summaryrefslogtreecommitdiffhomepage
path: root/talpid-core
diff options
context:
space:
mode:
authorDavid Lönnhager <david.l@mullvad.net>2020-01-31 14:41:54 +0100
committerDavid Lönnhager <david.l@mullvad.net>2020-03-16 09:47:52 +0100
commit7610fcbfd8df8ecac6bd45ee8da54a7cd002b469 (patch)
tree2a769c468c01b0e0a4f91fb41455998aa009c525 /talpid-core
parent8b24d7dc78a77a264b60f7f3d36fbfbd28e5e52d (diff)
downloadmullvadvpn-7610fcbfd8df8ecac6bd45ee8da54a7cd002b469.tar.xz
mullvadvpn-7610fcbfd8df8ecac6bd45ee8da54a7cd002b469.zip
Permit traffic to unique local addresses with "Allow LAN" enabled
Diffstat (limited to 'talpid-core')
-rw-r--r--talpid-core/src/firewall/mod.rs3
1 files changed, 2 insertions, 1 deletions
diff --git a/talpid-core/src/firewall/mod.rs b/talpid-core/src/firewall/mod.rs
index 9c81dd63df..9a02321031 100644
--- a/talpid-core/src/firewall/mod.rs
+++ b/talpid-core/src/firewall/mod.rs
@@ -31,12 +31,13 @@ pub use self::imp::Error;
#[cfg(unix)]
lazy_static! {
/// When "allow local network" is enabled the app will allow traffic to and from these networks.
- pub(crate) static ref ALLOWED_LAN_NETS: [IpNetwork; 5] = [
+ pub(crate) static ref ALLOWED_LAN_NETS: [IpNetwork; 6] = [
IpNetwork::V4(Ipv4Network::new(Ipv4Addr::new(10, 0, 0, 0), 8).unwrap()),
IpNetwork::V4(Ipv4Network::new(Ipv4Addr::new(172, 16, 0, 0), 12).unwrap()),
IpNetwork::V4(Ipv4Network::new(Ipv4Addr::new(192, 168, 0, 0), 16).unwrap()),
IpNetwork::V4(Ipv4Network::new(Ipv4Addr::new(169, 254, 0, 0), 16).unwrap()),
IpNetwork::V6(Ipv6Network::new(Ipv6Addr::new(0xfe80, 0, 0, 0, 0, 0, 0, 0), 10).unwrap()),
+ IpNetwork::V6(Ipv6Network::new(Ipv6Addr::new(0xfd00, 0, 0, 0, 0, 0, 0, 0), 8).unwrap()),
];
/// When "allow local network" is enabled the app will allow traffic to these networks.
pub(crate) static ref ALLOWED_LAN_MULTICAST_NETS: [IpNetwork; 5] = [