mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-25 19:15:34 +00:00
wf: loopback condition should use MatchTypeFlagsAllSet.
Signed-off-by: Maisem Ali <maisem@tailscale.com>
This commit is contained in:
parent
48c25fa36f
commit
2919b3e3e6
@ -152,7 +152,7 @@ func (f *Firewall) enable() error {
|
|||||||
return fmt.Errorf("permitDNS failed: %w", err)
|
return fmt.Errorf("permitDNS failed: %w", err)
|
||||||
}
|
}
|
||||||
|
|
||||||
if err := f.permitLoopback(weightKnownTraffic); err != nil {
|
if err := f.permitLoopback(weightTailscaleTraffic); err != nil {
|
||||||
return fmt.Errorf("permitLoopback failed: %w", err)
|
return fmt.Errorf("permitLoopback failed: %w", err)
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -457,7 +457,7 @@ func (f *Firewall) permitLoopback(w weight) error {
|
|||||||
condition := []*wf.Match{
|
condition := []*wf.Match{
|
||||||
{
|
{
|
||||||
Field: wf.FieldFlags,
|
Field: wf.FieldFlags,
|
||||||
Op: wf.MatchTypeEqual,
|
Op: wf.MatchTypeFlagsAllSet,
|
||||||
Value: wf.ConditionFlagIsLoopback,
|
Value: wf.ConditionFlagIsLoopback,
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user