Part of https://github.com/ooni/probe-engine/issues/356

Of course, the coverage is gonna be lower. We don't specify with tests
the behaviour on non Linu...

We want to merge jafar into probe-engine. We don't want to carry over
the dependency from githu...

We were still using the deprecated github.com/ooni/netx. Let us
instead use github.com/ooni/pro...

Update deps and adapt to current miniooni

Part of https://github.com/ooni/probe-engine/issues...

The toplevel file is now iptables.go. The unsupported case is
clearly marked by being now named...

This diff adds extra integration test checks that make sure we continue
to be able to reproduce...

Related to #7. We want to close the connection after we are sure
that we have completed the TLS...

This is part of #7

* Add a "bad" proxy server

This proxy server will read some bytes from any connection and the...

This allows to write tests where the child is, e.g., curl and be
confident that the return code...

* iptables: hijack ports 80 and 443

I have not figured out yet a way to hijack these two port...

This is an important test case because we need to make sure we have
a reasonable output even wh...

We can use this script to perform QA of telegram implementations. We are
using the command line...

Required by #6. I have determined the most robust way to block
telegram web is to filter by the...

This is part of #6.

I initially thought I could get away without full command lines but
this...

* iptables: create rules on a specific chain

Closes #1

Also, while there, make sure we use...

This is a workaround for #10

* jafar: allow running a censored command

This is part of #6. We want to run the scripts in t...

This is yak shaving before https://github.com/ooni/jafar/issues/6

Similar rationale as ooni/netx#124

While there, implement pretty logging and fix a bunch of typos.

As explained in the updated README, using iptables to drop specific
DNS queries is not super rea...

While there, remove all the tabs.

We need to handle signals. Otherwise cleanups are not run and we
don't restore the _statu quo an...

It seems the `dot` transport has issues that predictably cause
measurements to fail. See for exa...

Maybe there we have more leeway and less weird errors?

Adapted from github.com/m-lab/ndt-server...

This also quite likely more efficient because we stream
the response, IIUC, when the body is chu...

We're losing macOS as a system, but we're gaining and very easy
and effective way of simulating ...

This code does not work on Linux and works unreliably on macOS
for unspecified reasons. The exis...

Otherwise MK was able to evade 😛

While there, rationalize flag names.

Design from the point of view of the researcher that wants to
configure specfic bits of their te...

So we can filter with BPF more aggressively.