Stop whitelisting IGMP

firewall/interception.go

@@ -138,7 +138,7 @@ func handlePacket(pkt packet.Packet) {
 	// 	pkt.RedirToNameserver()
 	// }
 
-	// allow ICMP, IGMP and DHCP
+	// allow ICMP and DHCP
 	// TODO: actually handle these
 	switch meta.Protocol {
 	case packet.ICMP:
@@ -149,10 +149,6 @@ func handlePacket(pkt packet.Packet) {
 		log.Debugf("accepting ICMPv6: %s", pkt)
 		_ = pkt.PermanentAccept()
 		return
-	case packet.IGMP:
-		log.Debugf("accepting IGMP: %s", pkt)
-		_ = pkt.PermanentAccept()
-		return
 	case packet.UDP:
 		if meta.DstPort == 67 || meta.DstPort == 68 {
 			log.Debugf("accepting DHCP: %s", pkt)