eburet-oss/sing-tun-lx
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add firewall rule for Profile ALL on Windows system stack

Browse source
This commit is contained in:
dyhkwong 2025-04-09 13:05:26 +08:00 • committed by 世界
parent d89ab3f207
commit c410f7050c
No known key found for this signature in database
GPG key ID: CD109927C34A63C4
2 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
stack_system.go
View file

@ -107,10 +107,7 @@ func (s *System) Start() error {
} }
func (s *System) start() error { func (s *System) start() error {
err := fixWindowsFirewall() _ = fixWindowsFirewall()
if err != nil {
return E.Cause(err, "fix windows firewall for system stack")
}
var listener net.ListenConfig var listener net.ListenConfig
if s.bindInterface { if s.bindInterface {
listener.Control = control.Append(listener.Control, func(network, address string, conn syscall.RawConn) error { listener.Control = control.Append(listener.Control, func(network, address string, conn syscall.RawConn) error {
@ -122,6 +119,7 @@ func (s *System) start() error {
}) })
} }
var tcpListener net.Listener var tcpListener net.Listener
var err error
if s.inet4Address.IsValid() { if s.inet4Address.IsValid() {
for i := 0; i < 3; i++ { for i := 0; i < 3; i++ {
tcpListener, err = listener.Listen(s.ctx, "tcp4", net.JoinHostPort(s.inet4ServerAddress.String(), "0")) tcpListener, err = listener.Listen(s.ctx, "tcp4", net.JoinHostPort(s.inet4ServerAddress.String(), "0"))

1
stack_system_windows.go
View file

@ -22,6 +22,7 @@ func fixWindowsFirewall() error {
Protocol: winfw.NET_FW_IP_PROTOCOL_TCP, Protocol: winfw.NET_FW_IP_PROTOCOL_TCP,
Direction: winfw.NET_FW_RULE_DIR_IN, Direction: winfw.NET_FW_RULE_DIR_IN,
Action: winfw.NET_FW_ACTION_ALLOW, Action: winfw.NET_FW_ACTION_ALLOW,
Profiles: winfw.NET_FW_PROFILE2_ALL,
} }
_, err = winfw.FirewallRuleAddAdvanced(rule) _, err = winfw.FirewallRuleAddAdvanced(rule)
return err return err