GoodbyeDPI uses Reserved protocol, not TCP · ValdikSS/GoodbyeDPI#573

(3 留言) (0 反應) (0 負責人)C (28,275 star) (2,174 fork)batch import

help wanted

描述

Operating system / операционная система

Windows 10 22H2 19045.4780

Running as service / Запуск программы как сервис

I run it as a regular program / Запускаю программу обычным образом

Describe the bug / Опишите ошибку программы

Default Firewall blocking policy blocks all connections. Firewall Outbound rule: Program: System (or %SystemRoot%\System32\ntoskrnl.exe) Protocols and Ports: TCP 80, 443

Additional information / Дополнительная информация

Journal log:

The Windows Filtering Platform has blocked a connection.

Application Information:
	Process ID:		4
	Application Name:	System

Network Information:
	Direction:		Outbound
	Source Address:		192.168.1.64
	Source Port:		25007
	Destination Address:	52.166.127.37
	Destination Port:		443
	Protocol:		255

Filter Information:
	Filter Run-Time ID:	130933
	Layer Name:		Connect
	Layer Run-Time ID:	48

Running the program with params: "C:\Program Files\GoodbyeDPI\x86_64\goodbyedpi.exe" -9 --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253 --blacklist ..\russia-blacklist.txt --blacklist ..\russia-youtube.txt

貢獻者指南

技術棧: c
領域: security
議題類型: bug
難度: 3
預計時間: 1-2 days
活動狀態: fresh
清晰度: mostly clear
前置要求: Windows networking basicsC programming
新手友善度: 40
研究方向: Investigate how GoodbyeDPI sets protocol type in its raw socket connections. The issue indicates that the tool uses protocol 255 (Reserved) instead of TCP, which triggers firewall blocks. Look at the socket creation and initialization code, likely in files related to network handling, such as goodbyedpi.c or similar. Check if there are any comments from maintainers on how to fix the protocol field. The fix may involve setting the protocol to IPPROTO TCP (6) when appropriate.