Client: Add Setting to dissallow usage as exit node #1878

Open
opened 2025-11-20 06:08:26 -05:00 by saavagebueno · 2 comments
Owner

Originally created by @R0CKB0TT0M on GitHub (May 12, 2025).

Is your feature request related to a problem? Please describe.
Some VPN Users will be working from their own Corporate or Home Networks.
As things are now an Administrator could remotely configure their device to allow themselves access to that private network which can be quite problematic. A VPN User using an Open Source VPN Client should be able to trust that their local network cant be accessed by the VPNs admin if they dont want that.

Describe the solution you'd like
A switch in the client GUI to disable it being available as an exit node.(This should probably be the default when connecting through a User Account and not a token).

Describe alternatives you've considered
I cant think of an alternative way to solve this with a reasonable amount of effort.

Additional context
Maybe have the option on the client next to the quantum safe encryption option.

Edit: I've changed the requested solution to making this available in the GUI as lixmal pointed out that the option does Exist in the console version.

Originally created by @R0CKB0TT0M on GitHub (May 12, 2025). **Is your feature request related to a problem? Please describe.** Some VPN Users will be working from their own Corporate or Home Networks. As things are now an Administrator could remotely configure their device to allow themselves access to that private network which can be quite problematic. A VPN User using an Open Source VPN Client should be able to trust that their local network cant be accessed by the VPNs admin if they dont want that. **Describe the solution you'd like** A switch in the client GUI to disable it being available as an exit node.(This should probably be the default when connecting through a User Account and not a token). **Describe alternatives you've considered** I cant think of an alternative way to solve this with a reasonable amount of effort. **Additional context** Maybe have the option on the client next to the quantum safe encryption option. Edit: I've changed the requested solution to making this available in the GUI as lixmal pointed out that the option does Exist in the console version.
saavagebueno added the feature-request label 2025-11-20 06:08:26 -05:00
Author
Owner

@lixmal commented on GitHub (May 12, 2025):

You can use

Usage:
  netbird up [flags]

Flags:
      --disable-server-routes           Disable server routes. If enabled, the client won't act as a router for server routes received from the management service.
netbird down
netbird up --disable-server-routes

This should probably be the default when connecting through a User Account and not a token

That makes sense, yes.

@lixmal commented on GitHub (May 12, 2025): You can use Usage: netbird up [flags] Flags: --disable-server-routes Disable server routes. If enabled, the client won't act as a router for server routes received from the management service. ``` netbird down netbird up --disable-server-routes ``` > This should probably be the default when connecting through a User Account and not a token That makes sense, yes.
Author
Owner

@R0CKB0TT0M commented on GitHub (May 13, 2025):

@lixmal thanks I wasnt aware of that option. I'll edit my request to making the Option available in the GUI or at least making it default for login with an account

@R0CKB0TT0M commented on GitHub (May 13, 2025): @lixmal thanks I wasnt aware of that option. I'll edit my request to making the Option available in the GUI or at least making it default for login with an account
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1878