diff options
| author | David Lönnhager <david.l@mullvad.net> | 2021-04-16 17:43:03 +0200 |
|---|---|---|
| committer | David Lönnhager <david.l@mullvad.net> | 2021-04-16 17:43:03 +0200 |
| commit | 21c86e53ed33f96d933e6c49e88969f899250dd8 (patch) | |
| tree | 680ff48cb430a1bd3744220d87c8956922e520cf /docs | |
| parent | 5da8724dabde03ee94ab03d48cb95cd1ad480c3a (diff) | |
| parent | 244c68402d36fd508b1479f75c9055dd48e4fb27 (diff) | |
| download | mullvadvpn-21c86e53ed33f96d933e6c49e88969f899250dd8.tar.xz mullvadvpn-21c86e53ed33f96d933e6c49e88969f899250dd8.zip | |
Merge branch 'filter-forward-chain'
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/security.md | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/security.md b/docs/security.md index 20307390ec..2fd46e26d8 100644 --- a/docs/security.md +++ b/docs/security.md @@ -90,6 +90,11 @@ The following network traffic is allowed or blocked independent of state: * Incoming UDP from `*:68` to `255.255.255.255:67` * Outgoing UDP from `*:67` to `*:68` +#### Packet forwarding + +On Linux, any situation that permits incoming or outgoing traffic also allows that traffic to be +forwarded. All other forward traffic is rejected. + #### macOS deviations * The app does not look at ICMPv6 type and code headers. So all ICMPv6 is allowed between the |