mirrors/opensnitch
1
0
Fork 0
mirror of https://github.com/evilsocket/opensnitch.git synced 2025-03-04 08:34:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
opensnitch/daemon/go.mod

33 lines
1.1 KiB
Modula-2
Raw Normal View History

updated import paths
2020-12-09 18:18:42 +01:00
module github.com/evilsocket/opensnitch/daemon
add go.mod and remove old Gopkg.lock
2020-07-16 23:05:25 +02:00
go.mod: updated deps, minimum required go version
2023-10-23 20:50:24 +02:00
go 1.17
add go.mod and remove old Gopkg.lock
2020-07-16 23:05:25 +02:00
require (
github.com/fsnotify/fsnotify v1.4.7
Allow to configure firewall rules from the GUI (#660) * Allow to configure firewall rules from the GUI (WIP) New features: - Configure and list system firewall rules from the GUI (nftables). - Configure chains' policies. - Add simple rules to allow incoming ports. - Add simple rules to exclude apps (ports) from being intercepted. This feature is only available for nftables. iptables is still supported, you can add rules to the configuration file and they'll be loaded, but you can't configure them from the GUI. More information: #592
2022-05-03 22:05:12 +02:00
github.com/golang/protobuf v1.5.0
updated go.mod Bumped gopacket and netlink versions.
2023-09-22 01:05:20 +02:00
github.com/google/gopacket v1.1.19
Bump nftables-go lib version to 0.1.0
2023-01-22 14:40:08 +01:00
github.com/google/nftables v0.1.0
Allow to configure firewall rules from the GUI (#660) * Allow to configure firewall rules from the GUI (WIP) New features: - Configure and list system firewall rules from the GUI (nftables). - Configure chains' policies. - Add simple rules to allow incoming ports. - Add simple rules to exclude apps (ports) from being intercepted. This feature is only available for nftables. iptables is still supported, you can add rules to the configuration file and they'll be loaded, but you can't configure them from the GUI. More information: #592
2022-05-03 22:05:12 +02:00
github.com/google/uuid v1.3.0
Add gobpf to go.mod gobpf was introduced in #397 but not added to go.mod yet
2021-05-19 21:21:27 +02:00
github.com/iovisor/gobpf v0.2.0
Added systemd-resolved DNS monitor Up until now we intercepted query and DNS answers using these methods: - Intercepting DNS queries to port 53. - Intercepting DNS answers from port 53 - Intercepting glibc DNS functions. Unfortunately there are scenarios where these methods are not enough: - When using DNSSEC, DoT, DoH, etc. - When resolvers return DNS answers from cache - When resolvers don't use glibc functions to resolve domains. - When applications use D-BUS to query for domain names instead of using UDP/TCP (VPNs, flatpaks, electron based apps, etc.). With this new DNS monitor now we're able to intercept DNS answers when systemd-resolved is used to resolve domains. This includes queries from flatpaks and others containerized applications, as well as cyphered DNS queries. Closes #874
2023-03-10 15:04:42 +01:00
github.com/varlink/go v0.4.0
go.mod: updated deps, minimum required go version
2023-10-23 20:50:24 +02:00
github.com/vishvananda/netlink v1.1.1-0.20220115184804-dd687eb2f2d4
github.com/vishvananda/netns v0.0.0-20200728191858-db3c7e526aae
golang.org/x/net v0.17.0
golang.org/x/sys v0.13.0
updated protoc command to generate the protobuffer closes #521
2021-10-06 11:10:57 +02:00
google.golang.org/grpc v1.32.0
updated go.mod, added go.sum
2024-05-22 01:39:19 +02:00
)
require (
github.com/BurntSushi/toml v0.4.1 // indirect
github.com/google/go-cmp v0.5.6 // indirect
github.com/josharian/native v0.0.0-20200817173448-b6b71def0850 // indirect
github.com/mdlayher/netlink v1.4.2 // indirect
github.com/mdlayher/socket v0.0.0-20211102153432-57e3fa563ecb // indirect
golang.org/x/mod v0.8.0 // indirect
golang.org/x/text v0.13.0 // indirect
golang.org/x/tools v0.6.0 // indirect
google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55 // indirect
added action reject When blocking a connection via libnetfilter-queue using NF_DROP the connection is discarded. If the blocked connection is a DNS query, the app that initiated it will wait until it times out, which is ~30s. This behaviour can for example cause slowdowns loading web pages: #481 This change adds the option to reject connections by killing the socket that initiated them. Denying: $ time telnet 1.1.1.1 22 Trying 1.1.1.1... telnet: Unable to connect to remote host: Connection timed out real 2m10,039s Rejecting: $ time telnet 1.1.1.1 22 Trying 1.1.1.1... telnet: Unable to connect to remote host: Software caused connection abort real 0m0,005s
2021-09-12 10:54:24 +02:00
google.golang.org/protobuf v1.26.0 // indirect
updated go.mod, added go.sum
2024-05-22 01:39:19 +02:00
honnef.co/go/tools v0.2.2 // indirect
add go.mod and remove old Gopkg.lock
2020-07-16 23:05:25 +02:00
)
Reference in a new issue Copy permalink