search

ivpn / desktop-app

Official IVPN Desktop app
https://www.ivpn.net/apps/
GNU General Public License v3.0
322 stars 49 forks source link

Allow LAN traffic and multicast not working #322

Closed MamaMia14SS88 closed 8 months ago

MamaMia14SS88 commented 8 months ago

Bug report

Describe your environment

Describe the problem

Steps to reproduce:

  1. Enable firewall
  2. Enable Allow LAN traffic and multicast
  3. You can close settings and domains like 192.168.1.1 do not work in the browser

Observed Results:

Can't access local addresses

Expected Results:

The browser should open local addresses like 192.168.1.1 to configure the router. Although everything works fine with the firewall turned off.

Relevant Code:

// TODO(you): code here to reproduce the problem
stenya commented 8 months ago

I haven't encountered such issues on my side. Local addresses, such as 192.168.0.0/16, are accessible when 'Allow LAN traffic ...' is enabled. @gorkapernas, could you please check it on your side?

@MamaMia14SS88 Can you check if these addresses are accessible using the ping tool? (ping 192.168.1.1)

MamaMia14SS88 commented 8 months ago

ping 192.168.1.1

No I got 4 errors pic

stenya commented 8 months ago

@MamaMia14SS88 Was the VPN connected while you were trying to access this IP?

Could you please perform the following additional tests: 1) Disconnect the VPN (if connected). 2) Disable the IVPN firewall. 3) Run tracert 192.168.1.1 4) Activate 'Allow LAN traffic ...' and enable the IVPN Firewall. 5) Run tracert 192.168.1.1

MamaMia14SS88 commented 8 months ago

Was the VPN connected while you were trying to access this IP?

Yes it was

Could you please perform the following additional tests:

  1. Disconnect the VPN (if connected).
  2. Disable the IVPN firewall.
  3. Run tracert 192.168.1.1
  4. Activate 'Allow LAN traffic ...' and enable the IVPN Firewall.
  5. Run tracert 192.168.1.1

The first tracert works fine, but the second gives a general failure pic pic1

stenya commented 8 months ago

@MamaMia14SS88 Just in case, please ensure that you do not use the WiFi control functionality (option 'WiFi control -> Trusted/Untrusted WiFi network control'). The 'Block LAN traffic' action will override the default behavior of the Firewall when you are connected to an Untrusted network.