Skip to content
Snippets Groups Projects

onion-tunnel: Permit loopback as destination

Merged onion-tunnel: Permit loopback as destination
cve/onionmasq:dev/cve/udp-localhost into main
Merged Clara Engler requested to merge cve/onionmasq:dev/cve/udp-localhost into main
  1. Nov 28, 2024
    • Clara Engler's avatar
      onion-tunnel: Permit loopback as destination · 48b68bc5
      Clara Engler authored 
      This commit modifies the logic of onion-tunnel's parser module in a
fashion such that packets sent to the loopback interface are no longer
dropped.

This functionality is crucial for testing, but it also makes sense to
leave it in normal production, because the purpose of this filter
primarily lies within the avoidance of a DNS resolve loop (see #129).
Because the DNS resolver is in the link local domain, the loopback check
can probably be safely removed.

Fixes #128
      48b68bc5