summaryrefslogtreecommitdiffhomepage
path: root/windows
diff options
context:
space:
mode:
authorOdd Stranne <odd@mullvad.net>2019-05-15 10:12:01 +0200
committerOdd Stranne <odd@mullvad.net>2019-05-27 10:30:54 +0200
commit7aaa0c055016bbd1b5e931a098b32ffe747a8e49 (patch)
tree55811a0319164ca9f6d6deaf66dd984fce55d558 /windows
parent61d40bdfe4154273de03182433094a7c728efe9b (diff)
downloadmullvadvpn-7aaa0c055016bbd1b5e931a098b32ffe747a8e49.tar.xz
mullvadvpn-7aaa0c055016bbd1b5e931a098b32ffe747a8e49.zip
Allow mDNS broadcasts in LAN firewall rule
Diffstat (limited to 'windows')
-rw-r--r--windows/winfw/src/winfw/rules/permitlan.cpp7
1 files changed, 6 insertions, 1 deletions
diff --git a/windows/winfw/src/winfw/rules/permitlan.cpp b/windows/winfw/src/winfw/rules/permitlan.cpp
index 4adc882163..f1255b5b84 100644
--- a/windows/winfw/src/winfw/rules/permitlan.cpp
+++ b/windows/winfw/src/winfw/rules/permitlan.cpp
@@ -112,11 +112,16 @@ bool PermitLan::applyIpv4(IObjectInstaller &objectInstaller) const
conditionBuilder.add_condition(ConditionIp::Local(wfp::IpAddress::Literal({ 172, 16, 0, 0 }), uint8_t(12)));
conditionBuilder.add_condition(ConditionIp::Local(wfp::IpAddress::Literal({ 192, 168, 0, 0 }), uint8_t(16)));
conditionBuilder.add_condition(ConditionIp::Local(wfp::IpAddress::Literal({ 169, 254, 0, 0 }), uint8_t(16)));
+
+ // Local subnet multicast.
conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpAddress::Literal({ 224, 0, 0, 0 }), uint8_t(24)));
- // Special multicast for SSDP.
+ // Simple Service Discovery Protocol (SSDP) address.
conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpAddress::Literal({ 239, 255, 255, 250 }), uint8_t(32)));
+ // mDNS Service Discovery address.
+ conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpAddress::Literal({ 239, 255, 255, 251 }), uint8_t(32)));
+
return objectInstaller.addFilter(filterBuilder, conditionBuilder);
}