aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/conf (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-05-07ui: remove setfocus hackJason A. Donenfeld1-3/+0
It introduces weird other problems. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-07ui: set global state before main state in trayJason A. Donenfeld1-1/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-07ui: move things out of iconproviderJason A. Donenfeld5-126/+60
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-07ui: confview should be more picky about which tunnelJason A. Donenfeld1-13/+20
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-07ui: scale icons according to DPIJason A. Donenfeld2-2/+2
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-06installer: simplify tmpfile cleanupSimon Rozman1-21/+18
Signed-off-by: Simon Rozman <simon@rozman.si>
2019-05-06updater: move into managerJason A. Donenfeld14-289/+562
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: do tray click action when popup clickedJason A. Donenfeld1-0/+3
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: use natural sorting orderJason A. Donenfeld5-9/+70
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: attach shortcuts to their windowsJason A. Donenfeld3-0/+8
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: use context menus for all shortcutsJason A. Donenfeld2-21/+107
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: fix weird scrolling behavior in editorJason A. Donenfeld1-0/+8
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: check for duplicate names alwaysJason A. Donenfeld1-13/+9
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: improve update logging and tray logicJason A. Donenfeld5-5/+19
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-05ui: syntax: implement trafic blocking semanticsJason A. Donenfeld7-293/+256
This is our "auto kill switch". Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-04ui: use more windows iconsJason A. Donenfeld3-33/+17
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-04ui: embolden update tray itemJason A. Donenfeld1-5/+12
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-04service: temporarily disable security attributesJason A. Donenfeld1-1/+11
This must be reverted before we release! See big source code comment. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-04ui: show custom connected and disconnected icons in balloonJason A. Donenfeld1-2/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-04firewall: do not add unused permit rules when !restrictAllJason A. Donenfeld1-16/+18
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-04ui: specify default action in trayJason A. Donenfeld2-2/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03version: expose OsVersion for firewallJason A. Donenfeld2-26/+37
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: DNS is TCP and UDPJason A. Donenfeld1-3/+22
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: block dns before allowing localhostJason A. Donenfeld3-38/+31
This prevents DNS leaks from people who have a localhost resolver doing something funky. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: fix thundering herd problem in importing/deletingJason A. Donenfeld4-117/+53
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: only use one listJason A. Donenfeld2-230/+22
Unless you use complicated rights veto rules, WFP's policy is that between sublayers, block always outweighs allow. It's easier, therefore, to simply weight a single sublayer correctly, with allow rules having heavier weight than block rules. This basically means that we have to be careful that DNS isn't a subset of some allow rule. One place where this would be a problem are the permitLan* rules, which we don't use anyway, and so this commit nukes them. Another place would be if somebody is using a localhost/loopback resolver for whatever reason. This is probably a "low risk" sort of thing, but we may want to fix this by ordering the dns block just in front of the loopback permit. The other place is in the wireguard.exe tunnel service itself, which does DNS lookups. Since right now we mostly enforce one-tunnel-at-a- time, this isn't really a problem. But later if we allow nested tunneling, it means that the DNS lookup in a second tunnel can potentially escape the DNS server of the first tunnel. We can address this problem later, perhaps with fancier security descriptors that we shuffle around depending on which state the tunnel is in. And on the bright side, this change allows people to run WireGuard over port 53 itself, which is generally a desirable thing. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: since DNS is a blacklist, we have to exclude our own interfaceJason A. Donenfeld2-6/+18
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: pass blob of security descriptor instead of raw, and give daclJason A. Donenfeld5-30/+33
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: wrap errors because there are lots of syscallsJason A. Donenfeld3-88/+102
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03service: wire up firewallJason A. Donenfeld4-18/+57
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03firewall: introduce incomplete untested prototypeOdd Stranne10-0/+2857
This doesn't support NDP yet, and some major things are still left to be decided, but this is the beginning of something that can be debugged into shape. Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Aleksandar Pesic <peske.nis@gmail.com>
2019-05-03ui: add toolbar after adding it to the tabsJason A. Donenfeld3-79/+89
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: import lowercase extension matchingJason A. Donenfeld1-4/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: background import configsJason A. Donenfeld1-85/+90
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: fix up confview ticker and list sync logicJason A. Donenfeld3-46/+64
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: better manage window sizeJason A. Donenfeld1-1/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: fix left list widthJason A. Donenfeld1-13/+14
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-03ui: double buffer list viewJason A. Donenfeld2-2/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02ui: fix version stringsJason A. Donenfeld1-1/+2
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02ui: use system icons instead of green and red dotsJason A. Donenfeld1-24/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02ui: use system icons in toolbarJason A. Donenfeld6-13/+26
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02updater: use /qb!- instead of /qb-Jason A. Donenfeld1-1/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02ui: rename things to say tunnel lessJason A. Donenfeld3-33/+33
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02ui: move toolbar upJason A. Donenfeld1-0/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02ui: add labels and keyboard shortcutsJason A. Donenfeld1-2/+6
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02service: lock OS thread before making inheritable handlesJason A. Donenfeld1-0/+7
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02service: wtf->wtsJason A. Donenfeld2-3/+3
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02service: set security attributes on new processJason A. Donenfeld4-10/+63
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02service: correct sid boundsJason A. Donenfeld1-2/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2019-05-02service: fix oooJason A. Donenfeld1-1/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.