summaryrefslogtreecommitdiffhomepage
path: root/talpid-core/src
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2025-02-17 15:05:18 +0100
committerMarkus Pettersson <markus.pettersson@mullvad.net>2025-02-17 15:11:06 +0100
commit67fd70c8a9f1c4333210fbab936bf256feb7794c (patch)
treeaf8022a9b1c6df36edbb4ce8a21a7590c259167e /talpid-core/src
parent0ae2c89585845274661b63d48e4f298f6054e83c (diff)
downloadmullvadvpn-67fd70c8a9f1c4333210fbab936bf256feb7794c.tar.xz
mullvadvpn-67fd70c8a9f1c4333210fbab936bf256feb7794c.zip
Fix clean up NAT workaround rules when disconnecting
Diffstat (limited to 'talpid-core/src')
-rw-r--r--talpid-core/src/firewall/macos.rs3
1 files changed, 3 insertions, 0 deletions
diff --git a/talpid-core/src/firewall/macos.rs b/talpid-core/src/firewall/macos.rs
index 9b0d9f6b28..b679f45fa6 100644
--- a/talpid-core/src/firewall/macos.rs
+++ b/talpid-core/src/firewall/macos.rs
@@ -926,6 +926,9 @@ impl Firewall {
// remove_anchor() does not deactivate active rules
self.pf
.flush_rules(ANCHOR_NAME, pfctl::RulesetKind::Filter)?;
+ if *NAT_WORKAROUND {
+ self.pf.flush_rules(ANCHOR_NAME, pfctl::RulesetKind::Nat)?;
+ }
Ok(())
}