Implement disable firewall

netbirdio · Jan 6, 2025 · 4ae8080 · 4ae8080
1 parent f53b960
commit 4ae8080
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 6 deletions.
diff --git a/client/internal/dnsfwd/manager.go b/client/internal/dnsfwd/manager.go
@@ -83,6 +83,11 @@ func (h *Manager) allowDNSFirewall() error {
 		IsRange: false,
 		Values:  []int{ListenPort},
 	}
+
+	if h.firewall == nil {
+		return nil
+	}
+
 	dnsRules, err := h.firewall.AddPeerFiltering(net.IP{0, 0, 0, 0}, firewall.ProtocolUDP, nil, dport, firewall.RuleDirectionIN, firewall.ActionAccept, "", "")
 	if err != nil {
 		log.Errorf("failed to add allow DNS router rules, err: %v", err)

diff --git a/client/internal/engine.go b/client/internal/engine.go
@@ -410,12 +410,14 @@ func (e *Engine) Start() error {
 		return fmt.Errorf("create wg interface: %w", err)
 	}
 
-	e.firewall, err = firewall.NewFirewall(e.wgInterface, e.stateManager)
-	if err != nil {
-		log.Errorf("failed creating firewall manager: %s", err)
-	} else if e.firewall != nil {
-		if err := e.initFirewall(); err != nil {
-			return err
+	if !e.config.DisableFirewall {
+		e.firewall, err = firewall.NewFirewall(e.wgInterface, e.stateManager)
+		if err != nil {
+			log.Errorf("failed creating firewall manager: %s", err)
+		} else if e.firewall != nil {
+			if err := e.initFirewall(); err != nil {
+				return err
+			}
 		}
 	}