vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-15 01:09:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add support for upcoming UNBREAK filter list

Browse source
This commit is contained in:
Daniel 2022-06-01 13:28:10 +02:00
parent 515f4686f7
commit 787f9e7dec
2 changed files with 27 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
firewall/master.go
View file

@ -432,6 +432,16 @@ func checkFilterLists(ctx context.Context, conn *network.Connection, p *profile.
result, reason := p.MatchFilterLists(ctx, conn.Entity)
switch result {
case endpoints.Denied:
// If the connection matches a filter list, check if the "unbreak" list matches too and abort blocking.
for _, blockedListID := range conn.Entity.BlockedByLists {
for _, unbreakListID := range resolvedUnbreakFilterListIDs {
if blockedListID == unbreakListID {
log.Tracer(ctx).Debugf("filter: unbreak filter %s matched, ignoring other filter list matches", unbreakListID)
return false
}
}
}
// Otherwise, continue with blocking.
conn.DenyWithContext(reason.String(), profile.CfgOptionFilterListsKey, reason.Context())
return true
case endpoints.NoMatch: