diff options
| author | David Lönnhager <david.l@mullvad.net> | 2025-09-09 10:05:08 +0200 |
|---|---|---|
| committer | David Lönnhager <david.l@mullvad.net> | 2025-09-12 11:40:51 +0200 |
| commit | 5f4dc945c9a30035989be9a02879e54072f14d48 (patch) | |
| tree | 7bf86b44db5ef2d3f0498e05f07b1b21f1767941 | |
| parent | 76da33c9e4780e8daf166c550242eb2d062bbf85 (diff) | |
| download | mullvadvpn-5f4dc945c9a30035989be9a02879e54072f14d48.tar.xz mullvadvpn-5f4dc945c9a30035989be9a02879e54072f14d48.zip | |
Fix inability to use port 53 for allowed endpoint in WinFw
| -rw-r--r-- | windows/winfw/src/winfw/fwcontext.cpp | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/windows/winfw/src/winfw/fwcontext.cpp b/windows/winfw/src/winfw/fwcontext.cpp index 1393949223..dc0a38b304 100644 --- a/windows/winfw/src/winfw/fwcontext.cpp +++ b/windows/winfw/src/winfw/fwcontext.cpp @@ -114,13 +114,19 @@ void AppendAllowedEndpointRules clients.push_back(endpoint.clients[i]); } + auto sublayer = + ( + DNS_SERVER_PORT == endpoint.endpoint.port + ? rules::multi::PermitEndpoint::Sublayer::Dns + : rules::multi::PermitEndpoint::Sublayer::Baseline + ); + ruleset.emplace_back(std::make_unique<multi::PermitEndpoint>( wfp::IpAddress(endpoint.endpoint.ip), endpoint.endpoint.port, endpoint.endpoint.protocol, clients, - // TODO: DNS sublayer if port 53 - multi::PermitEndpoint::Sublayer::Baseline + sublayer )); } |