From 45939be0800f8cb77dcac854706ed1c7ac757931 Mon Sep 17 00:00:00 2001 From: "kali kaneko (leap communications)" Date: Mon, 14 Jun 2021 21:45:48 +0200 Subject: [feat] allow to define explicitely allowed private address By default, bitmask-root allows traffic to devices in local networks. However, this behavior depends on it correctly identifying the local network of the default route, and it can fail on more complex network setups (one common failure mode is when one of the ifaces gets a link-local ip). This commit introduces an explicit mechanism, by parsing lines in /etc/bitmask/ipv4.allow /etc/bitmask/ipv6.allow If valid private ips are defined in either of the files, the behavior will change to fail close for local devices, and allow traffic (both tcp and udp) to the defined ips, on all ports. - Resolves: #503 --- debian/changelog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 55e1f6b..cb996ed 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,4 +1,4 @@ -riseup-vpn (0.21.2.5) groovy; urgency=medium +riseup-vpn (0.21.2.6) groovy; urgency=medium * Initial Release. -- cgit v1.2.3