iodine
iodine lets you tunnel IPv4 data through a DNS server. This can be useful in situations where Internet access is firewalled, but DNS queries are allowed. It needs a TUN/TAP device to operate. The bandwidth is asymmetrical with limited upstream and up to 1 Mbit/s downstream.
| Tags | Communications Internet DNS Security Networking |
|---|---|
| Licenses | ISC |
| Operating Systems | POSIX BSD NetBSD Linux OpenBSD FreeBSD Mac OS X Windows |
Recent releases
- 01 Jun 2009 21:37
Changes: A segmentation fault was fixed for Mac OS X and FreeBSD.
- 21 Mar 2009 21:22
Changes: Windows support was added using the OpenVPN TAP32 driver. The autoprobe functionality has received a number of fixes. iodined now logs to syslog when users log in.
- 23 Jan 2009 19:44
Changes: iodine now does automatic probing of maximum accepted size on downstream data, and the server will fragment using this value. This enhanced throughput and ease of use because big packets like SSH login will work even if relay only allows 512 bytes. iodined now also replies to NS requests and can relay other queries to another DNS server on the same host. The client also uses one more bit of data per byte (base64) in upstream data, if accepted by the relay.
- 06 Aug 2008 23:51
Changes: Groups are now cleared when dropping privileges. Many small patches have been applied. UDP ports are no longer checked, so users behind NAT should not have any problems. This was also needed because most DNS servers are now fixed to randomize ports.
- 30 Nov 2007 15:51
Changes: The server crash on received NULL queries for incorrect domains was fixed. Any DNS error codes are now printed in the client for easier troubleshooting. The password is now hidden, and the nameserver will default to the one in /etc/resolv.conf.
