Simon Kelley ebbfb893bd Protection against pathalogical DNSSEC domains. ...

An attacker can create DNSSEC signed domains which need a lot of
work to verfify. We limit the number of crypto operations to
avoid DoS attacks by CPU exhaustion.

Signed-off-by: DL6ER <dl6er@dl6er.de>

2024-02-13 16:38:46 +01:00

..

api

Merge branch 'development-v6' into update/dnsmasq

2024-02-13 07:12:16 +01:00

config

Add RFC 8482 filtering (Providing Minimal-Sized Responses to DNS Queries That Have QTYPE=ANY) by default

2024-02-13 09:51:53 +01:00

database

Merge pull request #1841 from pi-hole/tweak/list_id

2024-02-09 20:52:35 +01:00

dnsmasq

Protection against pathalogical DNSSEC domains.

2024-02-13 16:38:46 +01:00

lua

Reduce number of warnings coming from third-party modules we use shown during compilation

2023-12-07 22:27:14 +01:00

syscalls

Reduce variable scope

2023-12-07 22:36:47 +01:00

tools

Don't print double newlines after invalid domains

2024-01-07 22:23:19 +01:00

tre-regex

Reduce number of warnings coming from third-party modules we use shown during compilation

2023-12-07 22:27:14 +01:00

webserver

Fix debug.api config options description.

2024-02-10 09:34:25 +01:00

zip

Merge pull request #1766 from pi-hole/new/teleporter_v5

2024-01-06 16:42:04 +01:00

args.c

Add CI tests

2023-12-15 20:58:57 +01:00

args.h

Modify arch-tests, refine how we detect an already running pihole-FTL process and how we get other processes names from proc (the existing method didn't work on alpine:arm) and remove the obsolete struct size checking

2023-05-31 21:13:27 +02:00

capabilities.c

Remove reboot and poweroff actions from the API

2023-07-28 22:46:28 +02:00

capabilities.h

Suggest using sudo if insufficient permissions to edit the config file were detected

2023-11-07 21:07:21 +01:00

CMakeLists.txt

Fix failure to build from source on Fedora 39

2024-02-01 16:24:00 +00:00

daemon.c

Merge pull request #1719 from pi-hole/tweak/env_vars_list

2024-02-10 16:21:42 +01:00

daemon.h

Fix dns.piholePTR description and add another fallback layer for obtaining the DNS domain used by the system (if not specified through Pi-hole)

2023-12-18 21:04:37 +01:00

datastructure.c

Fix failed auto-merge in https://github.com/pi-hole/FTL/pull/1841

2024-02-09 21:14:40 +01:00

datastructure.h

Merge pull request #1841 from pi-hole/tweak/list_id

2024-02-09 20:52:35 +01:00

dnsmasq_interface.c

Set REPLY of queries that failed DNSSEC validation to NONE (if not already set elsehow)

2024-02-13 14:28:47 +01:00

dnsmasq_interface.h

Managing DHCP leases is only possible when the DHCP server is enabled

2023-10-29 07:16:39 +01:00

edns0.c

Merge branch 'development' into new/http

2023-04-11 12:08:02 +02:00

edns0.h

Simplify EDNS handling code and also interpret replies received from upstream

2023-04-07 20:40:52 +02:00

enums.h

Rename query_storage.regex_id to query_storage.list_id as it is already now used to also store exact matching domainlist entries by their ID. This commit further extends this to also store the (first) matching anti-/gravity list (if available)

2023-12-25 04:57:05 +01:00

events.c

Automatically migrate the API password hash and the lists of clients and domains to be excluded from setupVars.conf

2023-01-08 21:21:38 +01:00

events.h

Add explicit event queue to avoid possible race collisions when many signals arrive at the same time (or very very close to each other)

2020-09-03 20:45:59 +02:00

files.c

Merge pull request #1796 from pi-hole/new/ftl.gravity_tmp

2023-12-09 09:30:13 +01:00

files.h

Merge branch 'development-v6' into new/config_checksum

2023-11-23 22:11:07 +01:00

FindDBus.cmake

Add shortcut to compile an all-options build of dnsmasq inside FTL. Note that this does not include ubus as it is an OpenWRT-native thing that cannot be setup easily on any other distro.

2022-11-10 20:36:25 +01:00

FTL.h

Ensure database analysis / MAC vendor update is running also when FTL is frequently restarted (e.g. during development or for users joining a special branch, e.g. during extended bug fixing or a beta release period)

2024-01-06 09:13:29 +01:00

gc.c

Remove unused upstream recycle check

2023-12-24 21:44:35 +01:00

gc.h

Add /api/actions/flush/logs

2023-05-24 20:39:18 +02:00

gen_version.cmake

Force 8 digits to display git object names

2022-11-14 22:52:53 +01:00

log.c

Merge branch 'development-v6' into tweak/env_vars_list

2024-01-13 10:46:51 +01:00

log.h

Simplify debugstr() function

2023-12-01 15:13:51 +01:00

main.c

Merge pull request #1766 from pi-hole/new/teleporter_v5

2024-01-06 16:42:04 +01:00

main.h

Continue to run webserver even when dnsmasq fails to still serve the web interface. Change the type of api/dns/blocking from bool to enum-string to support the new "failure" state

2023-05-24 17:19:12 +02:00

metrics.h

Expose dnsmasq metrics

2023-11-30 21:54:58 +01:00

overTime.c

Remove obsolete overTime structure stored for each upstream. This reduces memory consumption per upstream destination from 640 to 56 bytes each

2023-11-26 10:48:59 +01:00

overTime.h

Check struct sizes on the CI (in code) instead of during compile time (using the preprocessor)

2022-04-18 10:39:43 +02:00

procps.c

Modify arch-tests, refine how we detect an already running pihole-FTL process and how we get other processes names from proc (the existing method didn't work on alpine:arm) and remove the obsolete struct size checking

2023-05-31 21:13:27 +02:00

procps.h

Add system.hostname and ftl.{pid,%cpu,%mem} to /api/ftl/sysinfo

2023-01-14 10:08:03 +01:00

regex_r.h

Add .codespellignore file to fix spell-checker action

2023-03-20 19:46:09 +01:00

regex.c

Rename query_storage.regex_id to query_storage.list_id as it is already now used to also store exact matching domainlist entries by their ID. This commit further extends this to also store the (first) matching anti-/gravity list (if available)

2023-12-25 04:57:05 +01:00

resolve.c

Add clarifying comments about the rather obscure DNS message compression feature. DNS should have used LZ77 instead of its own sophomoric compression algorithm.

2023-12-16 21:30:29 +01:00

resolve.h

Add CI tests

2023-12-15 20:58:57 +01:00

shmem.c

Improve shmem comments

2023-11-29 22:09:38 +01:00

shmem.h

Remove obsolete string escaping routines. They have been necessary for the Telnet API, however, this is gone and our JSON functions know how to deal with spaces

2023-11-29 22:05:10 +01:00

signals.c

If someone terminates FTL, try to obtain who is the murderer and log it

2023-12-23 16:06:40 +01:00

signals.h

If someone terminates FTL, try to obtain who is the murderer and log it

2023-12-23 16:06:40 +01:00

struct_size.c

Add RISC-V 64-bit support and builds

2023-03-20 20:03:19 +01:00

struct_size.h

Fuse ARM and 32bit checks as they are identical

2022-04-24 09:00:55 +02:00

timers.c

Allow fractional delay for blocking mode changes and fix a few smaller memory leaks

2023-06-03 13:26:58 +02:00

timers.h

Allow fractional delay for blocking mode changes and fix a few smaller memory leaks

2023-06-03 13:26:58 +02:00

vector.c

Fix possible deferencing of NULL pointers

2023-12-07 21:00:01 +01:00

vector.h

Check struct sizes on the CI (in code) instead of during compile time (using the preprocessor)

2022-04-18 10:39:43 +02:00

version.h.in

Add cmake build

2020-05-25 10:45:13 -07:00