You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/util/linuxfw
Irbe Krumina 92ca770b8d
util/linuxfw: fix MSS clamping in nftables mode (#11588)
MSS clamping for nftables was mostly not ran due to to an earlier rule in the FORWARD chain issuing accept verdict.
This commit places the clamping rule into a chain of its own to ensure that it gets ran.

Updates tailscale/tailscale#11002

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
8 months ago
..
linuxfwtest
detector.go
fake.go util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 8 months ago
helpers.go
iptables.go
iptables_runner.go util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial iptables mode (#11546) 8 months ago
iptables_runner_test.go
linuxfw.go
linuxfw_unsupported.go
nftables.go
nftables_runner.go util/linuxfw: fix MSS clamping in nftables mode (#11588) 8 months ago
nftables_runner_test.go
nftables_types.go