diff options
| author | David Lönnhager <david.l@mullvad.net> | 2025-08-14 16:11:54 +0200 |
|---|---|---|
| committer | David Lönnhager <david.l@mullvad.net> | 2025-08-21 14:58:30 +0200 |
| commit | 8581e1b9834776f0ce6c325fc59e5ed3ef76615f (patch) | |
| tree | de455eb726c815082286d64f398d5373fab686a0 | |
| parent | 0a7a9169b07c090beeebeab4bed2ca256839b143 (diff) | |
| download | mullvadvpn-8581e1b9834776f0ce6c325fc59e5ed3ef76615f.tar.xz mullvadvpn-8581e1b9834776f0ce6c325fc59e5ed3ef76615f.zip | |
Fix incorrect condition layers in WinFw
| -rw-r--r-- | windows/winfw/src/winfw/rules/baseline/permitvpntunnelservice.cpp | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/windows/winfw/src/winfw/rules/baseline/permitvpntunnelservice.cpp b/windows/winfw/src/winfw/rules/baseline/permitvpntunnelservice.cpp index 50cdc45733..7659ee352c 100644 --- a/windows/winfw/src/winfw/rules/baseline/permitvpntunnelservice.cpp +++ b/windows/winfw/src/winfw/rules/baseline/permitvpntunnelservice.cpp @@ -38,7 +38,6 @@ bool PermitVpnTunnelService::AddEndpointFilter(const std::optional<PermitVpnTunn filterBuilder .description(L"This filter is part of a rule that permits hosting services that listen on the tunnel interface") .provider(MullvadGuids::Provider()) - .layer(FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4) .sublayer(MullvadGuids::SublayerBaseline()) .weight(wfp::FilterBuilder::WeightClass::Medium) .permit(); @@ -53,7 +52,7 @@ bool PermitVpnTunnelService::AddEndpointFilter(const std::optional<PermitVpnTunn .name(L"Permit inbound connections on tunnel interface (IPv4)") .layer(FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4); - wfp::ConditionBuilder conditionBuilder(FWPM_LAYER_ALE_AUTH_CONNECT_V4); + wfp::ConditionBuilder conditionBuilder(FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4); conditionBuilder.add_condition(ConditionInterface::Alias(m_tunnelInterfaceAlias)); if (endpoint.has_value()) @@ -76,7 +75,7 @@ bool PermitVpnTunnelService::AddEndpointFilter(const std::optional<PermitVpnTunn .name(L"Permit inbound connections on tunnel interface (IPv6)") .layer(FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6); - wfp::ConditionBuilder conditionBuilder(FWPM_LAYER_ALE_AUTH_CONNECT_V6); + wfp::ConditionBuilder conditionBuilder(FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6); conditionBuilder.add_condition(ConditionInterface::Alias(m_tunnelInterfaceAlias)); if (endpoint.has_value()) |