You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Brad Fitzpatrick c1a2e2c380 net/{packet,tstun},wgengine/filter: fix unknown IP protocol handling ... 01b90df2fa added SCTP support before (with explicit parsing for ports) and 69de3bf7bf tried to add support for arbitrary IP protocols (as long as the ACL permited a port of "*", since we might not know how to find ports from an arbitrary IP protocol, if it even has such a concept). But apparently that latter commit wasn't tested end-to-end enough. It had a lot of tests, but the tests made assumptions about layering that either weren't true, or regressed since 1.20. Notably, it didn't remove the (*Filter).pre bidirectional filter that dropped all "unknown" protocol packets both leaving and entering, even if there were explicit protocol matches allowing them in. Also, don't map all unknown protocols to 0. Keep their IP protocol number parsed so it's matchable by later layers. Only reject illegal things. Fixes #6423 Updates #2162 Updates #2163 Change-Id: I9659b3ece86f4db51d644f9b34df78821758842c Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>		2 years ago
..
bench	all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (#6692)	2 years ago
filter	net/{packet,tstun},wgengine/filter: fix unknown IP protocol handling	2 years ago
magicsock	ipn/ipnlocal, wgengine/magicsock: check Expired bool on Node; print error in Ping	2 years ago
monitor	wgengine/monitor: don't log unhandled RTM_{NEW,DEL}LINK messages	2 years ago
netlog	net/connstats: enforce maximum number of connections (#6760)	2 years ago
netstack	wgengine/netstack: change netstack API to require LocalBackend	2 years ago
router	all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (#6692)	2 years ago
wgcfg	util/codegen, all: use latest year, not time.Now, in generated files	2 years ago
wgint	all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (#6692)	2 years ago
wglog	all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (#6692)	2 years ago
winnet	all: remove old +build tags	2 years ago
mem_ios.go	all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (#6692)	2 years ago
pendopen.go	wgengine: remove all peer status from open timeout diagnostics	2 years ago
userspace.go	net/dns,userspace: remove unused DNS paths, normalize query limit on iOS	2 years ago
userspace_ext_test.go	all: update golang.zx2c4.com/wireguard to github.com/tailscale/wireguard-go (#6692)	2 years ago
userspace_test.go	all: convert more code to use net/netip directly	2 years ago
watchdog.go	all: remove old +build tags	2 years ago
watchdog_js.go	wasm: drop pprof dependency	2 years ago
watchdog_test.go	wgengine: remove all peer status from open timeout diagnostics	2 years ago
wgengine.go	wgengine: fix typo in Engine.PeerForIP (#5912)	2 years ago