summaryrefslogtreecommitdiffhomepage
path: root/docs/security.md
diff options
context:
space:
mode:
authorLinus Färnstrand <linus@mullvad.net>2019-12-10 08:45:42 +0100
committerLinus Färnstrand <linus@mullvad.net>2020-01-07 21:50:38 +0100
commitcefdd045e8b07419e24f03fd491c2d3eb332c1e5 (patch)
tree99e96cf8ae5340509d65fa66e383955c28c5d0de /docs/security.md
parentc85a5ac79e4e8a9ead739552c6375aa3088003d3 (diff)
downloadmullvadvpn-cefdd045e8b07419e24f03fd491c2d3eb332c1e5.tar.xz
mullvadvpn-cefdd045e8b07419e24f03fd491c2d3eb332c1e5.zip
Clarify what "that" is
Diffstat (limited to 'docs/security.md')
-rw-r--r--docs/security.md4
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/security.md b/docs/security.md
index 8793681691..acf4864d32 100644
--- a/docs/security.md
+++ b/docs/security.md
@@ -128,8 +128,8 @@ stays active until the user requests a disconnect, quit, server change, change o
that affects the tunnel or until the tunnel goes down unexpectedly.
In this state, all traffic in both directions over the tunnel interface is allowed. Minus DNS
-requests (TCP and UDP destination port 53) not to a gateway IP for that interface. Meaning we can
-*only* request DNS inside the tunnel and *only* from the relay server itself.
+requests (TCP and UDP destination port 53) not to a gateway IP on the tunnel interface.
+Meaning we can *only* request DNS inside the tunnel and *only* from the relay server itself.
This state allows traffic on all interfaces to and from the IP and port combo that the tunnel
runs over. See the [connecting] state for details.