Commit Graph

  • 49da96d5d9
    Merge pull request #101 from roburio/release-0.7 v0.7 Hannes Mehnert 2020-05-19 14:51:11 +0200
  • b50fd495a7 Need to copy the source directory, otherwise it does not build for us. linse 2020-05-19 14:41:13 +0200
  • 53bf4f960c update to ocaml 4.10 and mirage 3.7.7 linse 2020-05-19 14:35:22 +0200
  • cc534d9618 Update changes for release. linse 2020-05-19 11:07:25 +0200
  • 17ace89ed8
    Merge pull request #100 from talex5/changes linse 2020-05-19 11:02:39 +0200
  • 470160dcb2 Update changelog Thomas Leonard 2020-05-16 15:19:05 +0100
  • 152202b0de
    Merge pull request #99 from xaki23/o4100 Hannes Mehnert 2020-05-16 11:12:22 +0200
  • 6a1b012527
    bump qubes-builder ocaml-version to 4.10.0 for gcc-10 compatibility xaki23 2020-05-15 18:36:03 +0200
  • d34842e31a
    Merge pull request #96 from roburio/squash Hannes Mehnert 2020-05-15 17:33:23 +0200
  • 8927a45f43 [ci skip] Edit CHANGES linse 2020-05-15 17:31:30 +0200
  • 2d78d47591 Support firewall rules with hostnames. linse 2020-04-29 16:06:48 +0200
  • 87df5bdcc0 Read firewall rules from QubesDB. The module Rules contains a rule matcher instead of hardcoded rules now. linse 2020-04-29 15:58:01 +0200
  • 02e515d27c
    Merge pull request #95 from hannesm/mirage-nat.2.1.0 Thomas Leonard 2020-02-19 14:27:41 +0000
  • 65324b4197 Update Dockerfile to get new mirage-nat version Thomas Leonard 2020-02-19 14:14:26 +0000
  • 88fec9fa49 adapt to mirage-nat 2.1.0 API (Nat_packet returns a Fragments.Cache.t - which is now a Lru.F.t) Hannes Mehnert 2020-02-08 15:58:37 +0100
  • 554e73a46d cleanup: remove exception cases during Ethernet decode / Nat.of_ipv4_packet - they do not raise exceptions anymore Hannes Mehnert 2020-02-08 15:55:32 +0100
  • 0ced0ee901
    Merge pull request #91 from xaki23/mirage-3.7-qb Thomas Leonard 2020-01-14 14:50:22 +0000
  • 16581b1e2e
    Merge pull request #90 from talex5/cleanup Thomas Leonard 2020-01-14 12:54:48 +0000
  • e68962ac48
    support mirage-3.7 via qubes-builder xaki23 2020-01-13 20:48:46 +0100
  • 8e714c7712 Removed unreachable Lwt.catch Thomas Leonard 2020-01-13 10:05:38 +0000
  • ab3508a936 Remove unused Clock argument to Uplink Thomas Leonard 2020-01-13 09:50:48 +0000
  • 48b38fa992 Fix Lwt.4.5.0 in the Dockerfile for faster builds Thomas Leonard 2020-01-13 09:49:37 +0000
  • e851565823
    Merge pull request #89 from roburio/mirage-3.7 Thomas Leonard 2020-01-13 09:45:04 +0000
  • a734bcd2d3 [ci skip] adjust expected sha256 Hannes Mehnert 2020-01-11 16:01:08 +0100
  • 730957d19b upgrade opam repository to current head and mirage to 3.7.4 Hannes Mehnert 2020-01-11 15:46:22 +0100
  • 28bda78d20 fix deprecation warnings (Mirage_clock_lwt -> Mirage_clock) Hannes Mehnert 2020-01-11 15:46:02 +0100
  • 3fc418e80c qualify all return with Lwt, use Lwt.return_unit where possible Hannes Mehnert 2020-01-11 15:39:20 +0100
  • 0f476c4d7b mirage-nat 2.0.0 and mirage-qubes 0.8.0 compatibility Hannes Mehnert 2020-01-11 15:36:02 +0100
  • c66ee54a9f revert bc7706cc97, mirage-xen since 5.0.0 reverted the split of OS into Os_xen Hannes Mehnert 2020-01-11 14:34:25 +0100
  • e8f62b8532
    Merge pull request #88 from xaki23/pin-mirage-3.5.2 Thomas Leonard 2019-12-28 19:50:47 +0000
  • 43656be181
    pin mirage to 3.5.2 for qubes-builder builds xaki23 2019-12-27 23:19:35 +0100
  • 81fb9c8183 use released dns and pf-qubes Hannes Mehnert 2019-12-23 15:10:00 +0100
  • dab790cb68
    Merge pull request #83 from marmot1791/marmot1791-patch-readme Thomas Leonard 2019-12-14 12:05:46 +0000
  • dad1f6a723
    Update per review Snowy Marmot 2019-12-14 00:24:55 +0000
  • 315fe4681e
    Note that AppVM Size may need to increase Snowy Marmot 2019-11-27 16:01:58 +0000
  • 0aeea267af Use patched XenStore to debug unwatch crash Thomas Leonard 2019-11-22 11:32:20 +0000
  • 706be3d823
    Merge pull request #81 from talex5/upstream-updates Thomas Leonard 2019-11-18 09:46:14 +0000
  • 930d209cdb Fix build Thomas Leonard 2019-11-17 14:25:42 +0000
  • 2bab775222 Update the firewall to olles changes to dns_client. linse 2019-09-28 17:56:01 +0200
  • 7b705a3e68 Rule matching engine needs to be in Lwt.t linse 2019-09-28 16:18:41 +0200
  • 0f5173c84e Refactor some more. Mindy 2019-09-20 11:01:36 -0500
  • 33180cfa66 Simplify classify_client_packet. Mindy 2019-09-20 10:42:45 -0500
  • cf17f9e403 Removede all warnings. Mindy 2019-09-20 10:15:05 -0500
  • 319282c560 update TODO with state from our brains Mindy 2019-09-20 09:35:28 -0500
  • 7ebe7c2fb5 replace mvar with condition Mindy 2019-09-19 11:10:02 -0500
  • 5355237365 update TODO Mindy 2019-09-19 10:51:17 -0500
  • b0499aa3ed wip: proper nxdomain handling Mindy 2019-09-19 10:49:37 -0500
  • ef5261bf17 Wip Friday. linse 2019-09-13 18:05:54 +0200
  • 4a7c63b54a un-de-reference Resolver.resolver, and leave a note about why Mindy 2019-09-12 19:01:27 -0500
  • d9bdbbb435 Wip 2. linse 2019-09-12 18:09:37 +0200
  • 8c9265f3d3 wip: behavior in :( dns cases linse 2019-09-12 17:29:07 +0200
  • c2bcf89057 :x linse 2019-09-11 19:42:31 +0200
  • 2d34e7f533 Tidy resolver. linse 2019-09-11 19:27:27 +0200
  • f485e36527 Tidy rules. linse 2019-09-11 19:02:53 +0200
  • 574d739fef remove unused variables Mindy 2019-09-11 11:17:30 -0500
  • 4e27b49378 Attempt to make port tracking pure, add a note that this will not work. linse 2019-09-09 18:17:34 +0200
  • a4a61c6531 Revert "Trying to make dns and nat port tracking stateless / pure . It does not" linse 2019-09-09 18:15:01 +0200
  • 526fa5db35 Trying to make dns and nat port tracking stateless / pure . It does not work. linse 2019-09-09 18:13:58 +0200
  • 91d92a58ff Update test script to released ocaml-dns, remove ref in resolver state. linse 2019-09-09 17:19:14 +0200
  • 13abef8a42 Add random to update ocaml-dns to 4.0.0. linse 2019-09-09 16:42:13 +0200
  • 78de5f3389 Revert "wip use dns-client and its API" linse 2019-09-09 16:10:41 +0200
  • fe7ad5feec Revert "try to use dns client interface. the firewall did not send dns requests" linse 2019-09-09 16:10:26 +0200
  • 35a7bb98d2 try to use dns client interface. the firewall did not send dns requests after this change. linse 2019-09-09 16:08:20 +0200
  • ad21e8a1da wip use dns-client and its API linse 2019-09-06 17:48:49 +0200
  • 1b11458675 WIP linse 2019-09-04 18:53:42 +0200
  • cf9a30c18e Empty the nat table. Drop existing connections on rule update. linse 2019-09-04 18:23:39 +0200
  • 066bd01f78 We are actually done, everything is cached in the resolver. linse 2019-09-04 16:36:57 +0200
  • 04fd88fcb7 Where to go from the good news. linse 2019-09-04 14:15:31 +0200
  • 4d2e00bcfe Extract lookup_and_retry function. linse 2019-09-04 14:01:42 +0200
  • 32e4b8a31a
    Merge pull request #80 from talex5/upstream-updates Thomas Leonard 2019-08-25 19:09:54 +0100
  • 49195ed5e1 Update Docker build for new mirage-xen Thomas Leonard 2019-08-25 18:41:09 +0100
  • bc7706cc97
    rename things for newer mirage-xen versions xaki23 2019-08-25 18:12:59 +0200
  • 3fefba21a7
    bump OCAML_VERSION to 4.08.1 xaki23 2019-08-25 18:12:17 +0200
  • ca43f12f47 good news, everyone! linse 2019-08-16 18:15:05 +0200
  • 1d6bb5f594 Merge branch 'static-pf-rules' of github.com:yomimono/qubes-mirage-firewall into static-pf-rules Mindy 2019-08-14 11:06:42 -0500
  • 3636add88e WIP, porting mvar stuff from toy example. Do we still wait and retry? Mindy 2019-08-14 11:01:45 -0500
  • 407ca4403b re-enable tests Mindy 2019-08-14 10:19:52 -0500
  • 2421cd57ac The tcp/udp nameserver mystery. linse 2019-08-13 18:13:14 +0200
  • 6f133242ea fix a lot more compiler warnings Mindy 2019-08-14 09:14:14 -0500
  • 957ba45033 The tcp/udp nameserver mystery. linse 2019-08-13 18:13:14 +0200
  • 983da2bb9d fix hardcoded robur.io in handle_answers Mindy 2019-08-07 12:10:30 -0500
  • acb53698c4 fix some compiler warnings Mindy 2019-08-07 12:07:34 -0500
  • 8601fc3a89 use Domain_name.t map for outstanding dns requests Mindy 2019-08-07 11:30:20 -0500
  • 27f0d1fee1 WIP: new DNS interface linse 2019-08-07 18:06:27 +0200
  • 1f76f646e1 Add an upper bound for mirage-xen Reynir Björnsson 2019-08-05 15:38:03 +0200
  • c9dbc5b68e Add lower constraint on mirage-xen Reynir Björnsson 2019-08-05 15:34:14 +0200
  • 6e848fa50d Changes required for mirage-xen >= 4.0.0 Reynir Björnsson 2019-08-05 15:29:19 +0200
  • bbfa28f474 Re-enable tests (its slow tho) linse 2019-07-31 17:26:43 +0200
  • 524b09b58e We are passing on the dns result. linse 2019-07-31 17:19:17 +0200
  • 99e2e1750c We got a resolution. linse 2019-07-31 16:55:39 +0200
  • e175e7835a wip Mindy 2019-07-30 11:06:22 -0500
  • 8a55bcfab5 wip: resolving dns and applying rules Mindy 2019-07-30 09:24:21 -0500
  • 15e2f2fc3b WIP linse 2019-07-29 17:58:39 +0200
  • b8a310dfa6
    Merge pull request #75 from talex5/upstream-updates Thomas Leonard 2019-07-28 17:48:09 +0100
  • cac3e53be1 README: create the symlink-redirected docker dir xaki23 2019-07-28 13:33:43 +0200
  • ce29c09f0f Show final sha256 checksum in Travis output Thomas Leonard 2019-07-28 17:01:23 +0100
  • 8b411db751 Removed some hard-coded installs from Dockerfile Thomas Leonard 2019-07-28 16:49:16 +0100
  • 16231e2e52 Adjust to ipaddr-4.0.0 renaming _bytes to _octets xaki23 2019-07-28 13:08:15 +0200
  • cb6d03d83d Use OCaml 4.08.0 for qubes-builder builds (was 4.07.1) xaki23 2019-07-28 13:07:09 +0200
  • 8e833b7995
    update docker build path to current opam-repository, declare new ipaddr min version, update build hash xaki23 2019-07-28 15:22:56 +0200