0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-20 04:02:15 +02:00
openvpn3/openvpn/tun
Heiko Hund 733d00b7e6 WFP: block DNS traffic to loopback conditionally
Before this commit traffic to loopback was limited when only DNS
(port 53) was blocked, due to the "not loopback" match condition being
replaced instead of the match condition being made more specific.

This broke the client option to override access to DNS servers listening
on loopback.

To fix this three things are done:
  1) do not add DNS block rules if the override option is active.
  2) explicitly block port 53 on loopback, except when the override
     option is active.
  3) remove the implicit block of port 53 on loopback and instead let
     the firewall rule for non-loopback devices only.

Signed-off-by: Heiko Hund <heiko@openvpn.net>
2024-05-28 14:57:04 +02:00
..
builder add support for --block-outside-dns option 2024-05-13 14:07:53 +02:00
client add support for --block-outside-dns option 2024-05-13 14:07:53 +02:00
extern Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
linux/client sitnl: allow user to configure custom metric for routes 2024-03-15 13:27:14 +00:00
mac apply --dns options the new way 2024-05-13 14:07:53 +02:00
persist Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
server Allow specifying different client and server reasons for disconnect 2023-12-13 16:51:22 +01:00
win WFP: block DNS traffic to loopback conditionally 2024-05-28 14:57:04 +02:00
layer.hpp Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
proxy.hpp Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
tristate_setting.hpp Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
tunio.hpp Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
tunlog.hpp copyright: Update to 2022 2022-09-29 12:00:26 +02:00
tunmtu.hpp Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00
tunspec.hpp Reformatting source code to new coding style 2023-01-18 19:24:15 +01:00