vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-02 10:39:22 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Implement review suggestion

Browse source
This commit is contained in:
Daniel 2020-11-24 16:35:32 +01:00
parent e74ca5774c
commit d7a3d65881
1 changed files with 5 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
profile/config.go
View file

@ -165,17 +165,7 @@ func registerConfiguration() error {
cfgOptionDisableAutoPermit = config.Concurrent.GetAsInt(CfgOptionDisableAutoPermitKey, int64(status.SecurityLevelsAll)) cfgOptionDisableAutoPermit = config.Concurrent.GetAsInt(CfgOptionDisableAutoPermitKey, int64(status.SecurityLevelsAll))
cfgIntOptions[CfgOptionDisableAutoPermitKey] = cfgOptionDisableAutoPermit cfgIntOptions[CfgOptionDisableAutoPermitKey] = cfgOptionDisableAutoPermit
rulesHelp := strings.ReplaceAll(`Rules are checked from top to bottom, stopping after the first match. Rules are entered in this format: rulesHelp := strings.ReplaceAll(`Rules are checked from top to bottom, stopping after the first match. They can match:
- Every rule starts with a "+" or "-" to determine whether to allow or block matching connections.
- Then, a matching option for an IP, which are explained in detail below.
- The optional third segment can be used to filter by network protocol and port: "TCP/80"
- Examples:
- "+ example.com TCP/80"
- "+ US"
- "- *"
IP address matching options:
- By address: "192.168.0.1" - By address: "192.168.0.1"
- By network: "192.168.0.1/24" - By network: "192.168.0.1/24"
@ -188,6 +178,10 @@ IP address matching options:
- By country (based on IP): "US" - By country (based on IP): "US"
- By filter list - use the filterlist ID prefixed with "L:": "L:MAL" - By filter list - use the filterlist ID prefixed with "L:": "L:MAL"
- Match anything: "*" - Match anything: "*"
Additionally, you may supply a protocol and port just behind that using numbers ("6/80") or names ("TCP/HTTP").
In this case the rule is only matched if the protocol and port also match.
Example: "192.168.0.1 TCP/HTTP"
`, `"`, "`") `, `"`, "`")
// Endpoint Filter List // Endpoint Filter List