Max/tladesignz_dnstt
1
0
Fork 0
mirror of https://github.com/tladesignz/dnstt.git synced 2026-10-10 08:08:14 +03:00
Code Issues Packages Projects Releases Wiki Activity
104 Commits 1 Branch 13 Tags
f6ca82d08c8a8a544c20ec43c9ed9de7074ebed5
Commit Graph
104 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
David Fifield f6ca82d08c Buffer reads and writes in TLSPacketConn. 2020-04-29 12:44:07 -06:00
David Fifield ed2678917e Add a missing error check in TLSPacketConn.sendLoop. 2020-04-29 12:42:39 -06:00
David Fifield 4663433c08 Do receive-triggered polls based packets received. 
Not amount of raw payload. This allows for the case where the received
payload is only padding, for example. (That can't happen with the
current downstream encoding scheme, which doesn't allow for padding, so
I believe this change results in equivalent behavior.)
v0.20200429.0 		2020-04-29 09:45:29 -06:00
David Fifield 05444dcb22 smux Stream.Write may also return EOF. v0.20200426.0 2020-04-25 21:27:14 -06:00
David Fifield 241225df1d Add -mtu option to server. 2020-04-25 20:54:09 -06:00
David Fifield f7e028a697 Log when truncating a response. 
We don't expect this to happen often. It probably indicates an error.
 2020-04-25 20:28:37 -06:00
David Fifield e328c57b21 Log pubkey before MTU. 2020-04-25 20:28:37 -06:00
David Fifield a00ef8f9ea Compute maxEncodedPayload automatically from maxUDPPayload. 
Previously I had maxEncodedPayload hard-coded as a separate constant,
but it is completely dependent on maxUDPPayload. We compute it by
actually constructing wire-format packets and taking their length, which
should be less fragile than the formula I previously had commented,
though it requires some synchronization between the sendLoop and
computeMaxEncodedPayload functions.
 2020-04-25 20:28:37 -06:00
David Fifield e5efc55f23 Extract the ClientID outside of responseFor. 2020-04-25 19:51:15 -06:00
David Fifield e5b6d48b41 Fix some comment typos. 2020-04-25 19:50:26 -06:00
David Fifield 9ee6bf8abf Use wg.Add(2) instead of 2 × wg.Add(1). 2020-04-23 15:51:53 -06:00
David Fifield 7fa2bcf441 TODO file with idea about UDP payload size. 2020-04-20 20:07:15 -06:00
David Fifield dbce5322a6 README updates and fixes. 2020-04-19 21:50:40 -06:00
David Fifield 63f3ded841 README typo fix. 2020-04-19 19:23:21 -06:00
David Fifield 32d319a75b iptables command typo fix. 2020-04-19 19:15:50 -06:00
David Fifield 9f430df8aa Make the privkey file only readable by the user. v0.20200419.0 2020-04-19 17:31:16 -06:00
David Fifield a650238f1e Don't log QTYPE != TXT errors. 2020-04-19 17:16:27 -06:00
David Fifield d14deab12b Documentation and light refactoring. 2020-04-19 17:16:27 -06:00
David Fifield 83a67e3874 Fix a bug in noise.readMessage. 
Was returning nil in case of an error from io.ReadFull, and even then it
should have been io.ErrUnexpectedEOF, not io.EOF.
 2020-04-19 16:52:48 -06:00
David Fifield a6af2f1df1 Make -udp required, resolve in main. 2020-04-19 16:20:50 -06:00
David Fifield 813a8564e8 Move some helper functions into dns.go. 2020-04-19 11:29:50 -06:00
David Fifield d42f7ea187 Add test for dns.EncodeRDataTXT. 2020-04-19 11:05:36 -06:00
David Fifield c33077e885 Refactor MessageFromWireFormat and writeMessage. 
Make MessageFromWireFormat responsible for checking the EOF condition.
 2020-04-19 10:57:55 -06:00
David Fifield f168777a13 dns Message.Opcode method. 2020-04-19 10:33:40 -06:00
David Fifield 4b0b144257 Consolidate the authoritative domain check. 
Formerly this was split into two pieces: one that did the domain check
and set the AA bit, and another that checked the AA bit and returned an
error if it was not set. It was done in two parts because the check for
UDP payload size occurred in the middle. Since 59f03791 the payload
check is moved to the end, so we can do the authoritative domain check
in one piece.
 2020-04-19 10:28:56 -06:00
David Fifield 53a6eeed5d Note on covertness after the tunnel server. 2020-04-19 10:27:08 -06:00
David Fifield 3bd72bf336 Notes on -privkey/-privkey-file/-pubkey/-pubkey-file. 2020-04-19 10:10:15 -06:00
David Fifield 0567fa9abb Remove addr fro "cannot parse DNS query" log message. 2020-04-19 09:44:05 -06:00
David Fifield e9a98c3aef Avoid logging EOF and ErrClosedPipe errors. 
smux Stream.WriteTo may return io.EOF, which breaks the contract of
io.Copy that says it should not return io.EOF. smux.Stream doesn't have
a unidirectional shutdown, so we always end up slamming it shut in both
directions and leave the other direction with a broken pipe.
 2020-04-19 02:13:48 -06:00
David Fifield 34b7e82af4 More logging of query validation errors in server. 2020-04-19 01:17:33 -06:00
David Fifield 98bf401738 Use NXDOMAIN rather than FORMERR for QTYPE != TXT. 2020-04-19 01:13:35 -06:00
David Fifield 59f03791df Do the payload size check after the TXT and base32 checks. 
That way we can respond with NXDOMAIN rather than FORMERR to more of the
random queries that arrive.
 2020-04-19 00:59:04 -06:00
David Fifield 04e1295e52 Infer a payload size of 512 even when there is no OPT RR. 
Before we were inferring a size of 0. It would still be rejected for
being too small, but was confusing with the log messages I am adding.
 2020-04-19 00:53:34 -06:00
David Fifield 294f1acc7d Fix second AA check. 2020-04-19 00:53:34 -06:00
David Fifield 1e57ed8d42 Add missing return for EDNS version != 0. 2020-04-19 00:53:34 -06:00
David Fifield 7fad23ceca Reduce maxUDPPayload to 1232 for compatibility with Quad9. 2020-04-19 00:53:34 -06:00
David Fifield 079a24146c README. 2020-04-19 00:21:31 -06:00
David Fifield e7098959e2 Move global base32Encoding into dns.go. 2020-04-18 23:39:35 -06:00
David Fifield b7c18be90f Lowercase base32-encoded data in DNS names. 2020-04-18 23:39:35 -06:00
David Fifield 41c146355a Do MTU check first. 2020-04-18 19:05:23 -06:00
David Fifield 0a630f91c5 Log stream begin/end in server, log conv in client. 2020-04-18 19:05:23 -06:00
David Fifield 7ed79218eb Insert more padding when polling. 2020-04-18 18:46:54 -06:00
David Fifield b1bf9164a7 -privkey-file and -pubkey-file options. 2020-04-18 17:56:45 -06:00
David Fifield 505db3ec23 Server -privkey option and client -pubkey option. 2020-04-18 17:35:32 -06:00
David Fifield 7dc344713c Add a noise.PubkeyFromPrivkey function. 2020-04-18 16:02:14 -06:00
David Fifield cd03021417 Note -udp is required on server. 2020-04-18 16:02:14 -06:00
David Fifield 117f73aae9 Rename ClientMap to RemoteMap. 
We're now using it (via QueuePacketConn) in DNSPacketConn,
HTTPPacketConn, and TLSPacketConn, where there remote peer is actually a
server, not a client.
 2020-04-18 16:02:14 -06:00
David Fifield b98eb2c75e Move dummyAddr to turbotunnel.DummyAddr. 2020-04-18 16:02:14 -06:00
David Fifield 82ee14fefa Emit a log line even if we take no action on an unknown status code. 2020-04-18 16:02:14 -06:00
David Fifield b0f99e72bb Handle other unknown response status codes the same as 429. 2020-04-18 16:02:14 -06:00