diff --git a/docs/changes.txt b/docs/changes.txt index 5944d8a..1a7ae80 100644 --- a/docs/changes.txt +++ b/docs/changes.txt @@ -195,3 +195,7 @@ v0.8.1 * winws2, blockcheck2: allow multiple instances in windows, linux, freebsd (not openbsd) * nfqws2: fix critical bug - wrong ipv6 dissection * zapret-auto: fix standard_failure_detector http redirect regression + +0.8.7 + +* nfqws2: removed hard check for host: presence in http_req diff --git a/nfq2/desync.c b/nfq2/desync.c index 1b78756..525cfed 100644 --- a/nfq2/desync.c +++ b/nfq2/desync.c @@ -1298,11 +1298,6 @@ static uint8_t dpi_desync_tcp_packet_play( if (l7payload==L7P_HTTP_REQ) { bHaveHost = HttpExtractHost(rdata_payload, rlen_payload, host, sizeof(host)); - if (!bHaveHost) - { - DLOG("not applying tampering to HTTP without Host:\n"); - goto pass; - } } else if (l7payload==L7P_TLS_CLIENT_HELLO || l7proto==L7_TLS && l7payload==L7P_UNKNOWN && ctrack_replay && !ReasmIsEmpty(&ctrack_replay->reasm_client)) {