)]}'
{"id":"openvpn~489","triplet_id":"openvpn~master~Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba","project":"openvpn","branch":"master","full_branch":"refs/heads/master","attention_set":{},"removed_from_attention_set":{"1000008":{"account":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"last_update":"2024-06-06 11:33:44.000000000","reason":"Change was submitted"},"1000006":{"account":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"last_update":"2024-06-03 23:57:42.000000000","reason":"\u003cGERRIT_ACCOUNT_1000006\u003e replied on the change","reason_account":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"}},"1000003":{"account":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2024-06-06 11:33:44.000000000","reason":"Change was submitted"},"1000002":{"account":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"last_update":"2024-06-06 11:33:32.000000000","reason":"Reviewer/Cc was removed"},"1000001":{"account":{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"last_update":"2024-06-06 11:33:44.000000000","reason":"Change was submitted"}},"hashtags":["mailsubmitted"],"change_id":"Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba","subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","status":"MERGED","created":"2024-01-09 00:48:52.000000000","updated":"2024-06-06 11:33:44.000000000","submitted":"2024-06-06 11:33:44.000000000","submitter":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"total_comment_count":46,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"642","meta_rev_id":"b50e675e58e75f6f2d2d0528758789681c3ed024","_number":489,"virtual_id_number":489,"owner":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},{"value":0,"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},{"value":0,"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0}},"removable_reviewers":[{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"}],"reviewers":{"REVIEWER":[{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"}],"CC":[{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2024-01-09 00:48:52.000000000","updated_by":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"real_updated_by":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2024-01-09 00:48:52.000000000","updated_by":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"real_updated_by":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"reviewer":{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"state":"REVIEWER"},{"updated":"2024-01-09 00:48:52.000000000","updated_by":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"real_updated_by":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"reviewer":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"REVIEWER"},{"updated":"2024-01-09 07:03:33.000000000","updated_by":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"real_updated_by":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"reviewer":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"state":"CC"},{"updated":"2024-01-10 10:16:58.000000000","updated_by":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"real_updated_by":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"reviewer":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"state":"CC"},{"updated":"2024-01-17 08:56:03.000000000","updated_by":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"real_updated_by":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"reviewer":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"state":"REVIEWER"},{"updated":"2024-05-18 16:08:30.000000000","updated_by":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"real_updated_by":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"reviewer":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"state":"REVIEWER"},{"updated":"2024-06-06 11:33:32.000000000","updated_by":{"_account_id":1000034,"name":"Gianmarco De Gregori","display_name":"Gianmarco De Gregori","email":"gianmarco@mandelbit.com","username":"its_Giaan"},"real_updated_by":{"_account_id":1000034,"name":"Gianmarco De Gregori","display_name":"Gianmarco De Gregori","email":"gianmarco@mandelbit.com","username":"its_Giaan"},"reviewer":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"state":"CC"}],"messages":[{"id":"82e4cd8c84b3308d66f6ada1a04471eb9ea641fe","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-09 00:48:52.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"9e3d062d3c0369a59a9cd19178c67a4753505c9d","author":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2024-01-09 07:03:33.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"e58f778f5fbbb8e6f1e295960788f2447765193a","author":{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-01-09 09:15:29.000000000","message":"Patch Set 1: Code-Review-1\n\n(9 comments)","accounts_in_message":[],"_revision_number":1},{"id":"9d5bc3f56a72e05ec857190a04354375b8700fa1","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-09 13:16:20.000000000","message":"Patch Set 1:\n\n(10 comments)","accounts_in_message":[],"_revision_number":1},{"id":"31a7e3d1d3b5651bc34a7f6c57bcec0f772e37ff","author":{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-01-09 13:42:47.000000000","message":"Patch Set 1:\n\n(2 comments)","accounts_in_message":[],"_revision_number":1},{"id":"454270a0a24202b9eb903c0ec643844c7e0551be","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-09 14:33:26.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Code-Review-1 (copy condition: \"changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR is:MIN\")\n","accounts_in_message":[],"_revision_number":2},{"id":"d3320cc6721d3a895f6ee0446cea7547ac5ea8d8","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-09 14:39:14.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"25f6322be2ce5a5f8967cf0e9d61ff980a3f6ec0","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-09 14:49:32.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"ae0f8ce5c59266399e17e84bf9f6ed078961ee88","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-09 14:53:24.000000000","message":"Patch Set 3:\n\n(5 comments)","accounts_in_message":[],"_revision_number":3},{"id":"debaa48d6c36330edce24532d69c212bc4c5831d","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-10 02:41:14.000000000","message":"Uploaded patch set 4.","accounts_in_message":[],"_revision_number":4},{"id":"f81aed46b5f903cd63126192367e665e8601c8b5","author":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2024-01-10 10:16:58.000000000","message":"Patch Set 4:\n\n(5 comments)","accounts_in_message":[],"_revision_number":4},{"id":"16a4bebf1f96337e6bc1b297aab8ea3ce49697e8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-10 15:47:21.000000000","message":"Uploaded patch set 5.","accounts_in_message":[],"_revision_number":5},{"id":"4888ec5b746a2b580b41b3860bf2e01097f46b27","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-01-10 15:47:32.000000000","message":"Patch Set 4:\n\n(5 comments)","accounts_in_message":[],"_revision_number":4},{"id":"488f9fd008f8e8eb960628fb7308c6ed976889a3","author":{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-01-12 16:25:11.000000000","message":"Patch Set 5: Code-Review+1\n\n(2 comments)","accounts_in_message":[],"_revision_number":5},{"id":"3ca22bbd0ddcc7ce19937b3775d0223f4efd363d","author":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2024-01-17 08:56:03.000000000","message":"Patch Set 5: Code-Review+2\n\n(2 comments)","accounts_in_message":[],"_revision_number":5},{"id":"a2ef9659807e2de2651fad14f8b32e6fd585c58d","author":{"_account_id":1000008,"name":"Lev Stipakov","display_name":"Lev Stipakov","email":"lstipakov@gmail.com","username":"stipa"},"date":"2024-01-17 09:05:02.000000000","message":"Patch Set 5:\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"847bbeccfc49c87f5833bd422b280e5d15c9b905","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":1000001,"name":"Frank Lichtenheld","display_name":"Frank Lichtenheld","email":"frank@lichtenheld.com","username":"flichtenheld","status":"OpenVPN Inc."},"date":"2024-02-09 10:58:32.000000000","message":"Hashtag added: mailsubmitted","accounts_in_message":[],"_revision_number":5},{"id":"1aecf0843ff77721b92164dc606fb1cb57ee43ea","author":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2024-05-18 16:08:30.000000000","message":"Patch Set 5: Code-Review-1\n\n(2 comments)","accounts_in_message":[],"_revision_number":5},{"id":"c2a6de6ab628818bba4ba5a844f5d20069e5be15","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-06-03 23:57:42.000000000","message":"Patch Set 5:\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"8a8596beba3525163e40974c8c25ebd631fca704","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"date":"2024-06-04 00:14:20.000000000","message":"Uploaded patch set 6.\n\nOutdated Votes:\n* Code-Review+1, Code-Review+2, Code-Review-1 (copy condition: \"changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR is:MIN\")\n","accounts_in_message":[],"_revision_number":6},{"id":"76c7af39d13ae98c9567d0a5b8f3889b1827969a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000034,"name":"Gianmarco De Gregori","display_name":"Gianmarco De Gregori","email":"gianmarco@mandelbit.com","username":"its_Giaan"},"date":"2024-06-06 11:33:32.000000000","message":"Uploaded patch set 7.","accounts_in_message":[],"_revision_number":7},{"id":"b50e675e58e75f6f2d2d0528758789681c3ed024","tag":"autogenerated:gerrit:merged","author":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2024-06-06 11:33:44.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":7}],"current_revision_number":7,"current_revision":"bf887c95e46c6892ac1f68be5559525f8d975530","revisions":{"539ee8bccd943d7da756cfc4e499378b686b5407":{"kind":"REWORK","_number":1,"created":"2024-01-09 00:48:52.000000000","uploader":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"ref":"refs/changes/89/489/1","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/1","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/1 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/1","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"f0a17ed8513405af0efb1df2ab2bda3956e01910","subject":"Move get_tmp_dir to win32-util.c and error out on failure"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 00:05:01.000000000","tz":60},"committer":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 00:47:14.000000000","tz":60},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\n"},"branch":"refs/heads/master"},"85548ca1fd50af04145e7f9094a319886ba3a260":{"kind":"REWORK","_number":2,"created":"2024-01-09 14:33:26.000000000","uploader":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"ref":"refs/changes/89/489/2","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/2","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/2 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/2","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"f0a17ed8513405af0efb1df2ab2bda3956e01910","subject":"Move get_tmp_dir to win32-util.c and error out on failure"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 00:05:01.000000000","tz":60},"committer":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 14:33:12.000000000","tz":60},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\n"},"branch":"refs/heads/master"},"acc90d4797757ca5fc1d1c130c89210798626386":{"kind":"REWORK","_number":3,"created":"2024-01-09 14:49:32.000000000","uploader":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"ref":"refs/changes/89/489/3","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/3","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/3 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/3","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"f0a17ed8513405af0efb1df2ab2bda3956e01910","subject":"Move get_tmp_dir to win32-util.c and error out on failure"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 00:05:01.000000000","tz":60},"committer":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 14:49:26.000000000","tz":60},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\n"},"branch":"refs/heads/master"},"1ae2f25ea2c85d10993602ac2c828513e5a3f88a":{"kind":"REWORK","_number":4,"created":"2024-01-10 02:41:14.000000000","uploader":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"ref":"refs/changes/89/489/4","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/4","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/4 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/4","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"f0a17ed8513405af0efb1df2ab2bda3956e01910","subject":"Move get_tmp_dir to win32-util.c and error out on failure"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 00:05:01.000000000","tz":60},"committer":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-10 02:40:58.000000000","tz":60},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\n"},"branch":"refs/heads/master"},"fd33090b98525468179b1ab75dc941fa38e1d8d8":{"kind":"REWORK","_number":5,"created":"2024-01-10 15:47:21.000000000","uploader":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"ref":"refs/changes/89/489/5","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/5","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/5 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/5","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/5 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"f0a17ed8513405af0efb1df2ab2bda3956e01910","subject":"Move get_tmp_dir to win32-util.c and error out on failure"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-09 00:05:01.000000000","tz":60},"committer":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-01-10 15:47:04.000000000","tz":60},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\n"},"branch":"refs/heads/master"},"7365a16bde2e8373c9c172a9aa7af585fbdc37fb":{"kind":"REWORK","_number":6,"created":"2024-06-04 00:14:20.000000000","uploader":{"_account_id":1000006,"name":"Heiko Hund","display_name":"Heiko Hund","email":"heiko@openvpn.net","username":"d12fk"},"ref":"refs/changes/89/489/6","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/6","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/6 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/6","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/6 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"82036c17c45d45c3fe8725f64b33720cb9c94dad","subject":"Allow to set ifmode for existing DCO interfaces in FreeBSD"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-05-11 20:11:43.000000000","tz":120},"committer":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-06-03 23:56:05.000000000","tz":120},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\n"},"branch":"refs/heads/master"},"bf887c95e46c6892ac1f68be5559525f8d975530":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":7,"created":"2024-06-06 11:33:32.000000000","uploader":{"_account_id":1000034,"name":"Gianmarco De Gregori","display_name":"Gianmarco De Gregori","email":"gianmarco@mandelbit.com","username":"its_Giaan"},"ref":"refs/changes/89/489/7","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/89/489/7","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/7 \u0026\u0026 git checkout -b change-489 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/89/489/7","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/89/489/7 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"7dfff75659e6c06abe500f5b8716d9712aa41bcc","subject":"test_user_pass: Fix building with --enable-systemd"}],"author":{"name":"Heiko Hund","email":"heiko@ist.eigentlich.net","date":"2024-06-05 12:38:56.000000000","tz":120},"committer":{"name":"Gert Doering","email":"gert@greenie.muc.de","date":"2024-06-05 17:22:43.000000000","tz":120},"subject":"Windows: enforce \u0027block-local\u0027 with WFP filters","message":"Windows: enforce \u0027block-local\u0027 with WFP filters\n\nIn an attempt to better defend against the TunnelCrack attacks, enforce\nthat no traffic can pass to anything else than the VPN interface when\nthe \u0027block-local\u0027 flags is given with either --redirect-gateway or\n--redirect-private.\n\nReuse much of the existing --block-outside-dns code, but make it more\ngeneral, so that it can also block any traffic, not just port 53.\n\nUses the Windows Filtering Platform for enforcement in addition to the\nroutes redirecting the networks into the tunnel.\n\nChange-Id: Ic9bf797bfc7e2d471998a84cb0f071db3e4832ba\nSigned-off-by: Heiko Hund \u003cheiko@ist.eigentlich.net\u003e\nAcked-by: Lev Stipakov \u003clstipakov@gmail.com\u003e\nAcked-by: Gert Doering \u003cgert@greenie.muc.de\u003e\nMessage-Id: \u003c20240605123856.26267-1-gert@greenie.muc.de\u003e\nURL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg28717.html\nSigned-off-by: Gert Doering \u003cgert@greenie.muc.de\u003e\n"},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[]}