From a04eebf59f1fb1cc2c895168635102087aae9b20 Mon Sep 17 00:00:00 2001 From: Maisem Ali Date: Mon, 18 Apr 2022 16:17:10 -0700 Subject: [PATCH] ipn/ipnlocal: also use SSHPolicies when updating filterHash Updates #3802 Signed-off-by: Maisem Ali --- ipn/ipnlocal/local.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go index 10be7a055..cfdbc2809 100644 --- a/ipn/ipnlocal/local.go +++ b/ipn/ipnlocal/local.go @@ -1133,8 +1133,12 @@ func (b *LocalBackend) updateFilterLocked(netMap *netmap.NetworkMap, prefs *ipn. } localNets, _ := localNetsB.IPSet() logNets, _ := logNetsB.IPSet() + var sshPol tailcfg.SSHPolicy + if haveNetmap && netMap.SSHPolicy != nil { + sshPol = *netMap.SSHPolicy + } - changed := deephash.Update(&b.filterHash, haveNetmap, addrs, packetFilter, localNets.Ranges(), logNets.Ranges(), shieldsUp) + changed := deephash.Update(&b.filterHash, haveNetmap, addrs, packetFilter, localNets.Ranges(), logNets.Ranges(), shieldsUp, sshPol) if !changed { return }