vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-01 18:19:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Stop whitelisting IGMP

Browse source
This commit is contained in:
Daniel 2020-05-15 17:17:17 +02:00
parent cb991e9f02
commit 6e9c22d0b5
1 changed files with 1 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
firewall/interception.go
View file

@ -138,7 +138,7 @@ func handlePacket(pkt packet.Packet) {
// pkt.RedirToNameserver() // pkt.RedirToNameserver()
// } // }
// allow ICMP, IGMP and DHCP // allow ICMP and DHCP
// TODO: actually handle these // TODO: actually handle these
switch meta.Protocol { switch meta.Protocol {
case packet.ICMP: case packet.ICMP:
@ -149,10 +149,6 @@ func handlePacket(pkt packet.Packet) {
log.Debugf("accepting ICMPv6: %s", pkt) log.Debugf("accepting ICMPv6: %s", pkt)
_ = pkt.PermanentAccept() _ = pkt.PermanentAccept()
return return
case packet.IGMP:
log.Debugf("accepting IGMP: %s", pkt)
_ = pkt.PermanentAccept()
return
case packet.UDP: case packet.UDP:
if meta.DstPort == 67 || meta.DstPort == 68 { if meta.DstPort == 67 || meta.DstPort == 68 {
log.Debugf("accepting DHCP: %s", pkt) log.Debugf("accepting DHCP: %s", pkt)