Skip to content

Block private networks on tunnel device - #11037

Open
dlon wants to merge 5 commits into
mainfrom
drop-lan-traffic
Open

Block private networks on tunnel device#11037
dlon wants to merge 5 commits into
mainfrom
drop-lan-traffic

Conversation

@dlon

@dlon dlon commented Aug 28, 2026

Copy link
Copy Markdown
Member

Changes:

  • On Linux and Windows, block private IP ranges in the firewall for the TUN device, except two ranges: 10.124.0.0/23 and 10.64.0.1/32.
  • For macOS and Android (and Gotatun generally), the same thing was accomplished by wrapping IpRecv and dropping packets for those ranges. Outbound only.

Fix DES-133


This change is Reviewable

@linear-code

linear-code Bot commented Aug 28, 2026

Copy link
Copy Markdown

DES-133

DES-1297

@dlon
dlon force-pushed the drop-lan-traffic branch from 6421c9a to dac9c76 Compare August 28, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant