Skip to content

Conversation

@luckolen
Copy link
Member

Framework Upgrade: Migrated the solution and project files to .NET 8.0.
Enhanced DNS Engine: Replaced the legacy DNS resolver with ARSoft.Tools.Net. To support DNS over TCP
Added Linux/Docker support using base image to mcr.microsoft.com/dotnet/aspnet:8.0
Protocol Hardening: Refined the ExtendedProtectionPolicy logic to better handle Service Principal Name (SPN) matching during the NTLM handshake.
Added test client to solution which will run basic LDAP queries

…id from the manual parsing to the native Windows parser
- Replace '--usewindowsauth' with '--mode [Windows|Username]' to support
  distinct ADWS endpoint paths.
- Set 'Windows' mode as default to align with Server 2025 "Secure by Default"
  configurations (which disable the /UserName endpoint).
- Update Dockerfile with 'gss-ntlmssp' to support NTLMv2 negotiation from
  Linux/Docker environments.
- Verified compatibility against Server 2022 and 2025 using BadBlood environments.
- Setting the hostip parameter will override the IP in the DNS responses
- only-use-gc-backend can be used to have all requets go via the GC instance
- Updated dockerfile to expose dns service
To be honest, no clue why this started to work, but tested on Server 2025
@luckolen
Copy link
Member Author

luckolen commented Jan 28, 2026

312df64

This commit has added the channel binding support.

Added listenip option
Renamed OnlyUseGCBackend option
Added docker built instructions for ADWSProxy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants