diff options
| author | David Lönnhager <david.l@mullvad.net> | 2021-04-14 10:56:38 +0200 |
|---|---|---|
| committer | David Lönnhager <david.l@mullvad.net> | 2021-04-16 17:41:50 +0200 |
| commit | 244c68402d36fd508b1479f75c9055dd48e4fb27 (patch) | |
| tree | 680ff48cb430a1bd3744220d87c8956922e520cf /docs | |
| parent | f43babbd1e17f0bec82baebc42a3d4ce155a0715 (diff) | |
| download | mullvadvpn-244c68402d36fd508b1479f75c9055dd48e4fb27.tar.xz mullvadvpn-244c68402d36fd508b1479f75c9055dd48e4fb27.zip | |
Update security document
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/security.md | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/security.md b/docs/security.md index 20307390ec..2fd46e26d8 100644 --- a/docs/security.md +++ b/docs/security.md @@ -90,6 +90,11 @@ The following network traffic is allowed or blocked independent of state: * Incoming UDP from `*:68` to `255.255.255.255:67` * Outgoing UDP from `*:67` to `*:68` +#### Packet forwarding + +On Linux, any situation that permits incoming or outgoing traffic also allows that traffic to be +forwarded. All other forward traffic is rejected. + #### macOS deviations * The app does not look at ICMPv6 type and code headers. So all ICMPv6 is allowed between the |