Archives
/
algo
mirror of https://github.com/trailofbits/algo
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
1,138 Commits
5 Branches
2 Tags
10 MiB
fix/14704
master
dependabot/pip/ansible-9.4.0
dependabot/github_actions/actions/setup-python-5.1.0
dependabot/pip/jinja2-approx-eq-3.1.3
v1.1
v1.0
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '90c2b1bbeb'
${ noResults }
Commit Graph

1138 Commits (90c2b1bbebfb8763a3d0d07cf6a3defaea4fa375)
 

Author SHA1 Message Date
Jack Ivanov 7e7476ec6b
Update cloud-pre.yml 5 years ago
Tim H b4740185e8 Add catch-all VPN On Demand Rule (#739) 
If a user is not connected to a trusted Wi-Fi network or if the
URLStringProbe fails none of the existing dictionaries match.

According to the Apple Configuration Profile Reference[1] section "VPN
Payload > On Demand Rules Dictionary Keys" a default behavior for
unknown networks with no matching criteria should always be set as the
last dictionary in the array. The current default behavior is to allow a
connection to occur, but this behavior is not guaranteed.

Tear down the VPN connection and do not reconnect on demand as long as
the catch-all dictionary matches to guarantee the default behavior and
more specifically allow users to access captive portals.

[1]: https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html
 5 years ago
Demian 5e5424df69 fix OS is undefined error (#1335) 5 years ago
Jack Ivanov ec56203b87
Support for custom domain names in the endpoint (#1337) 5 years ago
Jack Ivanov 216cd09dcf
Disable wireguard PersistentKeepalive by default (#1338) 5 years ago
Jack Ivanov bfe168d31c
Closes #1059 5 years ago
David Myers 5cb1fdd339 Clarify prompts (#1331) 5 years ago
David Myers df3d547fb3 Document using WireGuard app on macOS (#1327) 
* Document using WireGuard app on macOS

* Update README.md

* Make WireGuard the default for Apple devices

* clarify user list

* fix tests

* connect on demand
 5 years ago
David Myers 1be0908c51 Add note about new WireGuard for iOS default MTU (#1293) 5 years ago
Jack Ivanov 40b42c4f33
Get started with Azure more easily (#1323) 5 years ago
Jack Ivanov 9f66e47607
Closes #1321 5 years ago
Jack Ivanov 4a6888add6
WiFi exclude list fix (#1318) 5 years ago
Jack Ivanov 43ed5b2aaa
add flags=(attach_disconnected) to dnscrypt-proxy apparmor profile (#1312) 5 years ago
Jack Ivanov c47dd4a7ab encode wifi networks to base64 (#1303) 5 years ago
Jack Ivanov a266b4d633 Allow windows users install VPN for all users in the system (#1310) 5 years ago
Jack Ivanov f1cb183ecf Travis-CI fixes 5 years ago
Luvpreet Singh 6233642c66 fix(update-users): changed generate p12 password task (#1289) 
Changed task's module to generic python format for python2 and python3.
 5 years ago
Jack Ivanov b89d406ee0
Update deploy-from-ansible.md (#1307) 5 years ago
Jack Ivanov b8e1c253c6
Fixes #1305 6 years ago
David Myers f25415dde3 Document using WireGuard on iOS (#1266) 6 years ago
Jack Ivanov 7a6daff1ff IPv6 fix (#1302) 6 years ago
Selim Şumlu 7a338b511d Update deploy-from-windows.md (#1296) 
Updating the tutorial according to latest Windows 10 and Ubuntu changes
 6 years ago
Jack Ivanov 11ed8b8f30
Update README.md 6 years ago
Jack Ivanov 72763ddec4
Update deploy-from-ansible.md 6 years ago
Angel Montes de Oca 44ab95f12b Include Algo generated password (#1272) 
I change a line to Include the Algo generated password so the users do not need to manually enter the password when installing on Windows 10 computers.
 6 years ago
David Myers 9830947dfd Sync list of supported cloud hosts (#1278) 6 years ago
TC1977 5d74ded90f Update README.md (#1286) 
Adds Wireguard to the first line.
 6 years ago
David Myers 5981bb9cad Replace 'max_mss' with 'reduce_mtu' (#1253) 6 years ago
Michael Schubert 0177284fea README: fix small typos (#1262) 6 years ago
David Myers f9702fb3df Document DigitalOcean firewall (#1257) 6 years ago
Izzy Gomez 0a098b31f9 Fix typo in deploy-from-ansible.md. (#1261) 6 years ago
Jack Ivanov 955a986c21
IPv6 forwarding fixes (#1256) 6 years ago
Jack Ivanov a6cd89564d
Fixes #1246 6 years ago
Federico G. Schwindt a4f2c97fd2 Fix ipv4 address missing on reboot (#1245) 6 years ago
David Myers e478d31e50 Update local install instructions (#1148) 
* Update local install instructions

* Update deploy-to-ubuntu.md
 6 years ago
David Myers f3519425c4 Note that WireGuard configs cannot be shared (#1238) 6 years ago
TC1977 4eeaadcfb3 Add info about modifying blacklists (#1236) 
# Algo will use the following lists to block ads. You can add new block lists 
# after deployment by modifying the line starting "BLOCKLIST_URLS=" at:
# /usr/local/sbin/adblock.sh 
# If you load very large blocklists, you may also have to modify resource limits:
# /etc/systemd/system/dnsmasq.service.d/100-CustomLimitations.conf
 6 years ago
William Woodruff 319b630cf4 docs/gce: Fix typos, clarify instructions (#1239) 6 years ago
David Myers 66681521c1 Increase memory limit for dnsmasq (#1228) 
* Increase memory limit for dnsmasq

* Increase memory limit for dnsmasq further
 6 years ago
David Myers 8d23f715d7 Run adblock.sh at a random time (#1227) 6 years ago
jxn 66bbf0e83a fix typo in powershell execution in windows client set up doc (#1224) 6 years ago
Jack Sullivan adb4dfa839 Add "unable to write 'random state'" resolution (#1219) 
I ran into the same issue as #1058, and the solution worked.

This PR generalizes the solution and adds it to the troubleshooting documentation, making it easier to resolve for future users.
 6 years ago
David Myers 22395f5f84 Add p12 password back to mobileconfigs (#1218) 6 years ago
Jack Ivanov a66d8f0069 on-build python venvs (#1199) 6 years ago
Jack Ivanov 9187d8e637 dnscrypt-proxy apparmor fix (#1210) 
<!--- Provide a general summary of your changes in the Title above -->

## Description
Apparmor profile for dnscrypt-proxy didn't work at all

## Motivation and Context
Fixes #1155

## How Has This Been Tested?
Deployed to DigitalOcean, checked that the dnscrypt-proxy binary is in enforce mode

## Types of changes
<!--- What types of changes does your code introduce? Put an `x` in all the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)

## Checklist:
<!--- Go over all the following points, and put an `x` in all the boxes that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
- [x] I have read the **CONTRIBUTING** document.
- [x] My code follows the code style of this project.
- [x] All new and existing tests passed.
 6 years ago
Jack Ivanov 45b00ee994
BSD StrongSwan fixes (#1207) 6 years ago
David Myers d8b318b59a Detect when running in Docker (#1204) 6 years ago
Jack Ivanov 1c16554b41
Rename Docker.md to deploy-from-docker.md 6 years ago
jxn affadd401d fix typos in docker documentation and shell-script text (#1202) 6 years ago
Jack Ivanov 66d30e3005
WireGuard update-users fix (#1183) 6 years ago