mirror of
https://github.com/Control-D-Inc/ctrld.git
synced 2026-09-04 13:36:35 +02:00
fix: validate pf state before stabilization
This commit is contained in:
@@ -1616,8 +1616,8 @@ func parseIPv4AsUint32(ipStr string) uint32 {
|
||||
}
|
||||
|
||||
// ensurePFAnchorActive is a no-op on Windows (WFP handles intercept differently).
|
||||
func (p *prog) ensurePFAnchorActive() bool {
|
||||
return false
|
||||
func (p *prog) ensurePFAnchorActive() pfAnchorCheckResult {
|
||||
return pfAnchorCheckSkipped
|
||||
}
|
||||
|
||||
// checkTunnelInterfaceChanges is a no-op on Windows (WFP handles intercept differently).
|
||||
@@ -1625,6 +1625,12 @@ func (p *prog) checkTunnelInterfaceChanges() bool {
|
||||
return false
|
||||
}
|
||||
|
||||
// Windows preserves the existing immediate reconciliation behavior. NRPT/WFP
|
||||
// and adapter DNS settling have different lifecycle requirements from macOS pf.
|
||||
func (p *prog) dnsInterceptIgnoredChangeReconcileDue(time.Time) bool {
|
||||
return true
|
||||
}
|
||||
|
||||
// pfAnchorRecheckDelay is the delay for deferred pf anchor re-checks.
|
||||
// Defined here as a stub for Windows (referenced from dns_proxy.go).
|
||||
const pfAnchorRecheckDelay = 2 * time.Second
|
||||
|
||||
Reference in New Issue
Block a user