leapcode/bitmask_client — pull request #638 by elijh (2014-05-29 08:41:12+00:00)
Title: unblock local multicast IPs from linux firewall

I needed to make these changes in order for my computer to be able to print to a printer on the local network. The IPs in question are used for multicast protocols to discover devices on the network (UPnP and mDNS).

Perhaps I was too restrictive, only allowing some multicast IPs and ports. I am pretty sure that these multicast IPs are local only, but others are not.

I am not sure the security implications of opening these ips and ports for egress traffic. I think it is unlikely that these rules will bypass any firewall the user has set up, since most people don't have super restrictive egress firewalls like bitmask-root sets up.