firewall: block dns before allowing localhost

This prevents DNS leaks from people who have a localhost resolver doing
something funky.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>

1 files changed, 2 insertions, 9 deletions

diff --git a/service/firewall/helpers.go b/service/firewall/helpers.go
index 5945d69a..f5cab009 100644
--- a/service/firewall/helpers.go
+++ b/service/firewall/helpers.go
@@ -177,17 +177,10 @@ func createWtFwpmDisplayData0(name, description string) (*wtFwpmDisplayData0, er
 	}, nil
 }
 
-func filterWeightMax() wtFwpValue0 {
+func filterWeight(weight uint8) wtFwpValue0 {
 	return wtFwpValue0{
 		_type: cFWP_UINT8,
-		value: 15,
-	}
-}
-
-func filterWeightMin() wtFwpValue0 {
-	return wtFwpValue0{
-		_type: cFWP_UINT8,
-		value: 0,
+		value: uintptr(weight),
 	}
 }