From 36d4167388e4cec60ef89ff7713d43bfc14cead8 Mon Sep 17 00:00:00 2001 From: Cuong Manh Le Date: Mon, 28 Sep 2026 15:07:03 +0700 Subject: [PATCH] cmd/cli: add missing function from cherry-pick --- cmd/cli/dns_intercept_darwin.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/cmd/cli/dns_intercept_darwin.go b/cmd/cli/dns_intercept_darwin.go index 76e17c0..bc60aa6 100644 --- a/cmd/cli/dns_intercept_darwin.go +++ b/cmd/cli/dns_intercept_darwin.go @@ -881,6 +881,10 @@ func (p *prog) buildPFAnchorRulesWith(vpnExemptions []vpnDNSExemption, forwarded return p.buildPFAnchorRulesForState(vpnExemptions, p.activeTunnelInterfaces(), forwardedSources) } +func (p *prog) buildPFAnchorRulesForTunnels(vpnExemptions []vpnDNSExemption, tunnelIfaces []string) string { + return p.buildPFAnchorRulesForState(vpnExemptions, tunnelIfaces, p.currentForwardedSources()) +} + func (p *prog) buildPFAnchorRulesForState(vpnExemptions []vpnDNSExemption, tunnelIfaces []string, forwardedSources []forwardedSource) string { // Read the actual listener address from config. In intercept mode, ctrld may // be on a non-standard port (e.g., 127.0.0.1:5354) if mDNSResponder holds *:53.