summaryrefslogtreecommitdiffhomepage
path: root/windows
diff options
context:
space:
mode:
authorDavid Lönnhager <david.l@mullvad.net>2020-01-31 15:24:40 +0100
committerDavid Lönnhager <david.l@mullvad.net>2020-03-16 09:47:52 +0100
commitb7727d18bce4060403252a673e0ed4c93a844db6 (patch)
tree5e20d65cf5e5a06d9ecdbdf9bfdd278953bb3b83 /windows
parenta5b166aec776686159ece28c1f901c81a9839548 (diff)
downloadmullvadvpn-b7727d18bce4060403252a673e0ed4c93a844db6.tar.xz
mullvadvpn-b7727d18bce4060403252a673e0ed4c93a844db6.zip
Permit outbound traffic to entire locally scoped IPv4 multicast space
Diffstat (limited to 'windows')
-rw-r--r--windows/winfw/src/winfw/rules/baseline/permitlan.cpp7
1 files changed, 2 insertions, 5 deletions
diff --git a/windows/winfw/src/winfw/rules/baseline/permitlan.cpp b/windows/winfw/src/winfw/rules/baseline/permitlan.cpp
index d5cbef5b29..21f082ce78 100644
--- a/windows/winfw/src/winfw/rules/baseline/permitlan.cpp
+++ b/windows/winfw/src/winfw/rules/baseline/permitlan.cpp
@@ -63,11 +63,8 @@ bool PermitLan::applyIpv4(IObjectInstaller &objectInstaller) const
// Local subnet multicast.
conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 224, 0, 0, 0 }), 24)));
- // Simple Service Discovery Protocol (SSDP) address.
- conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 239, 255, 255, 250 }), 32)));
-
- // mDNS Service Discovery address.
- conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 239, 255, 255, 251 }), 32)));
+ // Local scope (SSDP and mDNS)
+ conditionBuilder.add_condition(ConditionIp::Remote(wfp::IpNetwork(wfp::IpAddress::Literal({ 239, 255, 0, 0 }), 16)));
return objectInstaller.addFilter(filterBuilder, conditionBuilder);
}