Skip to content

[Enhancement] Allow multicast DNS on local interfaces in killswitch mode 2 #247

@Floppy

Description

@Floppy

Describe the bug
The killswitch iptables config filters out multicast DNS, so hosts aren't accessible via mDNS names on local networks; i.e. I can't ssh to my machine running the VPN by name, only by IP.

Expected behavior
Multicast DNS should be allowed on the default interface as well as local network access.

Possible solution
I think the right solution is to add the mDNS IP 224.0.0.251 as a rule the same as the local network specifier at
https://github.com/ProtonVPN/linux-cli/blob/1190545a4293332824b28fe442f95f7be44b65d5/protonvpn_cli/connection.py#L849. I'll have a go and send a PR.

Concerns
I'm not sure what the security implications are of doing this... any thoughts?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions