2fca419c7f
*(home): fix TLS module initialization
...
Continue to work even when TLS cert-key pair is invalid
Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1677
2020-05-16 02:02:50 +03:00
fb79416ebe
-: fix #1632
2020-05-14 18:24:59 +03:00
5d7b3fb7d5
-(dnsforward): fix handling RRSIG records
2020-05-14 18:08:47 +03:00
ae51de9335
Added a unit-test for custom upstreams
2020-05-14 12:57:41 +03:00
67a39045fc
-(dnsforward): custom client per-domain upstreams
...
Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1539
2020-05-13 20:31:43 +03:00
cd87169ee4
*: comments fix
2020-05-08 19:02:16 +03:00
8909599739
+(dnsforward): added bogus-nxdomain setting
...
Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1545
2020-05-08 18:39:37 +03:00
e2ddc82d70
+ DNS: add fastest_addr setting
...
* API: /dns_info, /dns_config: add "parallel_requests" instead of "all_servers" from /set_upstreams_config
* API: /status: removed fields
#715
Squashed commit of the following:
commit 7dd913bd336ecbaa7419b998d0bf913d89702fe6
Merge: 43706970 8170955a9b7c1181c8285c41
2020-04-22 19:14:04 +03:00
1a1c09135d
+ auto-hosts: respond to PTR requests
...
Close #1562
Squashed commit of the following:
commit d5c6bb0e5f0c8c1618bd0df764ae86a5e62a850b
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Apr 13 14:10:10 2020 +0300
+ auto-hosts: respond to PTR requests
2020-04-16 18:56:47 +03:00
7b8588afa4
*: fix golangci-lint warnings
2020-04-05 18:34:43 +03:00
c16dc6cf62
- DNS: filtering didn't work
2020-03-24 11:44:47 +03:00
06b3378fd7
Merge: + DNS, Web: use only secure TLSv1.2 ciphers
...
Close #1384
Squashed commit of the following:
commit cd90abcce573a8e930446ba153565e553e6b81d5
Author: Simon Zolin <s.zolin@adguard.com>
Date: Fri Mar 20 19:17:53 2020 +0300
minor
commit a1914c5f41425e82cdedc9716bce84470afab65b
Merge: 72c53673 c8285c41
2020-03-23 10:23:34 +03:00
c8285c41d7
Merge: + DNS: new settings cache_ttl_min, cache_ttl_max
...
Close #1214
Squashed commit of the following:
commit e445125556c9f9441c3d6936cb923db0a7e58260
Merge: c88b25ca 63923fa8
2020-03-20 19:16:55 +03:00
63923fa882
Merge: + DNS: use rules from /etc/hosts
...
- fix filtering logic: don't do DNS response check for Rewrite rules
Close #1478
Squashed commit of the following:
commit 1206b94881289ff664b7c8998ea97c1455da1ff8
Merge: c462577a 5fe98474
2020-03-20 15:05:43 +03:00
a5b9d1d74c
Merge: + DNS: blocked hosts: support wildcards; use urlfilter for processing of the blocked hosts
...
Close #1469
Squashed commit of the following:
commit b07f408550a526726c8e38886ce0fcc1f4c3d93d
Merge: 56aa0dfc c5a39b94
2020-03-20 14:41:13 +03:00
a5c2cdaf38
+ dnsforward: add dnssec_enabled option
2020-03-18 18:05:02 +03:00
dd7d9dc334
* move getDNSAddresses() and "/dns-query" handler to DNS module
2020-03-17 17:12:02 +03:00
1000aef1d2
+ DNS, Web: Entware: use special directory with the system root certificates
...
+ use custom RootsCA for HTTPS client, for server cert verify
2020-03-16 15:15:38 +03:00
579177fc70
Merge: * DNS: use "unrestricted" Quad9 servers; - dnsfilter: fix hanging on error
...
Close #1451
Squashed commit of the following:
commit 91e5c98d7543b7c8872cc494818d66bb823ec7c0
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 13:09:01 2020 +0300
fix
commit 4f80865e55f27206fa9cef1d72fb3652498da582
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 13:08:31 2020 +0300
* fix race-detector issue
commit 5513c6c12c112c8f9325dbc8a8d09e58fe7611e0
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 13:01:46 2020 +0300
- dnsfilter: fix hanging on error
commit c7b81286833a523349efb8ca972eba3540518944
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Mar 5 12:42:19 2020 +0300
* DNS: use "unrestricted" Quad9 servers
2020-03-05 13:12:21 +03:00
140d5553e7
* DNS rewrites: don't pass request to an upstream server if matched by Rewrite rule
...
For example, if there's an A rewrite rule, but no AAAA rule,
the response to AAAA request must be empty.
2020-03-02 15:24:40 +03:00
d839136fee
Merge: fix #822 - Whitelist filter rules
...
Squashed commit of the following:
commit 350c6d5fadd77145b801df8887284bf4d64fbd19
Author: Ildar Kamalov <i.kamalov@adguard.com>
Date: Wed Feb 26 15:43:29 2020 +0300
* client: update translations
commit a884dffcd59f2259e2eee2c1e5a3270819bf8962
Author: Ildar Kamalov <i.kamalov@adguard.com>
Date: Mon Feb 17 17:32:10 2020 +0300
+ client: handle whitelist filters
commit a586ec5bc614ffb0e01584a1fbdc7292b4865e68
Author: ArtemBaskal <a.baskal@adguard.com>
Date: Wed Jan 29 18:16:59 2020 +0300
+ client: add whitelist
commit a52c3de62cf2fa34be6394771fb8bb56b4ee81e3
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Feb 20 17:50:44 2020 +0300
* change /filtering/refresh
commit 7f8f2ecccb9f7fa65318c1717dc6a7bd61afccf4
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Feb 20 16:17:07 2020 +0300
* fix race-detector issue
commit ac4b64c4a52c5b364a4b154bf18dea0fdf45647f
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Jan 20 20:08:21 2020 +0300
+ whitelist filters
2020-02-26 19:58:25 +03:00
6c18b71010
*(dnsforward): fix safe search returning nxdomain
...
✅ Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1387
2020-02-05 14:30:43 +03:00
dcc575402b
Merge: * clients: update runtime clients of type DHCP by event from DHCP module
...
Close #1378
Squashed commit of the following:
commit e45e2d0e2768fe0677eee43538d381b3eaba39ca
Merge: bea8f79d 5e9c21b0
2020-01-30 10:25:02 +03:00
bfd1f3b650
+ DNS: TLS handshake: terminate handshake on bad SNI
2020-01-28 13:25:43 +03:00
3f7e2f7241
Merge: * dns: refactor
...
Squashed commit of the following:
commit e9469266cafa3df537b5a4d5e28ca51db8289a34
Merge: 17cf6d60 e7e946fa
2020-01-21 13:49:34 +03:00
07ebcc2bf3
* DNS: nxdomain: don't return IP address for a blocked domain
...
Don't return IP address for a blocked domain
when blocking mode is "nxdomain".
2020-01-20 19:14:14 +03:00
6563886b49
Merge: - install: recover from error on DNS server start
...
Close #1293
Squashed commit of the following:
commit 0981754c5c2c67f2567ee4af0d9ab24377c53413
Merge: ef81f2c8 a6d75118
2020-01-16 14:25:40 +03:00
7ac5760509
+ dns: add "aaaa_disabled" setting
2020-01-14 14:50:20 +03:00
3b9d758510
* refactor
2020-01-10 19:08:07 +03:00
0ef8e5cdae
* dnsforward: get per-client settings only once
...
+ dnsforward: add 'ProtectionEnabled = false' test
2020-01-10 19:08:05 +03:00
8d2a9ce923
* dnsfilter: change DNS answer for host rules
...
When matched by a host rule, return only the IP address specified in rule.
Respond with an empty IP list to another request type.
:: host -- return nothing to A, return :: to AAAA request
0.0.0.0 host -- return 0.0.0.0 to A, return nothing to AAAA request
2020-01-09 19:31:14 +03:00
cdd55139fa
*(dnsforward): cache upstream instances
...
✅ Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1296
2019-12-23 19:31:27 +03:00
b4f4111609
-(dnsfilter): match DNS response against filtering rules only
...
Supposedly, this will fix #1290
2019-12-23 15:59:49 +03:00
5077f1a2b3
-(dnsforward): fix client settings for CNAME matching
...
✅ Closes: https://github.com/AdguardTeam/AdGuardHome/issues/1274
2019-12-23 13:36:59 +03:00
d65cdd4544
- DNS: configuration settings were not applied until full restart
2019-12-19 14:49:15 +03:00
4540a4e94a
- DNS: set RecursionAvailable flag in response message
2019-12-19 11:52:21 +03:00
8521635f63
- DNS: fix slow response to /status and /access/list requests
2019-12-17 13:09:03 +03:00
04de9d0f7b
Merge: - DNS: "custom_ip" blocking mode didn't work after app restart
...
Close #1262
Squashed commit of the following:
commit bacd683ef5b52e275323a3c07b370ca08702403e
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 17:00:49 2019 +0300
fix
commit 3d4f9626460de3e13a621f2b8e535e9e0939e2bb
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 16:54:23 2019 +0300
fix
commit bf924bf90e9b705883bec88f8d7af11c39c1f322
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 16:45:41 2019 +0300
add test
commit 43338ea3645a025d69dd838bc732344255960bed
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 16:07:51 2019 +0300
- DNS: "custom_ip" blocking mode didn't work after app restart
commit 220f32e713a95d2c67355c61e419dd09df9d42b2
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 15:46:01 2019 +0300
- first run: fix panic on stop in case initialization didn't complete
e.g. when Stats module can't be initialized because of incompatible file system
2019-12-16 17:04:30 +03:00
6a2430b799
Merge: - clients: IPv6 address matching didn't work
...
Close #1261
Squashed commit of the following:
commit acc39ea6c0d88cb9d2b07837e89db2c170263891
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 12:29:33 2019 +0300
minor
commit 0d2ef3d53185d5ca17797e2ac20f0efc1498a53c
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 12:13:17 2019 +0300
add link to GH
commit 0da754b1751057968780b457a2f490f4148275a8
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 16 11:53:42 2019 +0300
- clients: IPv6 address matching didn't work
2019-12-16 12:36:52 +03:00
b00a789ca3
Revert "Merge: + DNS: TLS handshake: terminate handshake on bad SNI"
...
This reverts commit c8c76ae12b
2019-12-13 17:38:17 +03:00
c8c76ae12b
Merge: + DNS: TLS handshake: terminate handshake on bad SNI
...
Close #1014
Squashed commit of the following:
commit 759248efc0587ff2f288996c47739e602c557a76
Author: Simon Zolin <s.zolin@adguard.com>
Date: Thu Dec 12 19:26:46 2019 +0300
support empty ServerName
commit 68afecd5eca5ae66262b12dcb414b50efe88dc02
Author: Simon Zolin <s.zolin@adguard.com>
Date: Wed Dec 11 14:40:22 2019 +0300
+ DNS: TLS handshake: terminate handshake on bad SNI
2019-12-13 13:06:37 +03:00
ef57f7e192
- DNS: fix race in WriteDiskConfig()
2019-12-12 15:04:29 +03:00
000e842f7b
- DNS: fix deadlock in Server.ServeHTTP()
...
s.RLock() is called again in filterResponse() while another thread
holds s.Lock()
2019-12-12 15:00:10 +03:00
c9ccc53282
Merge: * set BlockingMode: "null_ip" by default; minor improvements
...
Squashed commit of the following:
commit 653544b98dc4d1b9a74e1509d0e6104b71bcdcb3
Author: Simon Zolin <s.zolin@adguard.com>
Date: Wed Dec 11 17:34:41 2019 +0300
* DNS reconfigure: protect against delayed socket fd close
commit 9e650f37dee7f771bf1d9d714c35f0a81788aa16
Author: Simon Zolin <s.zolin@adguard.com>
Date: Wed Dec 11 15:28:33 2019 +0300
- fix race on startup
commit 878fdb8fc4ebbc6fab683a65f5e4298e64c2073e
Author: Simon Zolin <s.zolin@adguard.com>
Date: Wed Dec 11 15:11:21 2019 +0300
* travis: don't run tests
commit 1c4ab60684ee22d55e6d2a3350c0f24d9844255c
Author: Simon Zolin <s.zolin@adguard.com>
Date: Wed Dec 11 14:56:28 2019 +0300
* travis: 'release.sh' and then run tests
commit e1f644b8d9a1f3b46990cdfb1b75fd81b3a49d33
Author: Simon Zolin <s.zolin@adguard.com>
Date: Wed Dec 11 14:52:59 2019 +0300
* set BlockingMode: "null_ip" by default
2019-12-11 17:54:34 +03:00
0a66913b4d
Merge: * use upstream servers directly for the internal DNS resolver
...
Close #1212
* Server.Start(config *ServerConfig) -> Start()
+ Server.Prepare(config *ServerConfig)
+ Server.Resolve(host string)
+ Server.Exchange()
* rDNS: use internal DNS resolver
- clients: fix race in WriteDiskConfig()
- fix race: move 'clients' object from 'configuration' to 'HomeContext'
Go race detector didn't like our 'clients' object in 'configuration'.
+ add AGH startup test
. Create a configuration file
. Start AGH instance
. Check Web server
. Check DNS server
. Wait until the filters are downloaded
. Stop and cleanup
* move module objects from config.* to Context.*
* don't call log.SetLevel() if not necessary
This helps to avoid Go race detector's warning
* ci.sh: 'make' and then run tests
Squashed commit of the following:
commit 86500c7f749307f37af4cc8c2a1066f679d0cfad
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 18:08:53 2019 +0300
minor
commit 6e6abb9dca3cd250c458bec23aa30d2250a9eb40
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 18:08:31 2019 +0300
* ci.sh: 'make' and then run tests
commit 114192eefea6800e565ba9ab238202c006516c27
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 17:50:04 2019 +0300
fix
commit d426deea7f02cdfd4c7217a38c59e51251956a0f
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 17:46:33 2019 +0300
tests
commit 7b350edf03027895b4e43dee908d0155a9b0ac9b
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 15:56:12 2019 +0300
fix test
commit 2f5f116873bbbfdd4bb7f82a596f9e1f5c2bcfd8
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 15:48:56 2019 +0300
fix tests
commit 3fbdc77f9c34726e2295185279444983652d559e
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 15:45:00 2019 +0300
linter
commit 9da0b6965a2b6863bcd552fa83a4de2866600bb8
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 15:33:23 2019 +0300
* config.dnsctx.whois -> Context.whois
commit c71ebdbdf6efd88c877b2f243c69d3bc00a997d7
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 15:31:08 2019 +0300
* don't call log.SetLevel() if not necessary
This helps to avoid Go race detector's warning
commit 0f250220133cefdcb0843a50000cb932802b8324
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 15:28:19 2019 +0300
* rdns: refactor
commit c460d8c9414940dac852e390b6c1b4d4fb38dff9
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 14:08:08 2019 +0300
Revert: * stats: serialize access to 'limit'
Use 'conf *Config' and update it atomically, as in querylog module.
(Note: Race detector still doesn't like it)
commit 488bcb884971276de0d5629384b29e22c59ee7e6
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 13:50:23 2019 +0300
* config.dnsFilter -> Context.dnsFilter
commit 86c0a6827a450414b50acec7ebfc5220d13b81e4
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 13:45:05 2019 +0300
* config.dnsServer -> Context.dnsServer
commit ee35ef095ccaabc89e3de0ef52c9b5ed56b36873
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 13:42:10 2019 +0300
* config.dhcpServer -> Context.dhcpServer
commit 1537001cd211099d5fad01696c0b806ae5d257b1
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 13:39:45 2019 +0300
* config.queryLog -> Context.queryLog
commit e5955fe4ff1ef6f41763461b37b502ea25a3d04c
Author: Simon Zolin <s.zolin@adguard.com>
Date: Tue Dec 10 13:03:18 2019 +0300
* config.httpsServer -> Context.httpsServer
commit 6153c10a9ac173e159d1f05e0db1512579b9203c
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 9 20:12:24 2019 +0300
* config.httpServer -> Context.httpServer
commit abd021fb94039015cd45c97614e8b78d4694f956
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 9 20:08:05 2019 +0300
* stats: serialize access to 'limit'
commit 38c2decfd87c712100edcabe62a6d4518719cb53
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 9 19:57:04 2019 +0300
* config.stats -> Context.stats
commit 6caf8965ad44db9dce9a7a5103aa8fa305ad9a06
Author: Simon Zolin <s.zolin@adguard.com>
Date: Mon Dec 9 19:45:23 2019 +0300
fix Restart()
... and 6 more commits
2019-12-11 12:38:58 +03:00
19a94bf789
+ dns: add "edns_client_subnet" setting
2019-12-10 16:01:17 +03:00
87bb773d3e
* DNS: remove /enable_protection and /disable_protection
2019-12-10 16:01:17 +03:00
1b3122dd35
* /control/set_upstreams_config: allow empty upstream list
2019-12-10 16:01:17 +03:00
4f4da3397c
+ dns: support blocking_mode=custom_ip
2019-12-10 16:01:16 +03:00
26ccee47b5
+ DNS: Get/Set DNS general settings
...
GET /control/dns_info
POST /control/dns_config
2019-12-10 16:01:16 +03:00
Andrey Meshkov
Simon Zolin