github/portmaster
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Stop whitelisting IGMP

Browse Source
This commit is contained in:
Daniel
2020-05-15 17:17:17 +02:00
parent cb991e9f02
commit 6e9c22d0b5
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
firewall/interception.go
View File

@@ -138,7 +138,7 @@ func handlePacket(pkt packet.Packet) {
// pkt.RedirToNameserver() // pkt.RedirToNameserver()
// } // }
// allow ICMP, IGMP and DHCP // allow ICMP and DHCP
// TODO: actually handle these // TODO: actually handle these
switch meta.Protocol { switch meta.Protocol {
case packet.ICMP: case packet.ICMP:
@@ -149,10 +149,6 @@ func handlePacket(pkt packet.Packet) {
log.Debugf("accepting ICMPv6: %s", pkt) log.Debugf("accepting ICMPv6: %s", pkt)
_ = pkt.PermanentAccept() _ = pkt.PermanentAccept()
return return
case packet.IGMP:
log.Debugf("accepting IGMP: %s", pkt)
_ = pkt.PermanentAccept()
return
case packet.UDP: case packet.UDP:
if meta.DstPort == 67 || meta.DstPort == 68 { if meta.DstPort == 67 || meta.DstPort == 68 {
log.Debugf("accepting DHCP: %s", pkt) log.Debugf("accepting DHCP: %s", pkt)