Irbe Krumina 92ca770b8d util/linuxfw: fix MSS clamping in nftables mode (#11588) ... MSS clamping for nftables was mostly not ran due to to an earlier rule in the FORWARD chain issuing accept verdict. This commit places the clamping rule into a chain of its own to ensure that it gets ran. Updates tailscale/tailscale#11002 Signed-off-by: Irbe Krumina <irbe@tailscale.com>		2024-04-02 19:31:33 +01:00
..
linuxfwtest	util/linuxfw: initial implementation of package	2023-02-09 14:20:24 -05:00
detector.go	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	2023-12-05 14:22:02 -05:00
fake.go	util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)	2024-03-29 05:23:03 +00:00
helpers.go	all: cleanup unused code, part 2 (#10670)	2023-12-21 17:40:03 -08:00
iptables_runner_test.go	util/linuxfw: move fake runner into pkg	2023-10-11 11:48:43 -07:00
iptables_runner.go	util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546)	2024-03-29 05:23:03 +00:00
iptables.go	util/linuxfw: move detection logic	2023-10-10 20:29:24 -07:00
linuxfw_unsupported.go	all: cleanup unused code, part 2 (#10670)	2023-12-21 17:40:03 -08:00
linuxfw.go	util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is disabled	2024-03-21 16:10:47 -07:00
nftables_runner_test.go	util/linuxfw: add missing error checks in tests	2023-10-28 09:44:53 -07:00
nftables_runner.go	util/linuxfw: fix MSS clamping in nftables mode (#11588)	2024-04-02 19:31:33 +01:00
nftables_types.go	util/linuxfw: add new arch build constraints	2023-06-30 18:22:15 -04:00
nftables.go	util/cmpx: delete now that we're using Go 1.22	2024-02-07 18:10:15 -08:00