aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/tunnel/firewall/rules.go
diff options
context:
space:
mode:
authorJason A. Donenfeld <Jason@zx2c4.com>2021-12-09 17:53:59 +0100
committerJason A. Donenfeld <Jason@zx2c4.com>2021-12-09 23:13:56 +0100
commit182247f5c830f93bfdb2a843a0ce3d394008c6d0 (patch)
treea2e3c0356c6c5ff2fcb8b572654d39e4735c4850 /tunnel/firewall/rules.go
parentbuild: update to go 1.17.4 and drop upstreamed patches (diff)
downloadwireguard-windows-182247f5c830f93bfdb2a843a0ce3d394008c6d0.tar.xz
wireguard-windows-182247f5c830f93bfdb2a843a0ce3d394008c6d0.zip
global: apply gofumpt
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'tunnel/firewall/rules.go')
-rw-r--r--tunnel/firewall/rules.go3
1 files changed, 1 insertions, 2 deletions
diff --git a/tunnel/firewall/rules.go b/tunnel/firewall/rules.go
index 201a73e3..c5a0c4e6 100644
--- a/tunnel/firewall/rules.go
+++ b/tunnel/firewall/rules.go
@@ -583,7 +583,6 @@ func permitDHCPIPv6(session uintptr, baseObjects *baseObjects, weight uint8) err
}
func permitNdp(session uintptr, baseObjects *baseObjects, weight uint8) error {
-
/* TODO: actually handle the hop limit somehow! The rules should vaguely be:
* - icmpv6 133: must be outgoing, dst must be FF02::2/128, hop limit must be 255
* - icmpv6 134: must be incoming, src must be FE80::/10, hop limit must be 255
@@ -986,7 +985,7 @@ func blockAll(session uintptr, baseObjects *baseObjects, weight uint8) error {
}
// Block all DNS traffic except towards specified DNS servers.
-func blockDNS(except []netip.Addr, session uintptr, baseObjects *baseObjects, weightAllow uint8, weightDeny uint8) error {
+func blockDNS(except []netip.Addr, session uintptr, baseObjects *baseObjects, weightAllow, weightDeny uint8) error {
if weightDeny >= weightAllow {
return errors.New("The allow weight must be greater than the deny weight")
}