From 6e9c22d0b54685d31574f18e2c8996b5062101e2 Mon Sep 17 00:00:00 2001
From: Daniel <dhaavi@users.noreply.github.com>
Date: Fri, 15 May 2020 17:17:17 +0200
Subject: [PATCH] Stop whitelisting IGMP

---
 firewall/interception.go | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/firewall/interception.go b/firewall/interception.go
index f99c94c0..a916776d 100644
--- a/firewall/interception.go
+++ b/firewall/interception.go
@@ -138,7 +138,7 @@ func handlePacket(pkt packet.Packet) {
 	// 	pkt.RedirToNameserver()
 	// }
 
-	// allow ICMP, IGMP and DHCP
+	// allow ICMP and DHCP
 	// TODO: actually handle these
 	switch meta.Protocol {
 	case packet.ICMP:
@@ -149,10 +149,6 @@ func handlePacket(pkt packet.Packet) {
 		log.Debugf("accepting ICMPv6: %s", pkt)
 		_ = pkt.PermanentAccept()
 		return
-	case packet.IGMP:
-		log.Debugf("accepting IGMP: %s", pkt)
-		_ = pkt.PermanentAccept()
-		return
 	case packet.UDP:
 		if meta.DstPort == 67 || meta.DstPort == 68 {
 			log.Debugf("accepting DHCP: %s", pkt)