mirrors/fort
1
0
Fork 0
mirror of https://github.com/tnodir/fort synced 2024-11-14 22:05:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Driver: fortcout: Improve 127.0.0.1, 255.255.255.255 addresses handling

Browse Source
This commit is contained in:
Nodir Temirkhodjaev 2024-11-11 14:33:16 +05:00
parent 111b71cdfa
commit 008cdea18a
2 changed files with 22 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/driver/common/fortconf.h
View File

@ -171,14 +171,16 @@ typedef struct fort_conf_rule_flag
typedef struct fort_conf_meta_conn typedef struct fort_conf_meta_conn
{ {
UCHAR is_reauth : 1; UINT16 is_reauth : 1;
UCHAR inbound : 1; UINT16 inbound : 1;
UCHAR isIPv6 : 1; UINT16 isIPv6 : 1;
UCHAR is_tcp : 1; UINT16 is_tcp : 1;
UCHAR is_loopback : 1; UINT16 is_loopback : 1;
UCHAR is_local_net : 1; UINT16 is_multicast : 1;
UCHAR inherited : 1; UINT16 is_local_net : 1;
UCHAR blocked : 1; UINT16 inherited : 1;
UINT16 blocked : 1;
UCHAR block_reason; UCHAR block_reason;
UCHAR ip_proto; UCHAR ip_proto;

20
src/driver/fortcout.c
View File

@ -360,7 +360,7 @@ inline static BOOL fort_callout_ale_check_filter_lan_flags(
inline static BOOL fort_callout_ale_check_filter_inet_flags( inline static BOOL fort_callout_ale_check_filter_inet_flags(
PFORT_CONF_META_CONN conn, FORT_CONF_FLAGS conf_flags) PFORT_CONF_META_CONN conn, FORT_CONF_FLAGS conf_flags)
{ {
if (conf_flags.block_inet_traffic) { if (conf_flags.block_inet_traffic && !conn->is_multicast) {
return TRUE; /* block Internet */ return TRUE; /* block Internet */
} }
@ -510,20 +510,24 @@ inline static BOOL fort_callout_ale_is_local_address(PFORT_CALLOUT_ARG ca,
{ {
PFORT_CONF_META_CONN conn = &cx->conn; PFORT_CONF_META_CONN conn = &cx->conn;
conn->is_loopback = (classify_flags & FWP_CONDITION_FLAG_IS_LOOPBACK) != 0;
if (conf_flags.filter_locals) if (conf_flags.filter_locals)
return FALSE; return FALSE;
/* Loopback */ /* Loopback */
if (!conn->is_loopback || conf_flags.block_traffic) conn->is_loopback = (classify_flags & FWP_CONDITION_FLAG_IS_LOOPBACK) != 0;
return FALSE;
if (conn->is_loopback) {
return !conf_flags.block_traffic;
}
/* Multicast */ /* Multicast */
if (!fort_addr_is_local_multicast(conn) || conf_flags.block_lan_traffic) conn->is_multicast = (UINT16) fort_addr_is_local_multicast(conn);
return FALSE;
return TRUE; if (conn->is_multicast) {
return !conf_flags.block_lan_traffic;
}
return FALSE;
} }
static void fort_callout_ale_classify(PFORT_CALLOUT_ARG ca) static void fort_callout_ale_classify(PFORT_CALLOUT_ARG ca)