Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-12-08 | [feat] whitelist log file | kali kaneko (leap communications) | |
2021-11-30 | [bug] let's float | kali kaneko (leap communications) | |
2021-11-23 | [feat] pass udp flag to bitmask-root | kali kaneko (leap communications) | |
2021-09-23 | helpers/bitmask-root: the ip command is sometimes in /bin/ | Andrew Ammerlaan | |
Upstreamed patch from Gentoo Linux We put bin before sbin because we want sbin to have the higher priority Signed-off-by: Andrew Ammerlaan <andrewammerlaan@gentoo.org> | |||
2021-07-06 | [bug] ignore ip/routes if ipv6 is disabled | kali kaneko (leap communications) | |
- Resolves: #457 | |||
2021-06-14 | [feat] allow to define explicitely allowed private address | kali kaneko (leap communications) | |
By default, bitmask-root allows traffic to devices in local networks. However, this behavior depends on it correctly identifying the local network of the default route, and it can fail on more complex network setups (one common failure mode is when one of the ifaces gets a link-local ip). This commit introduces an explicit mechanism, by parsing lines in /etc/bitmask/ipv4.allow /etc/bitmask/ipv6.allow If valid private ips are defined in either of the files, the behavior will change to fail close for local devices, and allow traffic (both tcp and udp) to the defined ips, on all ports. - Resolves: #503 | |||
2021-05-17 | allow route command, needed for obfs4 | kali kaneko (leap communications) | |
2021-05-17 | [feat] remove email firewall | kali kaneko (leap communications) | |
this has been officially deprecated for some time | |||
2020-03-26 | [feat] bitmask-root: search for the system commands in the common paths | Ruben Pollan | |
Find the right path of the system commands looking into /sbin, /usr/sbin and /usr/local/sbin - Resolves: #254 | |||
2019-11-07 | [bug] fix typo on bitmask-root | Ruben Pollan | |
2019-08-16 | [pkg] add helpers to repo, generate hooks in snap | Kali Kaneko (leap communications) | |