From 18d1bd0ed54746fb3c7b2852f498e5b834e4c632 Mon Sep 17 00:00:00 2001
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Wed, 15 May 2019 20:15:50 +0200
Subject: firewall: allow wireguard.exe to override other rules

---
 service/firewall/rules.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/service/firewall/rules.go b/service/firewall/rules.go
index 00ca19ea..c48de299 100644
--- a/service/firewall/rules.go
+++ b/service/firewall/rules.go
@@ -173,6 +173,7 @@ func permitWireGuardService(session uintptr, baseObjects *baseObjects, weight ui
 		providerKey:         &baseObjects.provider,
 		subLayerKey:         baseObjects.filters,
 		weight:              filterWeight(weight),
+		flags:               cFWPM_FILTER_FLAG_CLEAR_ACTION_RIGHT,
 		numFilterConditions: uint32(len(conditions)),
 		filterCondition:     (*wtFwpmFilterCondition0)(unsafe.Pointer(&conditions)),
 		action: wtFwpmAction0{
-- 
cgit v1.2.3-59-g8ed1b