You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Nick Khyl 9e1c86901b wgengine\router: fix the Tailscale-In firewall rule to work on domain networks
The Network Location Awareness service identifies networks authenticated against
an Active Directory domain and categorizes them as "Domain Authenticated".
This includes the Tailscale network if a Domain Controller is reachable through it.

If a network is categories as NLM_NETWORK_CATEGORY_DOMAIN_AUTHENTICATED,
it is not possible to override its category, and we shouldn't attempt to do so.
Additionally, our Windows Firewall rules should be compatible with both private
and domain networks.

This fixes both issues.

Fixes #11813

Signed-off-by: Nick Khyl <nickk@tailscale.com>
2 years ago
..
bench tailcfg, all: use []netip.AddrPort instead of []string for Endpoints 2 years ago
capture various: add golangci-lint, fix issues (#7905) 3 years ago
filter all: use Go 1.22 range-over-int 2 years ago
magicsock wgengine/magicsock: disable portmapper in tunchan-faked tests 2 years ago
netlog all: use zstdframe where sensible (#11491) 2 years ago
netstack all: use Go 1.22 range-over-int 2 years ago
router wgengine\router: fix the Tailscale-In firewall rule to work on domain networks 2 years ago
wgcfg all: use Go 1.22 range-over-int 2 years ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2 years ago
wglog all: use Go 1.22 range-over-int 2 years ago
winnet all: update copyright and license headers 3 years ago
mem_ios.go all: update copyright and license headers 3 years ago
pendopen.go wgengine: make pendOpen time later, after dup check 2 years ago
userspace.go wgengine/router: provide explicit hook to signal Android when VPN needs to be reconfigured 2 years ago
userspace_ext_test.go wgengine/netstack: remove SubnetRouterWrapper 2 years ago
userspace_test.go all: use Go 1.22 range-over-int 2 years ago
watchdog.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2 years ago
watchdog_js.go all: update copyright and license headers 3 years ago
watchdog_test.go all: update copyright and license headers 3 years ago
wgengine.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2 years ago