written test for nfproxy, new option on parsing fail 2025-03-09 22:14:34 +01:00
Domingo Dirutigliano
8a271da839
fixed mangle 2025-03-07 22:14:03 +01:00
Domingo Dirutigliano
9eb7d5461f
added checks and changed prio 2025-03-07 18:16:23 +01:00
Domingo Dirutigliano
eda44f12ff
Merge pull request #19 from Pwnzer0tt1/tmp-meta-branch
Taken edits from main removing edits of regexfilter.cpp
2025-03-05 10:06:23 +01:00
Domingo Dirutigliano
5a523817cc
Update regexfilter.cpp 2025-03-05 10:04:28 +01:00
Domingo Dirutigliano
6e07933b37
Merge pull request #18 from Minei3oat/fix_metrics
Fix metrics & add tests
2025-03-05 09:58:21 +01:00
Domingo Dirutigliano
c90d817ad4
cli command with proxy simulation 2025-03-04 15:51:46 +01:00
Domingo Dirutigliano
fde3ee57a5
crash and unexpected behaviours fix 2025-03-03 23:55:24 +01:00
Domingo Dirutigliano
072745cc06
code push 2025-03-03 20:25:36 +01:00
Domingo Dirutigliano
8ae533e8f7
push: code changes x2 2025-02-28 21:14:09 +01:00
Domingo Dirutigliano
6a11dd0d16
push: code changes 2025-02-25 23:53:04 +01:00
Domingo Dirutigliano
7cc005dfb2
TCP packet used in matching fixed 2025-02-25 11:18:30 +01:00
Minei3oat
26a2428512 Fix metrics endpoint 2025-02-25 00:59:58 +01:00
Domingo Dirutigliano
8652f40235
nfproxy module writing: written part of the firegex lib, frontend refactored and improved, c++ improves 2025-02-20 19:51:28 +01:00
Domingo Dirutigliano
e5973947e6
test on settings API added + improves on nfproxy code including fail-open 2025-02-18 23:49:53 +01:00
Domingo Dirutigliano
5ef38df66a
regex checked by hyperscan directly with error messages 2025-02-18 21:20:19 +01:00
Domingo Dirutigliano
59652fc697
optional nfqueue fail-open option 2025-02-18 17:36:15 +01:00
Domingo Dirutigliano
ece058d533
firewall fix, preparing for minor release 2025-02-18 14:37:11 +01:00
Domingo Dirutigliano
5a1e1bc225
less copy and less lock 2025-02-17 13:07:06 +01:00
Domingo Dirutigliano
7f7e3353ec
User-Space thread balancing + refactoring 2025-02-16 16:33:34 +01:00
Domingo Dirutigliano
63e7f73139
Re-structuring on new model 2025-02-14 01:04:29 +01:00
Domingo Dirutigliano
2fb77a348f
removed fastapi_socketio + general improves 2025-02-12 01:16:10 +01:00
Domingo Dirutigliano
f3ba6dc716
more RESTful APIs 2025-02-11 19:11:30 +01:00
Domingo Dirutigliano
49fea55bc7
c++ refactoring, init pypi projects, gh action added 2025-02-09 22:43:54 +01:00
Domingo Dirutigliano
21a0769a03
Updated benchmarks docs 2025-02-05 19:25:07 +01:00
Domingo Dirutigliano
47d0254c37
Merge pull request #12 from Pwnzer0tt1/dev-cpp
Implementing new cpp nfqueue with hyperscan an stream regex assembling TCP packets with libtis
2025-02-05 12:29:54 +01:00
Domingo Dirutigliano
d2905cd462
drop stream on udp (due to missing method to keep stream) + ack on reload config 2025-02-05 01:48:36 +01:00
Domingo Dirutigliano
9033145ccf
tracking input and output with mark 2025-02-05 01:07:10 +01:00
Domingo Dirutigliano
676a2289da
improves on the nfregex binary x5 2025-02-04 22:52:26 +01:00
Domingo Dirutigliano
bf8f197601
improves on the nfregex binary x4 2025-02-04 22:09:22 +01:00
Domingo Dirutigliano
44d72dfff9
improves on the nfregex binary x3 2025-02-04 21:09:03 +01:00
Domingo Dirutigliano
e8db930b40
improves on the nfregex binary x2 2025-02-03 15:18:22 +01:00
Domingo Dirutigliano
3ffccdddfb
improves on the nfregex binary 2025-02-03 02:04:10 +01:00
Domingo Dirutigliano
ec279a4fc5
pushed edits 2025-02-02 22:27:12 +01:00
Domingo Dirutigliano
2d8f19679f
nfqueue to hyperscan and stream match, removed proxyregex 2025-02-02 19:54:42 +01:00
Minei3oat
71d30196a4 Fix nullpointer issue 2024-12-09 21:57:28 +01:00
Minei3oat
6ba4fd3f93 Add metrics endpoint for Netfilter Regex 2024-11-29 01:08:06 +01:00
Domingo Dirutigliano
3de629ebd5
fix: ACCEPT pakcets on firewall disable on default policy 2024-10-20 11:47:21 +02:00
Domingo Dirutigliano
d64e0aa73c
add: filtering table of firewall + InterfaceSelector frontend fixes and improves 2024-10-19 18:39:42 +02:00
Domingo Dirutigliano
cbf2c5a43d
add: frontend update 2024-10-13 01:50:52 +02:00
Domingo Dirutigliano
11ec3a16a1
FATAL:fixed encoding bug for nfregex that was blocking this function! 2024-04-09 03:52:10 +02:00
Domingo Dirutigliano
a79c321300
frontend fixes, dockerfile passed to bun, nftable python installed using apt 2024-04-09 02:20:51 +02:00
Nicola Guerrera
3e61c24c06 nfqueue: beginning of rust implementation 2024-02-06 14:16:16 +01:00
Domingo Dirutigliano
c044383fd0
add: dhcp on firewall 2023-10-12 12:53:44 +02:00
Domingo Dirutigliano
e96c38b186
fix: settings update fixed + packet invalid drop 2023-10-01 02:01:47 +02:00
Domingo Dirutigliano
b11fa66909
refactoring: firewall model changed using ufw model (due to docker iussues) 2023-09-29 16:10:28 +02:00
Domingo Dirutigliano
2657428d6e
fix: allow established also on fwd table 2023-09-29 00:20:00 +02:00
Domingo Dirutigliano
b01441e300
edit: small changes 2023-09-28 23:16:57 +02:00
Domingo Dirutigliano
227650f3df
host=None only in production 2023-09-28 21:03:48 +02:00
Domingo Dirutigliano
07c4530fac
host None 2023-09-28 20:46:53 +02:00
Domingo Dirutigliano
71edfc29c4
Firewall refactor 2023-09-28 20:45:58 +02:00
Domingo Dirutigliano
3e00add783
fix: host on ipv4 and ipv6 2023-09-26 23:21:13 +02:00
Domingo Dirutigliano
0b0357bdaf
fix: better error messages 2023-09-26 21:16:03 +02:00
Domingo Dirutigliano
67f563cb43
fix: setting implmented + fixed and optimized rules adding 2023-09-26 17:24:04 +02:00
Domingo Dirutigliano
0c972baa9c
add(todo): additional setting to implement 2023-09-26 01:17:09 +02:00
Domingo Dirutigliano
7c324a90c2
add: graphic improvements 2023-09-25 20:09:26 +02:00
Domingo Dirutigliano
c0ea0eb331
add/fix: frontend and backend improves 2023-09-25 18:10:12 +02:00
Domingo Dirutigliano
4c4b80fd23
add: ipv6/ipv4 rules 2023-09-24 19:10:32 +02:00
Domingo Dirutigliano
594e6b4e00
firewall Frontend Improvements 2023-09-24 17:05:55 +02:00
Domingo Dirutigliano
4247dc181d
react-query + enable/disable firewall 2023-09-24 05:48:54 +02:00
Domingo Dirutigliano
732680753c
IPv6 hosted 2023-09-23 15:00:40 +02:00
Domingo Dirutigliano
ae8dbd9423
fix: backend optional types + firewall frontend initial code 2023-09-23 02:02:02 +02:00
Domingo Dirutigliano
e549d9cf2a
add: default policy 2023-09-23 00:23:01 +02:00
Domingo Dirutigliano
cc4db16f2d
fix: enable transaction in db.queries 2023-09-22 21:08:23 +02:00
Domingo Dirutigliano
cdb4e6ac21
fix: action excluded from unique constraint 2023-09-22 20:58:35 +02:00
Domingo Dirutigliano
572cb102d7
fix reject action on output 2023-09-22 20:56:58 +02:00
Domingo Dirutigliano
b2e0ecc005
mode in the unique index 2023-09-22 20:53:39 +02:00
Domingo Dirutigliano
7fda371dcb
adding firewall function to firegex! 2023-09-22 20:46:50 +02:00
Nicola Guerrera
4b8b145b68 Added libtins-rs 2023-07-07 20:21:28 +02:00
Domingo Dirutigliano
1b414139a0
Frontend -> vite 2023-06-29 13:44:12 +02:00
Domingo Dirutigliano
3f2a1db324
fixed mantine forms and menu + improvements on dev mode with vite 2023-06-14 21:49:15 +02:00
Domingo Dirutigliano
2e65d803a2
updated changes from main branch 2023-06-05 09:22:11 +02:00
Domingo Dirutigliano
cef573b537
Dockerfile to debian bookworm + stared rust project 2023-06-04 20:12:17 +02:00
Domingo Dirutigliano
63a3014676
sysctl managmento for port hijacking 2023-04-12 23:53:43 +02:00
DomySh
25d2cfd562 Port hijack changes and start writing frontend 2022-08-12 11:55:30 +00:00
DomySh
a0fba5b2f2 Finished backend of hijack-port 2022-08-11 18:01:07 +00:00
DomySh
90538a89dd port-hijacking backend tested and fixed 2022-08-11 15:53:33 +00:00
DomySh
4076400ec4 Code refactoring + port-hijacking backend (need port-hijacking backend testing)+ 2022-08-11 15:38:17 +00:00
DomySh
e6b4ddd4a0 Code refactoring and adding port-hijacking backup commit 2022-08-11 15:16:23 +00:00
nik012003
f4fe3d3ab5 Refactoring code pt.1 2022-08-11 13:18:29 +00:00
DomySh
1931536516 End of test for port-hijacking 2022-08-11 13:12:12 +00:00
nik012003
c10cf2b6ee Initial Testing of Porthijacking 2022-08-10 21:35:30 +02:00
DomySh
b673d5df65 refactored nftable managment, and fixed stop of the container 2022-08-10 10:23:37 +00:00
DomySh
d7eb8efa81 new start.py + set password in start.py 2022-08-09 10:28:30 +00:00
nik012003
3716205847 Fixed multithreading 2022-08-03 12:12:53 +02:00
DomySh
af59ea0ef4 Fixes and improvements in thread managment 2022-08-02 19:45:28 +00:00
DomySh
02ae916f58 Dropped privileges from root to nobody, added capabilities with capsh 2022-08-02 13:15:13 +00:00
DomySh
08a2cc1b0a Update README 2022-07-22 01:12:54 +02:00
DomySh
d8dc5c9f8b Fixes 2022-07-22 00:34:57 +02:00
DomySh
63ba0e94e7 Moduled Firegex, Merging pt1 (not finished and not working yet) 2022-07-21 20:25:39 +02:00
DomySh
0ed8bb635e Restructurated backend 2022-07-21 01:02:46 +02:00
DomySh
d4cc2f566c Added reset button 2022-07-20 21:19:22 +02:00
DomySh
1266aebe0e Autosuggestion for network interfaces ips 2022-07-20 00:21:22 +02:00
DomySh
2988a37bdf Fixes (need fixes on docker) 2022-07-19 15:32:37 +02:00