Exclude multicast DNS from the killswitch in mode 2

So that we can still use mDNS hostnames for devices on the local network when the killswitch is enabled. Resolves Rafficer#247.
Floppy · Oct 19, 2020 · d67a460 · d67a460
1 parent 494ccd9
commit d67a460
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/protonvpn_cli/connection.py b/protonvpn_cli/connection.py
@@ -849,6 +849,9 @@ def manage_killswitch(mode, proto=None, port=None):
             exclude_lan_commands = [
                 "iptables -A OUTPUT -o {0} -d {1} -j ACCEPT".format(default_nic, local_network), # noqa
                 "iptables -A INPUT -i {0} -s {1} -j ACCEPT".format(default_nic, local_network), # noqa
+                # multicast DNS
+                "iptables -A OUTPUT -p udp -o {0} -d 224.0.0.251 --dport 5353 -j ACCEPT ".format(default_nic), # noqa
+                "iptables -A INPUT -p udp -i {0} -s 224.0.0.251 --sport 5353 -j ACCEPT".format(default_nic), # noqa
             ]
 
             for lan_command in exclude_lan_commands: