summaryrefslogtreecommitdiffhomepage
path: root/windows
diff options
context:
space:
mode:
authorDavid Lönnhager <david.l@mullvad.net>2022-08-23 13:36:55 +0200
committerDavid Lönnhager <david.l@mullvad.net>2022-08-29 16:40:50 +0200
commit9c8b457982d0fc4f7380d2a88456fb98155a47c3 (patch)
tree8b0df440f46b21d62d41c40a978356f890a4eb27 /windows
parentef4ef3846b621013fa9d29b77e9399153064f7d0 (diff)
downloadmullvadvpn-9c8b457982d0fc4f7380d2a88456fb98155a47c3.tar.xz
mullvadvpn-9c8b457982d0fc4f7380d2a88456fb98155a47c3.zip
Allow admin-local v4 multicast range when LAN sharing is enabled
Diffstat (limited to 'windows')
-rw-r--r--windows/winfw/src/winfw/rules/baseline/permitlan.cpp4
1 files changed, 2 insertions, 2 deletions
diff --git a/windows/winfw/src/winfw/rules/baseline/permitlan.cpp b/windows/winfw/src/winfw/rules/baseline/permitlan.cpp
index 7c4e7d8a8e..197b19f06a 100644
--- a/windows/winfw/src/winfw/rules/baseline/permitlan.cpp
+++ b/windows/winfw/src/winfw/rules/baseline/permitlan.cpp
@@ -63,8 +63,8 @@ bool PermitLan::applyIpv4(IObjectInstaller &objectInstaller) const
// Local subnet multicast.
conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 224, 0, 0, 0 }), 24)));
- // Local scope (SSDP and mDNS)
- conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 239, 255, 0, 0 }), 16)));
+ // Admin-local scope (e.g., SSDP and mDNS)
+ conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 239, 0, 0, 0 }), 8)));
return objectInstaller.addFilter(filterBuilder, conditionBuilder);
}