This repository was archived by the owner on Nov 5, 2025. It is now read-only.
This repository was archived by the owner on Nov 5, 2025. It is now read-only.
[Enhancement] Allow multicast DNS on local interfaces in killswitch mode 2 #247
Description
Describe the bug
The killswitch iptables config filters out multicast DNS, so hosts aren't accessible via mDNS names on local networks; i.e. I can't ssh to my machine running the VPN by name, only by IP.
Expected behavior
Multicast DNS should be allowed on the default interface as well as local network access.
Possible solution
I think the right solution is to add the mDNS IP 224.0.0.251 as a rule the same as the local network specifier at
https://github.com/ProtonVPN/linux-cli/blob/1190545a4293332824b28fe442f95f7be44b65d5/protonvpn_cli/connection.py#L849. I'll have a go and send a PR.
Concerns
I'm not sure what the security implications are of doing this... any thoughts?