ValdikSS/GoodbyeDPI

GoodbyeDPI uses Reserved protocol, not TCP

Open

#573 opened on Aug 16, 2024

View on GitHub
 (3 comments) (0 reactions) (0 assignees)C (28,275 stars) (2,174 forks)batch import
help wanted

Description

Operating system / операционная система

Windows 10 22H2 19045.4780

Running as service / Запуск программы как сервис

I run it as a regular program / Запускаю программу обычным образом

Describe the bug / Опишите ошибку программы

Default Firewall blocking policy blocks all connections. Firewall Outbound rule: Program: System (or %SystemRoot%\System32\ntoskrnl.exe) Protocols and Ports: TCP 80, 443

Additional information / Дополнительная информация

Journal log:

The Windows Filtering Platform has blocked a connection.

Application Information:
	Process ID:		4
	Application Name:	System

Network Information:
	Direction:		Outbound
	Source Address:		192.168.1.64
	Source Port:		25007
	Destination Address:	52.166.127.37
	Destination Port:		443
	Protocol:		255

Filter Information:
	Filter Run-Time ID:	130933
	Layer Name:		Connect
	Layer Run-Time ID:	48

Running the program with params: "C:\Program Files\GoodbyeDPI\x86_64\goodbyedpi.exe" -9 --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253 --blacklist ..\russia-blacklist.txt --blacklist ..\russia-youtube.txt

Contributor guide

Tech stack
c
Domain
security
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Windows networking basicsC programming
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Investigate how GoodbyeDPI sets protocol type in its raw socket connections. The issue indicates that the tool uses protocol 255 (Reserved) instead of TCP, which triggers firewall blocks. Look at the socket creation and initialization code, likely in files related to network handling, such as goodbyedpi.c or similar. Check if there are any comments from maintainers on how to fix the protocol field. The fix may involve setting the protocol to IPPROTO TCP (6) when appropriate.