|
|
@ -160,8 +160,8 @@ type Wrapper struct {
|
|
|
|
// PreFilterPacketInboundFromWireGuard is the inbound filter function that runs before the main filter
|
|
|
|
// PreFilterPacketInboundFromWireGuard is the inbound filter function that runs before the main filter
|
|
|
|
// and therefore sees the packets that may be later dropped by it.
|
|
|
|
// and therefore sees the packets that may be later dropped by it.
|
|
|
|
PreFilterPacketInboundFromWireGuard FilterFunc
|
|
|
|
PreFilterPacketInboundFromWireGuard FilterFunc
|
|
|
|
// PostFilterPacketInboundFromWireGaurd is the inbound filter function that runs after the main filter.
|
|
|
|
// PostFilterPacketInboundFromWireGuard is the inbound filter function that runs after the main filter.
|
|
|
|
PostFilterPacketInboundFromWireGaurd FilterFunc
|
|
|
|
PostFilterPacketInboundFromWireGuard FilterFunc
|
|
|
|
// PreFilterPacketOutboundToWireGuardNetstackIntercept is a filter function that runs before the main filter
|
|
|
|
// PreFilterPacketOutboundToWireGuardNetstackIntercept is a filter function that runs before the main filter
|
|
|
|
// for packets from the local system. This filter is populated by netstack to hook
|
|
|
|
// for packets from the local system. This filter is populated by netstack to hook
|
|
|
|
// packets that should be handled by netstack. If set, this filter runs before
|
|
|
|
// packets that should be handled by netstack. If set, this filter runs before
|
|
|
@ -1047,8 +1047,8 @@ func (t *Wrapper) filterPacketInboundFromWireGuard(p *packet.Parsed, captHook ca
|
|
|
|
return filter.Drop
|
|
|
|
return filter.Drop
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if t.PostFilterPacketInboundFromWireGaurd != nil {
|
|
|
|
if t.PostFilterPacketInboundFromWireGuard != nil {
|
|
|
|
if res := t.PostFilterPacketInboundFromWireGaurd(p, t); res.IsDrop() {
|
|
|
|
if res := t.PostFilterPacketInboundFromWireGuard(p, t); res.IsDrop() {
|
|
|
|
return res
|
|
|
|
return res
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|