tailscale/util/linuxfw
James Tucker ba6ec42f6d util/linuxfw: add missing input rule to the tailscale tun
Add an explicit accept rule for input to the tun interface, as a mirror
to the explicit rule to accept output from the tun interface.

The rule matches any packet in to our tun interface and accepts it, and
the rule is positioned and prioritized such that it should be evaluated
prior to conventional ufw/iptables/nft rules.

Updates #391
Fixes #7332
Updates #9084

Signed-off-by: James Tucker <james@tailscale.com>
2023-10-10 17:22:47 -07:00
..
linuxfwtest util/linuxfw: initial implementation of package 2023-02-09 14:20:24 -05:00
helpers.go util/linuxfw: initial implementation of package 2023-02-09 14:20:24 -05:00
iptables_runner_test.go util/linuxfw: add missing input rule to the tailscale tun 2023-10-10 17:22:47 -07:00
iptables_runner.go util/linuxfw: add missing input rule to the tailscale tun 2023-10-10 17:22:47 -07:00
iptables.go util/linuxfw: rename ErrorFWModeNotSupported 2023-08-10 09:27:05 -07:00
linuxfw_unsupported.go util/linuxfw: Fix comment which lists supported linux arches 2023-09-07 16:49:50 -07:00
linuxfw.go util/linuxfw: rename ErrorFWModeNotSupported 2023-08-10 09:27:05 -07:00
nftables_runner_test.go util/linuxfw: add missing input rule to the tailscale tun 2023-10-10 17:22:47 -07:00
nftables_runner.go util/linuxfw: add missing input rule to the tailscale tun 2023-10-10 17:22:47 -07:00
nftables_types.go util/linuxfw: add new arch build constraints 2023-06-30 18:22:15 -04:00
nftables.go util/linuxfw: rename ErrorFWModeNotSupported 2023-08-10 09:27:05 -07:00