MHSanaei 68e06a174b fix(job): withhold fail2ban bans for addresses a datagram alone reports ...

The IP-limit job treated every address on the core's online list as one
its sender proved to own and wrote the oldest over-limit ones for the
3x-ipl jail. For Shadowsocks over UDP and for mKCP the core lists a
datagram's source field with no exchange behind it, so a client with an
IP limit could forge sources and get any address firewalled.

A client attached to an enabled inbound that accepts such datagrams,
on the master or on a node, is still counted and disconnected, but its
old addresses are no longer written for fail2ban; a warning says why.

2026-11-01 00:39:26 +01:00

..

amneziawg

fix(amneziawg): bound what a handshake allocates and the tunnel MTU

2026-10-31 14:50:18 +01:00

amneziawgkern

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

amneziawgnet

fix(amneziawg): bound the egress relay's pending tunnel DNS lookups

2026-11-01 00:19:34 +01:00

config

v3.11.0

2026-10-25 20:08:14 +01:00

crypto/nodetoken

fix(nodetoken): stop refusing every node-token key file on Windows

2026-09-27 15:55:42 +02:00

database

fix(clients): store client group names trimmed

2026-11-01 00:03:48 +01:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(logger): reuse the open log rotator when InitLogger runs again

2026-09-27 15:32:20 +02:00

mtproto

feat(mtproto): expose mtg-multi's per-IP pending-handshake limit

2026-10-14 16:46:20 +02:00

nodee2e

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

pia

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

sub

fix(sub): look up a socket child's fallback front on the child's own host

2026-11-01 00:21:03 +01:00

testpg

test(database): give each package its own schema when tests run on PostgreSQL (#6594)

2026-09-26 21:13:42 +02:00

tuic

fix(tuic): bound what unauthenticated connections cost

2026-10-31 15:03:21 +01:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

web

fix(job): withhold fail2ban bans for addresses a datagram alone reports

2026-11-01 00:39:26 +01:00

xray

fix(shadowsocks): keep a 2022 inbound with no enabled client locked

2026-11-01 00:30:14 +01:00