summaryrefslogtreecommitdiffhomepage
path: root/docs
diff options
context:
space:
mode:
Diffstat (limited to 'docs')
-rw-r--r--docs/security.md5
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/security.md b/docs/security.md
index 20307390ec..2fd46e26d8 100644
--- a/docs/security.md
+++ b/docs/security.md
@@ -90,6 +90,11 @@ The following network traffic is allowed or blocked independent of state:
* Incoming UDP from `*:68` to `255.255.255.255:67`
* Outgoing UDP from `*:67` to `*:68`
+#### Packet forwarding
+
+On Linux, any situation that permits incoming or outgoing traffic also allows that traffic to be
+forwarded. All other forward traffic is rejected.
+
#### macOS deviations
* The app does not look at ICMPv6 type and code headers. So all ICMPv6 is allowed between the