diff options
| author | Emīls <emils@mullvad.net> | 2021-10-14 13:06:26 +0100 |
|---|---|---|
| committer | Emīls <emils@mullvad.net> | 2021-10-19 10:21:49 +0100 |
| commit | ef32a262ca615f102fbfeaf3bba334371b3e6494 (patch) | |
| tree | 6f2edde0f0236313ec1df3cd0d7c79a3a3ac29f6 /talpid-core/src | |
| parent | 11266744db4438adfded94b951ffcf2f42539f52 (diff) | |
| download | mullvadvpn-ef32a262ca615f102fbfeaf3bba334371b3e6494.tar.xz mullvadvpn-ef32a262ca615f102fbfeaf3bba334371b3e6494.zip | |
Try fixing firewall issue for macOS
Diffstat (limited to 'talpid-core/src')
| -rw-r--r-- | talpid-core/src/firewall/macos.rs | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/talpid-core/src/firewall/macos.rs b/talpid-core/src/firewall/macos.rs index 4057d03a05..d657c75328 100644 --- a/talpid-core/src/firewall/macos.rs +++ b/talpid-core/src/firewall/macos.rs @@ -5,6 +5,7 @@ use std::{ env, net::{IpAddr, Ipv4Addr}, }; +use subslice::SubsliceExt; use talpid_types::net; pub use pfctl::Error; @@ -551,11 +552,26 @@ impl Firewall { fn enable(&mut self) -> Result<()> { if self.pf_was_enabled.is_none() { - self.pf_was_enabled = Some(self.pf.is_enabled()?); + self.pf_was_enabled = Some(self.is_enabled()); } Ok(self.pf.try_enable()?) } + fn is_enabled(&self) -> bool { + let cmd = duct::cmd!("/sbin/pfctl", "-s", "info"); + const EXPECTED_OUTPUT: &'static [u8] = b"Status: Enabled"; + match cmd.run() { + Ok(output) => output.stdout.as_slice().find(&EXPECTED_OUTPUT).is_some(), + Err(err) => { + log::error!( + "Failed to execute pfctl, assuming pf is not enabled: {}", + err + ); + false + } + } + } + fn restore_state(&mut self) -> Result<()> { match self.pf_was_enabled.take() { Some(true) => Ok(self.pf.try_enable()?), |
