summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2025-02-17 15:50:17 +0100
committerMarkus Pettersson <markus.pettersson@mullvad.net>2025-02-17 15:50:17 +0100
commit6aa3e528013ef4b496ed497a459ee4ceed185231 (patch)
tree6aaad9462c61f3a46277b10bcc7af008f8867a8e
parent0ae2c89585845274661b63d48e4f298f6054e83c (diff)
parent983ade565b3e07fb5cb3c0643ea6bdf5e9371c1a (diff)
downloadmullvadvpn-6aa3e528013ef4b496ed497a459ee4ceed185231.tar.xz
mullvadvpn-6aa3e528013ef4b496ed497a459ee4ceed185231.zip
Merge branch 'remove-scrub-rules-added-by-app-on-disconnect-des-1729'
-rw-r--r--talpid-core/src/firewall/macos.rs5
1 files changed, 5 insertions, 0 deletions
diff --git a/talpid-core/src/firewall/macos.rs b/talpid-core/src/firewall/macos.rs
index 9b0d9f6b28..9892b68561 100644
--- a/talpid-core/src/firewall/macos.rs
+++ b/talpid-core/src/firewall/macos.rs
@@ -926,6 +926,11 @@ impl Firewall {
// remove_anchor() does not deactivate active rules
self.pf
.flush_rules(ANCHOR_NAME, pfctl::RulesetKind::Filter)?;
+ if *NAT_WORKAROUND {
+ self.pf.flush_rules(ANCHOR_NAME, pfctl::RulesetKind::Nat)?;
+ }
+ self.pf
+ .flush_rules(ANCHOR_NAME, pfctl::RulesetKind::Scrub)?;
Ok(())
}