kill switch

[efef]

design kill-switch to avoid leaking when eduVPN is down

[efef]

maybe do something like: https://github.com/ProtonVPN/protonvpn-cli-ng/blob/master/USAGE.md#kill-switch

[gijzelaerr]

I would say this is a 'nice to have', and should not block the 2.0 release.

[jwijenbergh]

It is nice to have but I see lots of problems with this

• We need root privileges in order to modify iptables/nftables rules
  • Could implement a popup with password, but this is not ideal
• When to reset these rules?
  • Will they be removed when the application is removed?

[gijzelaerr]

ok agreed, lets postpone this to a future release, then we decide if we drop the plan or not.

[jwijenbergh]

Maybe we can document the steps that an user should take to enable a killswitch manually

[jwijenbergh]

We should document how to do this but not implement it in core IMO