mirror of
https://github.com/safing/portmaster
synced 2025-09-02 02:29:12 +00:00
19 lines
570 B
Go
19 lines
570 B
Go
package firewall
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/safing/portmaster/network"
|
|
"github.com/safing/portmaster/profile/endpoints"
|
|
)
|
|
|
|
// PreventBypassing checks if the connection should be denied or permitted
|
|
// based on some bypass protection checks.
|
|
func PreventBypassing(conn *network.Connection) (endpoints.EPResult, string) {
|
|
// Block firefox canary domain to disable DoH
|
|
if strings.ToLower(conn.Entity.Domain) == "use-application-dns.net." {
|
|
return endpoints.Denied, "blocked canary domain to prevent enabling DNS-over-HTTPs"
|
|
}
|
|
|
|
return endpoints.NoMatch, ""
|
|
}
|