Skip to content

FR, Security: Bind to specific network interface #173

Description

@boredsquirrel

There are certain VPN applications that allow to have a "lockdown" mode, enabling firewall blocks for any connection outside the VPN tunnel.

Otherwise, users can harden their firewall rules themselves to prevent traffic from leaking.

But as this is quite complex and rarely done, there is a danger of users connecting to the network and getting into legal troubles because of a VPN tunnel crashing, disconnecting or simply forgetting to turn it on. Many VPN implementations are also not leak-proof when changing tunnels, or turn off entirely if there is no network connection.

qBittorrent and Nicotine+ (Soulseek) both have a setting to bind the application to a certain network interface. This can be selected by the user from all available ones, and the application will only use that interface and show a warning if the network interface is unavailable.

Nicotine+

Image

qBittorrent (sadly hidden away in the advanced settings)

Image

I am pretty sure that even with all anonymization features and Kad only, using aMule without a VPN could cause issues?

It would be even better to choose one of *vpn* wg* if available

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions