vikarti.anatra/safing-portmaster
1
0
Fork 0
mirror of https://github.com/safing/portmaster synced 2025-09-02 02:29:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Stop tunnels if they are not needed anymore due to verdict change

Browse source
This commit is contained in:
Daniel 2022-10-10 11:22:09 +02:00
parent f63df67d23
commit e00131e937
2 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
firewall/interception.go
View file

@ -163,6 +163,14 @@ func resetAllConnectionVerdicts() {
// Apply privacy filter and check tunneling. // Apply privacy filter and check tunneling.
filterConnection(ctx, conn, nil) filterConnection(ctx, conn, nil)
// Stop existing SPN tunnel if not needed anymore.
if conn.Verdict.Active != network.VerdictRerouteToTunnel && conn.TunnelContext != nil {
err := conn.TunnelContext.StopTunnel()
if err != nil {
log.Debugf("filter: failed to stopped unneeded tunnel: %s", err)
}
}
// Save if verdict changed. // Save if verdict changed.
if conn.Verdict.Firewall != previousVerdict { if conn.Verdict.Firewall != previousVerdict {
conn.Save() conn.Save()

1
network/connection.go
View file

@ -162,6 +162,7 @@ type Connection struct { //nolint:maligned // TODO: fix alignment
// connection is using. // connection is using.
TunnelContext interface { TunnelContext interface {
GetExitNodeID() string GetExitNodeID() string
StopTunnel() error
} }
// Internal is set to true if the connection is attributed as an // Internal is set to true if the connection is attributed as an