3 Commits

Author	SHA1	Message	Date
Maisem Ali	aad3584319	util/linuxfw: move fake runner into pkg ... This allows using the fake runner in different packages that need to manage filter rules. Updates #cleanup Signed-off-by: Maisem Ali <maisem@tailscale.com>	2023-10-11 11:48:43 -07:00
James Tucker	ba6ec42f6d	util/linuxfw: add missing input rule to the tailscale tun ... Add an explicit accept rule for input to the tun interface, as a mirror to the explicit rule to accept output from the tun interface. The rule matches any packet in to our tun interface and accepts it, and the rule is positioned and prioritized such that it should be evaluated prior to conventional ufw/iptables/nft rules. Updates #391 Fixes #7332 Updates #9084 Signed-off-by: James Tucker <james@tailscale.com>	2023-10-10 17:22:47 -07:00
KevinLiang10	243ce6ccc1	util/linuxfw: decoupling IPTables logic from linux router ... This change is introducing new netfilterRunner interface and moving iptables manipulation to a lower leveled iptables runner. For #391 Signed-off-by: KevinLiang10 <kevinliang@tailscale.com>	2023-06-27 19:54:27 -04:00