[PR #2383] [CLOSED] fix: VPN tunneling bugs + feat: KillSwitch Allow LAN access #2791

New issue

Closed

opened 2026-10-14 21:05:19 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-14 21:05:19 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/amnezia-vpn/amnezia-client/pull/2383
Author: @uxerror
Created: 3/21/2026
Status: ❌ Closed

Base: dev ← Head: fix/vpn-tunneling-and-killswitch-allow-lan

📝 Commits (2)

6dda656 fix: VPN tunneling bugs + feat: KillSwitch Allow LAN access
ba781fa fix: KillSwitch + split tunneling breaking LAN access

📊 Changes

24 files changed (+673 additions, -21 deletions)

View changed files

📝 .gitignore (+4 -0)
📝 client/daemon/daemon.cpp (+1 -0)
📝 client/daemon/interfaceconfig.h (+1 -0)
📝 client/mozilla/localsocketcontroller.cpp (+2 -0)
📝 client/platforms/linux/daemon/linuxfirewall.cpp (+9 -3)
📝 client/platforms/linux/daemon/linuxfirewall.h (+2 -2)
📝 client/platforms/linux/daemon/wireguardutilslinux.cpp (+6 -2)
📝 client/protocols/protocols_defs.h (+1 -0)
📝 client/settings.cpp (+10 -0)
📝 client/settings.h (+3 -0)
📝 client/translations/amneziavpn_ar_EG.ts (+78 -0)
📝 client/translations/amneziavpn_fa_IR.ts (+78 -0)
📝 client/translations/amneziavpn_hi_IN.ts (+78 -0)
📝 client/translations/amneziavpn_my_MM.ts (+78 -0)
📝 client/translations/amneziavpn_ru_RU.ts (+21 -6)
📝 client/translations/amneziavpn_uk_UA.ts (+78 -0)
📝 client/translations/amneziavpn_ur_PK.ts (+78 -0)
📝 client/translations/amneziavpn_zh_CN.ts (+78 -0)
📝 client/ui/controllers/connectionController.cpp (+1 -1)
📝 client/ui/controllers/settingsController.cpp (+12 -0)

...and 4 more files

📄 Description

Bug fixes:

connectionController: use server-specific container config instead of last-viewed container model config (m_settings->containerConfig)
vpnconnection: prevent routeMode reset from VpnAllExceptSites to VpnAllSites when excluded sites list is empty

Feature — KillSwitch Allow LAN (Linux):

New setting to allow local network (LAN) access including DNS when KillSwitch is active
Adds iptables rules for 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 without VPN interface restriction in the 320.allowDNS chain
Full pipeline: Settings -> UI toggle -> VpnConnection -> IPC ->
Daemon -> LinuxFirewall (both WG/AWG and OpenVPN/XRay paths)
Translations added for all supported languages

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/amnezia-vpn/amnezia-client/pull/2383 **Author:** [@uxerror](https://github.com/uxerror) **Created:** 3/21/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `fix/vpn-tunneling-and-killswitch-allow-lan` --- ### 📝 Commits (2) - [`6dda656`](https://github.com/amnezia-vpn/amnezia-client/commit/6dda6560c473d07f314ccc5070c47e42e16ca950) fix: VPN tunneling bugs + feat: KillSwitch Allow LAN access - [`ba781fa`](https://github.com/amnezia-vpn/amnezia-client/commit/ba781fa6df28cd38fdb7ca01a1b4197d7ce7f357) fix: KillSwitch + split tunneling breaking LAN access ### 📊 Changes **24 files changed** (+673 additions, -21 deletions) <details> <summary>View changed files</summary> 📝 `.gitignore` (+4 -0) 📝 `client/daemon/daemon.cpp` (+1 -0) 📝 `client/daemon/interfaceconfig.h` (+1 -0) 📝 `client/mozilla/localsocketcontroller.cpp` (+2 -0) 📝 `client/platforms/linux/daemon/linuxfirewall.cpp` (+9 -3) 📝 `client/platforms/linux/daemon/linuxfirewall.h` (+2 -2) 📝 `client/platforms/linux/daemon/wireguardutilslinux.cpp` (+6 -2) 📝 `client/protocols/protocols_defs.h` (+1 -0) 📝 `client/settings.cpp` (+10 -0) 📝 `client/settings.h` (+3 -0) 📝 `client/translations/amneziavpn_ar_EG.ts` (+78 -0) 📝 `client/translations/amneziavpn_fa_IR.ts` (+78 -0) 📝 `client/translations/amneziavpn_hi_IN.ts` (+78 -0) 📝 `client/translations/amneziavpn_my_MM.ts` (+78 -0) 📝 `client/translations/amneziavpn_ru_RU.ts` (+21 -6) 📝 `client/translations/amneziavpn_uk_UA.ts` (+78 -0) 📝 `client/translations/amneziavpn_ur_PK.ts` (+78 -0) 📝 `client/translations/amneziavpn_zh_CN.ts` (+78 -0) 📝 `client/ui/controllers/connectionController.cpp` (+1 -1) 📝 `client/ui/controllers/settingsController.cpp` (+12 -0) _...and 4 more files_ </details> ### 📄 Description Bug fixes: - connectionController: use server-specific container config instead of last-viewed container model config (m_settings->containerConfig) - vpnconnection: prevent routeMode reset from VpnAllExceptSites to VpnAllSites when excluded sites list is empty Feature — KillSwitch Allow LAN (Linux): - New setting to allow local network (LAN) access including DNS when KillSwitch is active - Adds iptables rules for 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 without VPN interface restriction in the 320.allowDNS chain - Full pipeline: Settings -> UI toggle -> VpnConnection -> IPC -> Daemon -> LinuxFirewall (both WG/AWG and OpenVPN/XRay paths) - Translations added for all supported languages --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-14 21:05:19 +00:00

closed this issue
added the
pull-request
label

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

amnezia-vpn/amnezia-client#2791

No description provided.

Rows
Columns