Skip to content

Commit a5b288c

Browse files
committed
fix(macOS): handle DNS_LOCAL parameter in firewall script
Previously the firewall script would exit early when DNS was empty, preventing DNS_LOCAL processing. Now both parameters are handled correctly.
1 parent c9e2114 commit a5b288c

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

daemon/References/macOS/etc/firewall.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -305,7 +305,7 @@ function set_dns {
305305
pfctl -a ${ANCHOR}/${ROUTE_SA_INIT} -t ${ROUTE_TBL_DNS} -T flush
306306
fi
307307

308-
if [[ -z "${DNS}" ]] ; then
308+
if [[ -z "${DNS}" && -z "${DNS_LOCAL}" ]] ; then
309309
# DNS not defined. Block all connections to port 53
310310
pfctl -a ${ANCHOR}/${SA_BLOCK_DNS} -f - <<_EOF
311311
block return out quick proto udp from any to port = 53

0 commit comments

Comments
 (0)