aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/tunnel/firewall/rules.go
diff options
context:
space:
mode:
authorOdd Stranne <odd@mullvad.net>2019-06-12 23:11:57 +0200
committerJason A. Donenfeld <Jason@zx2c4.com>2019-06-13 11:59:44 +0200
commita8b30367866002bfce8efbfe610376077c1dedcb (patch)
tree834ab4b22f701ca1683f93363dd4631cabb3de89 /tunnel/firewall/rules.go
parentinstaller: remove sidtype compat code (diff)
downloadwireguard-windows-a8b30367866002bfce8efbfe610376077c1dedcb.tar.xz
wireguard-windows-a8b30367866002bfce8efbfe610376077c1dedcb.zip
firewall: adjust loopback rule for better matching
Signed-off-by: Odd Stranne <odd@mullvad.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'tunnel/firewall/rules.go')
-rw-r--r--tunnel/firewall/rules.go6
1 files changed, 3 insertions, 3 deletions
diff --git a/tunnel/firewall/rules.go b/tunnel/firewall/rules.go
index 1f28d3ab..1216065b 100644
--- a/tunnel/firewall/rules.go
+++ b/tunnel/firewall/rules.go
@@ -260,11 +260,11 @@ func permitWireGuardService(session uintptr, baseObjects *baseObjects, weight ui
func permitLoopback(session uintptr, baseObjects *baseObjects, weight uint8) error {
condition := wtFwpmFilterCondition0{
- fieldKey: cFWPM_CONDITION_INTERFACE_TYPE,
- matchType: cFWP_MATCH_EQUAL,
+ fieldKey: cFWPM_CONDITION_FLAGS,
+ matchType: cFWP_MATCH_FLAGS_ALL_SET,
conditionValue: wtFwpConditionValue0{
_type: cFWP_UINT32,
- value: uintptr(cIF_TYPE_SOFTWARE_LOOPBACK),
+ value: uintptr(cFWP_CONDITION_FLAG_IS_LOOPBACK),
},
}