You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Avery Pennarun 85e675940d wgengine/filter: allow ICMP response packets.
Longer term, we should probably update the packet filter to be fully
stateful, for both TCP and ICMP. That is, only ICMP packets related to
a session *we* initiated should be allowed back in. But this is
reasonably secure for now, since wireguard is already trimming most
traffic. The current code would not protect against eg. Ping-of-Death style
attacks from VPN nodes.

Fixes tailscale/tailscale#290.

Signed-off-by: Avery Pennarun <apenwarr@tailscale.com>
6 years ago
..
filter wgengine/filter: allow ICMP response packets. 6 years ago
magicsock ipn: don't listen on the unspecified address in test 6 years ago
monitor wgengine/monitor: disable monitor on Android 6 years ago
packet wgengine/filter: allow ICMP response packets. 6 years ago
winnet Move Linux client & common packages into a public repo. 6 years ago
faketun.go wgengine: properly clean up freebsd routes and interfaces on close 6 years ago
ifconfig_windows.go Update ifconfig_windows.go 6 years ago
router_darwin.go wgengine: define default tunname for each platform 6 years ago
router_darwin_support.go wgengine: make SetRoutesFunc less appealing to use. 6 years ago
router_default.go wgengine: define default tunname for each platform 6 years ago
router_fake.go all: remove unnecessary trailing newlines in format patterns for consistency 6 years ago
router_freebsd.go wgengine: define default tunname for each platform 6 years ago
router_linux.go wgengine: define default tunname for each platform 6 years ago
router_openbsd.go wgengine: define default tunname for each platform 6 years ago
router_windows.go wgengine: unexport some windows funcs 6 years ago
rusage.go Move "logger" package to under types, now that we have it. 6 years ago
rusage_nowindows.go wgengine: flesh out some docs 6 years ago
rusage_windows.go Move Linux client & common packages into a public repo. 6 years ago
userspace.go wgengine/magicsock: prune key.Public-keyed on peer removals 6 years ago
watchdog.go cmd/tailscaled, wgengine, ipn: add /debug/ipn handler with world state 6 years ago
watchdog_test.go wgengine: simplify, change some signatures 6 years ago
wgengine.go wgengine: quiet some engine reconfig logging, make more consistent 6 years ago