diff options
Diffstat (limited to '')
| -rw-r--r-- | service/firewall/rules.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/service/firewall/rules.go b/service/firewall/rules.go index bab3ed2b..364c7d1d 100644 --- a/service/firewall/rules.go +++ b/service/firewall/rules.go @@ -990,7 +990,7 @@ func blockAll(session uintptr, baseObjects *baseObjects, weight uint8) error { // Block all DNS traffic except towards specified DNS servers. func blockDns(except []net.IP, session uintptr, baseObjects *baseObjects, weightAllow uint8, weightDeny uint8) error { - if weightDeny <= weightAllow { + if weightDeny >= weightAllow { return errors.New("The allow weight must be greater than the deny weight") } |