Lochnair / xt_tls

Filter TLS traffic with IPtables
GNU General Public License v3.0
228 stars 45 forks source link

Fix domain suffix matching to occur only on the zone boundaries (dots) #38

Open mpolk opened 4 years ago

mpolk commented 4 years ago

Fix domain suffix matching to occur only on the zone boundaries. For example: mydomain.upperlevel.com should match upperlevel.com but not domain.upperlevel.com (as it was previously)

Lochnair commented 3 years ago

@mpolk Sorry to you and anyone else that never got a response here.

I'm trying to understand what the current behavior is, and what this PR does, but I'm failing to see what needed to be fixed with this. Care to enlighten me?

Also I presume I only need these commits for this PR? https://github.com/Lochnair/xt_tls/pull/38/commits/ecce2722548898c4e1c410412af8f96b95ebc83d https://github.com/Lochnair/xt_tls/pull/38/commits/bb455ed0a9f5f8e1ed5ce98384ab0c9a4b8b21f2