1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
//
// FirewallRule.swift
// MullvadVPNUITests
//
// Created by Niklas Berglund on 2024-01-18.
// Copyright © 2025 Mullvad VPN AB. All rights reserved.
//
import Foundation
import XCTest
struct FirewallRule {
let fromIPAddress: String
let toIPAddress: String
let inverted: Bool
let protocols: [TransportProtocol]
/// - Parameters:
/// - fromIPAddress: Block traffic originating from this source IP address.
/// - toIPAddress: Block traffic to this destination IP address.
/// - inverted: Invert IP range to block, ie all traffic NOT going to the IP will be blocked.
/// - protocols: Protocols which should be blocked. If none is specified all will be blocked.
private init(fromIPAddress: String, toIPAddress: String, inverted: Bool = false, protocols: [TransportProtocol]) {
self.fromIPAddress = fromIPAddress
self.toIPAddress = toIPAddress
self.inverted = inverted
self.protocols = protocols
}
public func protocolsAsStringArray() -> [String] {
return protocols.map { $0.rawValue }
}
/// Make a firewall rule blocking API access for the current device under test
public static func makeBlockAPIAccessFirewallRule() throws -> FirewallRule {
let deviceIPAddress = try FirewallClient().getDeviceIPAddress()
let apiIPAddress = try MullvadAPIWrapper.getAPIIPAddress()
return FirewallRule(
fromIPAddress: deviceIPAddress,
toIPAddress: apiIPAddress,
protocols: [.transport(.TCP)]
)
}
public static func makeBlockAllTrafficRule(toIPAddress: String, inverted: Bool = false) throws -> FirewallRule {
let deviceIPAddress = try FirewallClient().getDeviceIPAddress()
return FirewallRule(
fromIPAddress: deviceIPAddress,
toIPAddress: toIPAddress,
inverted: inverted,
protocols: [.transport(.ICMP), .transport(.TCP), .transport(.UDP)]
)
}
public static func makeBlockWireGuardTrafficRule(
fromIPAddress: String,
toIPAddress: String
) throws -> FirewallRule {
FirewallRule(
fromIPAddress: fromIPAddress,
toIPAddress: toIPAddress,
protocols: [.application(.wireguard)]
)
}
public static func makeBlockUDPTrafficRule(toIPAddress: String, inverted: Bool = false) throws -> FirewallRule {
let deviceIPAddress = try FirewallClient().getDeviceIPAddress()
return FirewallRule(
fromIPAddress: deviceIPAddress,
toIPAddress: toIPAddress,
inverted: inverted,
protocols: [.transport(.UDP)]
)
}
}
|
