You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Avery Pennarun f69003fd46 router_linux: work around terrible bugs in old iptables-compat versions.
Specifically, this sequence:
	iptables -N ts-forward
	iptables -A ts-forward -m mark --mark 0x10000 -j ACCEPT
	iptables -A FORWARD -j ts-forward
doesn't work on Debian-9-using-nftables, but this sequence:
	iptables -N ts-forward
	iptables -A FORWARD -j ts-forward
	iptables -A ts-forward -m mark --mark 0x10000 -j ACCEPT
does work.

I'm sure the reason why is totally fascinating, but it's an old version
of iptables and the bug doesn't seem to exist on modern nftables, so
let's refactor our code to add rules in the always-safe order and
pretend this never happened.

Fixes #401.

Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>
4 years ago
..
filter wgengine/filter: implement a destination IP pre-filter. 4 years ago
magicsock magicsock: work around race condition initializing .Regions[]. 4 years ago
monitor wgengine/monitor: disable monitor on Android 4 years ago
packet wgengine/packet: add some tests, more docs, minor Go style, performance changes 4 years ago
router router_linux: work around terrible bugs in old iptables-compat versions. 4 years ago
tstun tstun: tolerate zero reads 4 years ago
winnet Move Linux client & common packages into a public repo. 4 years ago
rusage.go Move "logger" package to under types, now that we have it. 4 years ago
rusage_nowindows.go wgengine: flesh out some docs 4 years ago
rusage_windows.go Move Linux client & common packages into a public repo. 4 years ago
userspace.go wgengine/packet: add some tests, more docs, minor Go style, performance changes 4 years ago
watchdog.go all: make client use server-provided DERP map, add DERP region support 4 years ago
watchdog_test.go wgengine: wrap tun.Device to support filtering and packet injection (#358) 4 years ago
wgengine.go all: make client use server-provided DERP map, add DERP region support 4 years ago