You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
Nick Khyl 9e1c86901b wgengine\router: fix the Tailscale-In firewall rule to work on domain networks
The Network Location Awareness service identifies networks authenticated against
an Active Directory domain and categorizes them as "Domain Authenticated".
This includes the Tailscale network if a Domain Controller is reachable through it.

If a network is categories as NLM_NETWORK_CATEGORY_DOMAIN_AUTHENTICATED,
it is not possible to override its category, and we shouldn't attempt to do so.
Additionally, our Windows Firewall rules should be compatible with both private
and domain networks.

This fixes both issues.

Fixes #11813

Signed-off-by: Nick Khyl <nickk@tailscale.com>
1 month ago
..
bench tailcfg, all: use []netip.AddrPort instead of []string for Endpoints 8 months ago
capture various: add golangci-lint, fix issues (#7905) 1 year ago
filter all: use Go 1.22 range-over-int 2 months ago
magicsock wgengine/magicsock: disable portmapper in tunchan-faked tests 2 months ago
netlog all: use zstdframe where sensible (#11491) 2 months ago
netstack all: use Go 1.22 range-over-int 2 months ago
router wgengine\router: fix the Tailscale-In firewall rule to work on domain networks 1 month ago
wgcfg all: use Go 1.22 range-over-int 2 months ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago
wglog all: use Go 1.22 range-over-int 2 months ago
winnet all: update copyright and license headers 1 year ago
mem_ios.go all: update copyright and license headers 1 year ago
pendopen.go wgengine: make pendOpen time later, after dup check 3 months ago
userspace.go wgengine/router: provide explicit hook to signal Android when VPN needs to be reconfigured 2 months ago
userspace_ext_test.go wgengine/netstack: remove SubnetRouterWrapper 2 months ago
userspace_test.go all: use Go 1.22 range-over-int 2 months ago
watchdog.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago
watchdog_js.go all: update copyright and license headers 1 year ago
watchdog_test.go all: update copyright and license headers 1 year ago
wgengine.go wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 3 months ago