askiiart/tunsafe-clang15
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Enable DNS block only if the DNS addr is a part of the routes

Browse source
This commit is contained in:
Ludvig Strigeus 2018-11-17 17:25:50 +01:00
parent d97b6b178e
commit 4d3c9d6643
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
wireguard.cpp
View file

@ -179,7 +179,16 @@ bool WireguardProcessor::ConfigureTun() {
} }
} }
config.block_dns_on_adapters = dns_blocking_; if (dns_blocking_) {
// Block DNS if at least one of the DNS servers is part of included_routes
for (const auto &dns : dns_addr_) {
WgCidrAddr tmp = WgCidrAddrFromIpAddr(dns);
if (IsWgCidrAddrSubsetOfAny(tmp, config.included_routes) && !IsWgCidrAddrSubsetOfAny(tmp, excluded_ips_)) {
config.block_dns_on_adapters = true;
break;
}
}
}
config.internet_blocking = internet_blocking_; config.internet_blocking = internet_blocking_;
config.dns = dns_addr_; config.dns = dns_addr_;