Skip to content

a set of free software to protect you from Internet hijacking

License

Notifications You must be signed in to change notification settings

vfreex/hijackfilter

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

VFREE HijackFilter

VFREE HijackFilter is a free software to protect you from unwanted Internet hijacking.

Copyright (C) 2016 Rayson Zhu [email protected]

If you encountered Internet hijacking, call your ISP to stop it! This software should be your last choice for preventing Internet hijacking.

1. Installation

1.1 Build

  • Ubuntu / Debian
apt install make gcc iptables-dev linux-headers-`uname -r` pkg-config
make
  • Fedora
dnf install make gcc iptables-devel kernel-devel-`uname -r` pkgconfig
make
  • RHEL / CentOS
yum install make gcc iptables-devel kernel-devel-`uname -r` pkgconfig
make

1.2 Install

make install
depmod

1.3. Uninstall

make uninstall
depmod

2. Usage

2.1 DNSFilter

DNSFilter is a Netfilter extension to help you match and filter proofed DNS responses.

Suppose your ISP redirects nonexistent domain names to 192.0.2.1 and 198.51.100.1. To match and drop those spoofed DNS responses, we can use following commands:

# for IPv4 network
iptables -t mangle -A PREROUTING -p udp --sport 53 -m vfree_dns \
  --a 192.0.2.1,198.51.100.1\
  -j DROP
# for IPv6 network
ip6tables -t mangle -A PREROUTING -p udp --sport 53 -m vfree_dns \
  --a 192.0.2.1,198.51.100.1\
  -j DROP

Use -h option for help.

iptables -m vfree_dns -h

3. TO-DO

  • HTTPFilter: a netfilter module to match and filter proofed HTTP messages

4. LICENSE

This program is distributed under GNU GENERAL PUBLIC LICENSE Version 3.

About

a set of free software to protect you from Internet hijacking

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published