

Note: the user can not disable # the firewall because we've removed that functionality # from the script. # ensure that the firewall is always enable, no matter # what the user configured. # always enable firewall before service start. I had to modify desktop-app/daemon/References/Linux/etc/firewall.sh with the following:

its just that when the first sentence of a developer's response is "works as designed" I start considering other, ok.
#Ivpn firewall code
I am happy to contribute with input and maybe even with small code changes. Its small, open, and does what It is supposed to do. Because If I don't enable it by default, only a minority of my users will. Because I have this strong requirement of no traffic must EVER leak.Īnd I need the anti-tracking feature be enabled by default. I need the always-on firewall to be on by default. Your shipped default configuration will never fit all requirements and environments - no matter what you do. To be honest, I am not quite sure how your app can pass any professional evaluation without. I really think your app should support changing of default configuration. On the subject of changing settings.json: But that must be the task of the uninstall routine. I fully agree with you that the always-on firewall should be disabled during uninstall. I found that when i juggle a bit with the order of the inserts to your OUT_IVPN and IN_IVPN chains I can ensure API connectivity even when the user is logged out and always on firewall is enabled. Log a Support Case Sophos Service Guide Best Practices Support Case. Thanks & Regards, Vivek Jagad Team Lead, Global Support & Services.

I even see this as a possible security issue in the following scenario:
#Ivpn firewall plus
And does not disable itself when I log out / in. Ubiquiti’s firewall router doesn’t have built-in anti-malware solutions or a VPN, but those features take configuration and management, plus supplementation from other software. I would expect that it is actually "Always-On". IVPN Firewall will always be active even when IVPN Client is not running. The IVPN Firewall functionality works as designed.įrom a feature called "Always-On Firewall" which advertises itself with:
