Your Name
9af3023a37
dsa
2025-12-08 01:41:08 +03:00
Domingo Dirutigliano
16f96aa6f6
using brotli 1.2 from pypi, fixed tests to py 3.14, removed from experimental pyproxy
2025-11-11 23:30:48 +01:00
Domingo Dirutigliano
49c6c14fe5
upgrade to py3.14 and fedora 43
2025-10-13 15:38:38 +02:00
Domingo Dirutigliano
f554ac558a
additional fixes to socket binding
2025-10-01 15:37:20 +02:00
Minei3oat
88f4f54b55
Allow binding to UNIX domain socket
...
UNIX domain sockets are the recommended configuration for proxying with Nginx:
https://uvicorn.dev/deployment/#running-behind-nginx
2025-10-01 01:49:28 +02:00
Domingo Dirutigliano
2362eb8045
password hashing customized and also set already hashed by run.py
2025-09-29 14:33:12 +02:00
Domingo Dirutigliano
aeb97062e2
bind firegex also on ipv6 by default
2025-09-29 13:15:09 +02:00
Domingo Dirutigliano
402be8c021
new crypto system for passwords, removed bcrypt
2025-09-29 12:53:05 +02:00
Domingo Dirutigliano
2798cd4f2a
Merge pull request #25 from Minei3oat/bcrypt
...
Restrict bcrypt version to <5
2025-09-29 00:03:27 +02:00
Minei3oat
907c85d85d
Add Content-Type=plain/text for metrics endpoint
...
Without the content type, prometheus will reject the metrics if no `fallback_scrape_protocol` is specified.
https://prometheus.io/docs/prometheus/3.0/migration/#scrape-protocols
https://prometheus.io/docs/instrumenting/exposition_formats/#text-based-format
2025-09-28 21:09:25 +02:00
Minei3oat
709de42ef2
Restrict bcrypt version to <5
...
Starting with version 5.0.0, bcrypt will throw a ValueError if the input is more than 72 bytes.
passlib's `hash` processes the input such that more than 72 bytes are passed to bcrypt, independently of the input length.
As a result, the backend of firegex breaks when calculating the hash in `set_psw`.
2025-09-28 20:43:46 +02:00
Domingo Dirutigliano
89b234e670
Pointed to a specific brotli version on google repo due to a tmp rollback
2025-09-15 10:19:31 +02:00
Domingo Dirutigliano
8d78c5df6a
using brotli version from google (merged from domysh/brotli)
2025-09-04 17:29:39 +02:00
Domingo Dirutigliano
760529e37a
firegex custom host and better port config managment
2025-08-17 16:23:49 +02:00
Domingo Dirutigliano
b49c42f06f
fixed: packet size of mnl including packet size it-self (was causing crash sometime) and frontend updates
2025-07-28 15:45:22 +02:00
Domingo Dirutigliano
d7f6eb7524
using name and id as pk for PyFilter when updating stats
2025-06-13 13:33:13 +02:00
Domingo Dirutigliano
ac1b2c9f76
removed constraint to prothijack
2025-05-05 19:11:21 +02:00
Domingo Dirutigliano
a109ee8067
websocket fix + starting firegex as root if capsh fails
2025-04-12 22:15:08 +02:00
Domingo Dirutigliano
ed85aa5430
changing prio on nf chains
2025-04-12 21:44:02 +02:00
Domingo Dirutigliano
129a262704
RST docs + connection error on test
2025-04-12 20:34:45 +02:00
Domingo Dirutigliano
d0b2c67554
Revert "using also bridge table on network hooking"
...
This reverts commit 33b22a174c
2025-04-12 20:32:52 +02:00
Domingo Dirutigliano
33b22a174c
using also bridge table on network hooking
2025-04-12 16:51:42 +02:00
Domingo Dirutigliano
c0a475a92f
using RST flag for closing connection
2025-04-12 12:50:22 +02:00
Domingo Dirutigliano
d4b2b6c72d
niceness on firegex process
2025-03-26 22:25:09 +01:00
Domingo Dirutigliano
8ddd8b44f2
pyhton and c related fixes on empty filters and mangling
2025-03-24 11:55:51 +01:00
Domingo Dirutigliano
81fb48c97c
minor code change
2025-03-23 11:04:30 +01:00
Domingo Dirutigliano
25d71c4b94
README: update
2025-03-09 23:52:34 +01:00
Domingo Dirutigliano
73c40d2f5d
data handler improves, written test for nfproxy, new option on parsing fail
2025-03-09 22:14:34 +01:00
Domingo Dirutigliano
8a271da839
fixed mangle
2025-03-07 22:14:03 +01:00
Domingo Dirutigliano
9eb7d5461f
added checks and changed prio
2025-03-07 18:16:23 +01:00
Domingo Dirutigliano
eda44f12ff
Merge pull request #19 from Pwnzer0tt1/tmp-meta-branch
...
Taken edits from main removing edits of regexfilter.cpp
2025-03-05 10:06:23 +01:00
Domingo Dirutigliano
5a523817cc
Update regexfilter.cpp
2025-03-05 10:04:28 +01:00
Domingo Dirutigliano
6e07933b37
Merge pull request #18 from Minei3oat/fix_metrics
...
Fix metrics & add tests
2025-03-05 09:58:21 +01:00
Domingo Dirutigliano
c90d817ad4
cli command with proxy simulation
2025-03-04 15:51:46 +01:00
Domingo Dirutigliano
fde3ee57a5
crash and unexpected behaviours fix
2025-03-03 23:55:24 +01:00
Domingo Dirutigliano
072745cc06
code push
2025-03-03 20:25:36 +01:00
Domingo Dirutigliano
8ae533e8f7
push: code changes x2
2025-02-28 21:14:09 +01:00
Domingo Dirutigliano
6a11dd0d16
push: code changes
2025-02-25 23:53:04 +01:00
Domingo Dirutigliano
7cc005dfb2
TCP packet used in matching fixed
2025-02-25 11:18:30 +01:00
Minei3oat
26a2428512
Fix metrics endpoint
2025-02-25 00:59:58 +01:00
Domingo Dirutigliano
8652f40235
nfproxy module writing: written part of the firegex lib, frontend refactored and improved, c++ improves
2025-02-20 19:51:28 +01:00
Domingo Dirutigliano
e5973947e6
test on settings API added + improves on nfproxy code including fail-open
2025-02-18 23:49:53 +01:00
Domingo Dirutigliano
5ef38df66a
regex checked by hyperscan directly with error messages
2025-02-18 21:20:19 +01:00
Domingo Dirutigliano
59652fc697
optional nfqueue fail-open option
2025-02-18 17:36:15 +01:00
Domingo Dirutigliano
ece058d533
firewall fix, preparing for minor release
2025-02-18 14:37:11 +01:00
Domingo Dirutigliano
5a1e1bc225
less copy and less lock
2025-02-17 13:07:06 +01:00
Domingo Dirutigliano
7f7e3353ec
User-Space thread balancing + refactoring
2025-02-16 16:33:34 +01:00
Domingo Dirutigliano
63e7f73139
Re-structuring on new model
2025-02-14 01:04:29 +01:00
Domingo Dirutigliano
2fb77a348f
removed fastapi_socketio + general improves
2025-02-12 01:16:10 +01:00
Domingo Dirutigliano
f3ba6dc716
more RESTful APIs
2025-02-11 19:11:30 +01:00
