Simon Zolin
ad4e85d8f5
add test
2020-07-24 13:27:14 +03:00
Simon Zolin
4b9ab97271
- rewrites: return NOERROR without A records instead of NXDOMAIN
...
For rule "host -> ipv6" we return "ipv6" address for AAAA request
and empty answer for A request
2020-07-24 13:18:05 +03:00
Andrey Meshkov
4f8138bdce
Fix #1764
...
+ rewrites: support IP exception; support "pass A only" case
* commit '32610840f9a0769bb58c7443a485c5e5b0cd2b68':
+ rewrites: support IP exception; support "pass A only" case
2020-07-06 17:00:10 +03:00
Simon Zolin
4303b3dd2f
+ dns: new settings for cache
...
Squashed commit of the following:
commit e5b488249a4d972efd63c6e96830d9f30829aee1
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Jun 16 15:38:27 2020 +0300
+ dns: new settings for cache
2020-07-03 20:35:04 +03:00
Simon Zolin
5980db1a2d
+ rewrites: support IP exception; support "pass A only" case
...
+ rewrites: support IP exception
host.com -> 1.2.3.4
host.com -> AAAA
Response:
A:
A = 1.2.3.4
AAAA:
AAAA = <IPv6 address of host.com>
+ rewrites: support "pass A only" case
host.com -> A
Response:
A:
A = <IPv4 address of host.com>
AAAA:
<empty>
2020-07-03 17:37:51 +03:00
Simon Zolin
890876cb05
+ pass client Name and IP to dnsfilter
...
* use urlfilter v0.11.0
2020-06-23 14:36:26 +03:00
Simon Zolin
49a92605b8
+ dns: respond to PTR requests for internal IP addresses from DHCP
...
Close #1682
Squashed commit of the following:
commit 2fad3544bf8853b1f8f19ad8b7bc8a490c96e533
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Jun 22 17:32:45 2020 +0300
minor
commit 7c17992424702d95e6de91f30e8ae2dfcd8de257
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Jun 22 16:09:34 2020 +0300
build
commit 16a52e11a015a97d3cbf30362482a4abd052192b
Merge: 7b6a73c8 2c47053c
2020-06-23 12:13:13 +03:00
Andrey Meshkov
b1c951fb2c
Merge: + new query logs API
...
* commit '59c4a2886a97143e3a36912ec895dc1a06be88cc':
openapi
If there are no more older entries, `"oldest":""` is returned.
fix search by "whitelisted", "rewritten"
doc
fix whois test
+ "dot"
openapi
* minor
+ client_proto
* openapi
+ new query logs API
2020-06-18 00:23:52 +03:00
Simon Zolin
ec6ca93acd
* dns: disable cache with "cache_size: 0" setting
...
Close #1591
Squashed commit of the following:
commit 547a971f5c4f11c519dfabd52d42fa626abf931a
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Jun 16 14:46:06 2020 +0300
* dns: disable cache with "cache_size: 0" setting
2020-06-16 15:13:38 +03:00
Simon Zolin
a869ec4cbb
* DNS API: new setting "upstream_mode"; remove "fastest_addr", "parallel_requests"
...
* use dnsproxy v0.29.0
Squashed commit of the following:
commit f18b7231f3f3f84446c0d837855af342f3c971b4
Merge: 501a4e06 dae275e6
2020-06-10 15:33:23 +03:00
Simon Zolin
9a030aa99f
- rewrites: fix invalid question in response
...
#1746
for a rule:
cname -> domain
with IP of 'domain' resolved by upstream
Squashed commit of the following:
commit fb3ad25ac8a7963a8fa6587cdc33e2fc35f79dfb
Merge: a6794989 67dacdf8
2020-06-01 15:23:08 +03:00
Simon Zolin
bccb939346
+ "dot"
2020-05-29 11:46:37 +03:00
Simon Zolin
d971bb9957
* minor
2020-05-29 11:15:31 +03:00
Simon Zolin
0904eeffa8
+ client_proto
2020-05-29 11:15:22 +03:00
Simon Zolin
0848ca0e69
- rewrites: fix crash when handling name->cname->A chain
...
crash.adguard -> adguard.a.record
adguard.a.record -> 1.2.3.4
2020-05-21 14:48:31 +03:00
Andrey Meshkov
2fca419c7f
*(home): fix TLS module initialization
...
Continue to work even when TLS cert-key pair is invalid
Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1677
2020-05-16 02:02:50 +03:00
Andrey Meshkov
fb79416ebe
-: fix #1632
2020-05-14 18:24:59 +03:00
Andrey Meshkov
5d7b3fb7d5
-(dnsforward): fix handling RRSIG records
2020-05-14 18:08:47 +03:00
Andrey Meshkov
ae51de9335
Added a unit-test for custom upstreams
2020-05-14 12:57:41 +03:00
Andrey Meshkov
67a39045fc
-(dnsforward): custom client per-domain upstreams
...
Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1539
2020-05-13 20:31:43 +03:00
Andrey Meshkov
cd87169ee4
*: comments fix
2020-05-08 19:02:16 +03:00
Andrey Meshkov
8909599739
+(dnsforward): added bogus-nxdomain setting
...
Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1545
2020-05-08 18:39:37 +03:00
Simon Zolin
e2ddc82d70
+ DNS: add fastest_addr setting
...
* API: /dns_info, /dns_config: add "parallel_requests" instead of "all_servers" from /set_upstreams_config
* API: /status: removed fields
#715
Squashed commit of the following:
commit 7dd913bd336ecbaa7419b998d0bf913d89702fe6
Merge: 43706970 8170955a9b7c1181c8285c41
2020-04-22 19:14:04 +03:00
Simon Zolin
1a1c09135d
+ auto-hosts: respond to PTR requests
...
Close #1562
Squashed commit of the following:
commit d5c6bb0e5f0c8c1618bd0df764ae86a5e62a850b
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Apr 13 14:10:10 2020 +0300
+ auto-hosts: respond to PTR requests
2020-04-16 18:56:47 +03:00
Andrey Meshkov
7b8588afa4
*: fix golangci-lint warnings
2020-04-05 18:34:43 +03:00
Simon Zolin
c16dc6cf62
- DNS: filtering didn't work
2020-03-24 11:44:47 +03:00
Simon Zolin
06b3378fd7
Merge: + DNS, Web: use only secure TLSv1.2 ciphers
...
Close #1384
Squashed commit of the following:
commit cd90abcce573a8e930446ba153565e553e6b81d5
Author: Simon Zolin <s.zolin@adguard.com>
Date: Fri Mar 20 19:17:53 2020 +0300
minor
commit a1914c5f41425e82cdedc9716bce84470afab65b
Merge: 72c53673 c8285c41
2020-03-23 10:23:34 +03:00
Simon Zolin
c8285c41d7
Merge: + DNS: new settings cache_ttl_min, cache_ttl_max
...
Close #1214
Squashed commit of the following:
commit e445125556c9f9441c3d6936cb923db0a7e58260
Merge: c88b25ca 63923fa8
2020-03-20 19:16:55 +03:00
Simon Zolin
63923fa882
Merge: + DNS: use rules from /etc/hosts
...
- fix filtering logic: don't do DNS response check for Rewrite rules
Close #1478
Squashed commit of the following:
commit 1206b94881289ff664b7c8998ea97c1455da1ff8
Merge: c462577a 5fe98474
2020-03-20 15:05:43 +03:00
Simon Zolin
a5b9d1d74c
Merge: + DNS: blocked hosts: support wildcards; use urlfilter for processing of the blocked hosts
...
Close #1469
Squashed commit of the following:
commit b07f408550a526726c8e38886ce0fcc1f4c3d93d
Merge: 56aa0dfc c5a39b94
2020-03-20 14:41:13 +03:00
Simon Zolin
a5c2cdaf38
+ dnsforward: add dnssec_enabled option
2020-03-18 18:05:02 +03:00
Simon Zolin
dd7d9dc334
* move getDNSAddresses() and "/dns-query" handler to DNS module
2020-03-17 17:12:02 +03:00
Simon Zolin
1000aef1d2
+ DNS, Web: Entware: use special directory with the system root certificates
...
+ use custom RootsCA for HTTPS client, for server cert verify
2020-03-16 15:15:38 +03:00
Simon Zolin
579177fc70
Merge: * DNS: use "unrestricted" Quad9 servers; - dnsfilter: fix hanging on error
...
Close #1451
Squashed commit of the following:
commit 91e5c98d7543b7c8872cc494818d66bb823ec7c0
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 13:09:01 2020 +0300
fix
commit 4f80865e55f27206fa9cef1d72fb3652498da582
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 13:08:31 2020 +0300
* fix race-detector issue
commit 5513c6c12c112c8f9325dbc8a8d09e58fe7611e0
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 13:01:46 2020 +0300
- dnsfilter: fix hanging on error
commit c7b81286833a523349efb8ca972eba3540518944
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 12:42:19 2020 +0300
* DNS: use "unrestricted" Quad9 servers
2020-03-05 13:12:21 +03:00
Simon Zolin
140d5553e7
* DNS rewrites: don't pass request to an upstream server if matched by Rewrite rule
...
For example, if there's an A rewrite rule, but no AAAA rule,
the response to AAAA request must be empty.
2020-03-02 15:24:40 +03:00
Andrey Meshkov
d839136fee
Merge: fix #822 - Whitelist filter rules
...
Squashed commit of the following:
commit 350c6d5fadd77145b801df8887284bf4d64fbd19
Author: Ildar Kamalov <i.kamalov@adguard.com>
Date: Wed Feb 26 15:43:29 2020 +0300
* client: update translations
commit a884dffcd59f2259e2eee2c1e5a3270819bf8962
Author: Ildar Kamalov <i.kamalov@adguard.com>
Date: Mon Feb 17 17:32:10 2020 +0300
+ client: handle whitelist filters
commit a586ec5bc614ffb0e01584a1fbdc7292b4865e68
Author: ArtemBaskal <a.baskal@adguard.com>
Date: Wed Jan 29 18:16:59 2020 +0300
+ client: add whitelist
commit a52c3de62cf2fa34be6394771fb8bb56b4ee81e3
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Feb 20 17:50:44 2020 +0300
* change /filtering/refresh
commit 7f8f2ecccb9f7fa65318c1717dc6a7bd61afccf4
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Feb 20 16:17:07 2020 +0300
* fix race-detector issue
commit ac4b64c4a52c5b364a4b154bf18dea0fdf45647f
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Jan 20 20:08:21 2020 +0300
+ whitelist filters
2020-02-26 19:58:25 +03:00
Andrey Meshkov
6c18b71010
*(dnsforward): fix safe search returning nxdomain
...
✅ Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1387
2020-02-05 14:30:43 +03:00
Simon Zolin
dcc575402b
Merge: * clients: update runtime clients of type DHCP by event from DHCP module
...
Close #1378
Squashed commit of the following:
commit e45e2d0e2768fe0677eee43538d381b3eaba39ca
Merge: bea8f79d 5e9c21b0
2020-01-30 10:25:02 +03:00
Simon Zolin
bfd1f3b650
+ DNS: TLS handshake: terminate handshake on bad SNI
2020-01-28 13:25:43 +03:00
Simon Zolin
3f7e2f7241
Merge: * dns: refactor
...
Squashed commit of the following:
commit e9469266cafa3df537b5a4d5e28ca51db8289a34
Merge: 17cf6d60 e7e946fa
2020-01-21 13:49:34 +03:00
Simon Zolin
07ebcc2bf3
* DNS: nxdomain: don't return IP address for a blocked domain
...
Don't return IP address for a blocked domain
when blocking mode is "nxdomain".
2020-01-20 19:14:14 +03:00
Simon Zolin
6563886b49
Merge: - install: recover from error on DNS server start
...
Close #1293
Squashed commit of the following:
commit 0981754c5c2c67f2567ee4af0d9ab24377c53413
Merge: ef81f2c8 a6d75118
2020-01-16 14:25:40 +03:00
Simon Zolin
7ac5760509
+ dns: add "aaaa_disabled" setting
2020-01-14 14:50:20 +03:00
Simon Zolin
3b9d758510
* refactor
2020-01-10 19:08:07 +03:00
Simon Zolin
0ef8e5cdae
* dnsforward: get per-client settings only once
...
+ dnsforward: add 'ProtectionEnabled = false' test
2020-01-10 19:08:05 +03:00
Simon Zolin
8d2a9ce923
* dnsfilter: change DNS answer for host rules
...
When matched by a host rule, return only the IP address specified in rule.
Respond with an empty IP list to another request type.
:: host -- return nothing to A, return :: to AAAA request
0.0.0.0 host -- return 0.0.0.0 to A, return nothing to AAAA request
2020-01-09 19:31:14 +03:00
Andrey Meshkov
cdd55139fa
*(dnsforward): cache upstream instances
...
✅ Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1296
2019-12-23 19:31:27 +03:00
Andrey Meshkov
b4f4111609
-(dnsfilter): match DNS response against filtering rules only
...
Supposedly, this will fix #1290
2019-12-23 15:59:49 +03:00
Andrey Meshkov
5077f1a2b3
-(dnsforward): fix client settings for CNAME matching
...
✅ Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1274
2019-12-23 13:36:59 +03:00
Simon Zolin
d65cdd4544
- DNS: configuration settings were not applied until full restart
2019-12-19 14:49:15 +03:00
