Struct OutboundNetwork 

pub struct OutboundNetwork {
    pub mode: NetworkOutboundMode,
    pub allow_hosts: Vec<String>,
    pub allow_ports: Vec<u16>,
    pub protocols: Vec<String>,
    pub resolve_dns: ResolveDnsConfig,
}

Fields

mode: NetworkOutboundMode

allow_hosts: Vec<String>

allow_ports: Vec<u16>

Extra outbound TCP ports granted on top of the built-in web set (RESTRICTED_GENERAL_PORTS: 80/443/8080/8443). Issue #006: without this, a non-web port (ssh 2222, vite 5173, ollama 11434) was unreachable under restricted and the only escape was unrestricted, which opens EVERY port.

Honored under Restricted ONLY. Off stays air-gapped and ProxyOnly keeps denying general TCP — a stale entry in a profile whose mode was later tightened must never silently reopen it.

This is a PORT grant, not a host grant: like the base set, the port opens to host *, because macOS SBPL’s remote tcp accepts only * or localhost as the host. Bounding WHICH host is reached on that port remains HostGuard’s job via allow_hosts.

protocols: Vec<String>

resolve_dns: ResolveDnsConfig

Trait Implementations

impl Clone for OutboundNetwork

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OutboundNetwork

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OutboundNetwork

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for OutboundNetwork

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for OutboundNetwork

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for OutboundNetwork