[PR #2768] [MERGED] fix(windows): create DNS WFP sublayer for app split tunneling #2938

New issue

Closed

opened 2026-10-14 21:06:21 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-14 21:06:21 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/amnezia-vpn/amnezia-client/pull/2768
Author: @ULTRAVIOLENC3
Created: 6/25/2026
Status: ✅ Merged
Merged: 7/2/2026
Merged by: @vkamn

Base: dev ← Head: fix/windows-split-tunnel-dns-sublayer

📝 Commits (1)

a65ac88 fix(windows): create DNS WFP sublayer for app split tunneling

📊 Changes

1 file changed (+55 additions, -41 deletions)

View changed files

📝 client/platforms/windows/daemon/windowsfirewall.cpp (+55 -41)

📄 Description

Summary

A user reported that app-based split tunneling still failed in #2586 even after executable paths were converted correctly.

Their service log showed:

Failed to set Config err code 2150760457

This is FWP_E_ALREADY_EXISTS, and the failure happened while applying WFP split-tunnel configuration.

Changes

The packaged split-tunnel driver expects both WFP sublayers to exist:

baseline sublayer
DNS sublayer

Amnezia only created the baseline sublayer. This change makes Windows firewall initialization create/check both sublayers.

Scope

Windows-only change.

This is separate from the executable path conversion fix (https://github.com/amnezia-vpn/amnezia-client/pull/2691). It addresses the WFP configuration failure reported in #2586.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/amnezia-vpn/amnezia-client/pull/2768 **Author:** [@ULTRAVIOLENC3](https://github.com/ULTRAVIOLENC3) **Created:** 6/25/2026 **Status:** ✅ Merged **Merged:** 7/2/2026 **Merged by:** [@vkamn](https://github.com/vkamn) **Base:** `dev` ← **Head:** `fix/windows-split-tunnel-dns-sublayer` --- ### 📝 Commits (1) - [`a65ac88`](https://github.com/amnezia-vpn/amnezia-client/commit/a65ac8872d80845fe4d0d20b151f5aef81332ecf) fix(windows): create DNS WFP sublayer for app split tunneling ### 📊 Changes **1 file changed** (+55 additions, -41 deletions) <details> <summary>View changed files</summary> 📝 `client/platforms/windows/daemon/windowsfirewall.cpp` (+55 -41) </details> ### 📄 Description ## Summary A user reported that app-based split tunneling still failed in #2586 even after executable paths were converted correctly. Their service log showed: `Failed to set Config err code 2150760457` This is `FWP_E_ALREADY_EXISTS`, and the failure happened while applying WFP split-tunnel configuration. ## Changes The packaged split-tunnel driver expects both WFP sublayers to exist: - baseline sublayer - DNS sublayer Amnezia only created the baseline sublayer. This change makes Windows firewall initialization create/check both sublayers. ## Scope Windows-only change. This is separate from the executable path conversion fix (https://github.com/amnezia-vpn/amnezia-client/pull/2691). It addresses the WFP configuration failure reported in #2586. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-14 21:06:21 +00:00