mirror of
https://github.com/evilsocket/opensnitch.git
synced 2026-06-08 20:27:34 +00:00
Gustavo Iñiguez Goia
afa0500539
Restrict permissions to 127.0.0.1 and ::1 instead of the whole loopback range. This way, we allow localhost connections from common processes (dirmngr, kdeinit5, xbrlapi, etc.), while giving users control to allow or deny DNS queries to the local DNS stub resolver (which for example usually listens on 127.0.0.53). More info: #1416.
19 lines
498 B
JSON
19 lines
498 B
JSON
{
|
|
"created": "2025-04-09T23:17:39-06:00",
|
|
"updated": "2025-04-09T23:17:39-06:00",
|
|
"name": "000-allow-localhost6",
|
|
"description": "Allow connections to localhost. More information:\n\nhttps://github.com/evilsocket/opensnitch/wiki/Rules#localhost-connections",
|
|
"action": "allow",
|
|
"duration": "always",
|
|
"operator": {
|
|
"operand": "dest.ip",
|
|
"data": "::1",
|
|
"type": "simple",
|
|
"list": [],
|
|
"sensitive": false
|
|
},
|
|
"enabled": true,
|
|
"precedence": true,
|
|
"nolog": true
|
|
}
|