diff options
| author | Linus Färnstrand <linus@mullvad.net> | 2020-04-03 10:00:58 +0200 |
|---|---|---|
| committer | Linus Färnstrand <linus@mullvad.net> | 2020-04-03 11:50:11 +0200 |
| commit | ba31bee6e84bea28ee0e01cf4da414b15826f985 (patch) | |
| tree | cc27028abdfa69b9b99406c16661bd492d8bac0b /windows | |
| parent | d3dae68c25035c24292c849c222e73a57318484d (diff) | |
| download | mullvadvpn-ba31bee6e84bea28ee0e01cf4da414b15826f985.tar.xz mullvadvpn-ba31bee6e84bea28ee0e01cf4da414b15826f985.zip | |
Allow fc00::/7 instead of fd00::/8 for unique local addresses
Diffstat (limited to 'windows')
| -rw-r--r-- | windows/winfw/src/winfw/rules/baseline/permitlan.cpp | 2 | ||||
| -rw-r--r-- | windows/winfw/src/winfw/rules/baseline/permitlanservice.cpp | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/windows/winfw/src/winfw/rules/baseline/permitlan.cpp b/windows/winfw/src/winfw/rules/baseline/permitlan.cpp index e655020287..2397c78cdd 100644 --- a/windows/winfw/src/winfw/rules/baseline/permitlan.cpp +++ b/windows/winfw/src/winfw/rules/baseline/permitlan.cpp @@ -90,7 +90,7 @@ bool PermitLan::applyIpv6(IObjectInstaller &objectInstaller) const wfp::ConditionBuilder conditionBuilder(FWPM_LAYER_ALE_AUTH_CONNECT_V6); const wfp::IpNetwork linkLocal(wfp::IpAddress::Literal6({ 0xFE80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }), 10); - const wfp::IpNetwork uniqueLocal(wfp::IpAddress::Literal6({ 0xFD00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }), 8); + const wfp::IpNetwork uniqueLocal(wfp::IpAddress::Literal6({ 0xFC00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }), 7); conditionBuilder.add_condition(ConditionIp::Remote(linkLocal)); conditionBuilder.add_condition(ConditionIp::Remote(uniqueLocal)); diff --git a/windows/winfw/src/winfw/rules/baseline/permitlanservice.cpp b/windows/winfw/src/winfw/rules/baseline/permitlanservice.cpp index 041afd5492..d729b4ad52 100644 --- a/windows/winfw/src/winfw/rules/baseline/permitlanservice.cpp +++ b/windows/winfw/src/winfw/rules/baseline/permitlanservice.cpp @@ -66,7 +66,7 @@ bool PermitLanService::applyIpv6(IObjectInstaller &objectInstaller) const wfp::ConditionBuilder conditionBuilder(FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6); const wfp::IpNetwork linkLocal(wfp::IpAddress::Literal6{ 0xFE80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }, 10); - const wfp::IpNetwork uniqueLocal(wfp::IpAddress::Literal6({ 0xFD00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }), 8); + const wfp::IpNetwork uniqueLocal(wfp::IpAddress::Literal6({ 0xFC00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0 }), 7); conditionBuilder.add_condition(ConditionIp::Remote(linkLocal)); conditionBuilder.add_condition(ConditionIp::Remote(uniqueLocal)); |