summaryrefslogtreecommitdiffhomepage
path: root/talpid-core/src/firewall/linux.rs
AgeCommit message (Expand)AuthorFilesLines
2025-10-07Define networks as const valuesMarkus Pettersson1-22/+18
2025-09-18Add multiplexer POC to daemon, TSM, and relay selectorDavid Lönnhager1-4/+8
2025-07-15Fix `collapsible_if` clippy lintMarkus Pettersson1-7/+6
2025-07-10Run `cargo fmt`Sebastian Holmin1-3/+4
2025-06-19Do not add split-tunneling fw rules if no net_clsJoakim Hulthe1-4/+27
2024-11-08Set net.ipv4.conf.all.arp_ignore=2 when bringing up tunnels on LinuxLinus Färnstrand1-4/+40
2024-09-18Keep separate tunnel state machine configs for tunnel and non-tunnel DNSDavid Lönnhager1-37/+28
2024-08-27Use CStr literals instead of LazyLockDavid Lönnhager1-24/+22
2024-08-27Use std LazyLock instead of once_cell LazyDavid Lönnhager1-14/+15
2024-08-13Refactor tunnel provider and TalpidVpnServiceDavid Lönnhager1-4/+7
2024-02-27Replace err_derive with thiserrorJoakim Hulthe1-16/+12
2024-02-19Fix redundant importsDavid Lönnhager1-2/+0
2024-01-03Allow app to use custom socks5 and shadwosocks proxiesJonathan1-4/+17
2023-11-16Document more things in linux firewall codeJonathan1-1/+24
2023-11-07Configure firewall rules to allow proxy clientsMarkus Pettersson1-10/+14
2023-08-30Add mark based accept rule for forward chain as wellSiddhartha Sahu1-1/+1
2023-08-04Replace all use of `lazy_static` with `once_cell`Markus Pettersson1-22/+24
2023-03-15Remove non-inet tables. This deprecates support for older Linux kernelsDavid Lönnhager1-124/+94
2023-02-28Add PQ support for multihop, and allow listing two endpoints in theJonathan1-1/+5
2022-11-07Split up talpid-coreEmīls Piņķis1-20/+27
2022-09-13Make AllowedEndpoint optionalEmīls Piņķis1-1/+3
2022-06-15Remove ICMP variants for allowed tunnel trafficDavid Lönnhager1-28/+12
2022-06-14Manually fix the simpler non-semantic clippy warnsJonathan1-4/+4
2022-06-14Only allow traffic to flow between the client and relay config service during...David Lönnhager1-8/+52
2022-02-17Move exclusion_gid to SharedTunnelStateValuesEmīls1-4/+0
2022-02-17Allow initializing firewall without argsEmīls1-11/+15
2021-12-13Allow only root to reach the API in blocked stateEmīls1-0/+11
2021-12-08Add path restrictions for allowed endpoints in the daemonDavid Lönnhager1-2/+2
2021-11-29Reformat code without blank_lines_upper_bound = 2Linus Färnstrand1-1/+0
2021-10-11Update NDP rules on LinuxDavid Lönnhager1-39/+59
2021-09-08Drop suspicious packets to tunnel IP in connecting stateDavid Lönnhager1-0/+3
2021-09-08Don't set fwmark on packets destined for public DNS for excluded processesDavid Lönnhager1-84/+68
2021-06-07Replace 'tunnel_interface' field with tunnel metadata in connecting firewall ...David Lönnhager1-3/+3
2021-06-07Remove pingable hostsDavid Lönnhager1-25/+0
2021-05-17Switch from exit_location to entry_location WG constraintDavid Lönnhager1-7/+11
2021-05-11Reapply connecting firewall policy when the tunnel interface has beenDavid Lönnhager1-0/+1
2021-04-16Fix "inbound" forwardingDavid Lönnhager1-27/+23
2021-04-16Forward DHCP trafficDavid Lönnhager1-14/+16
2021-04-16Add reject rule to forward chainDavid Lönnhager1-6/+8
2021-04-16Forward packets from the tunnel interfaceDavid Lönnhager1-0/+9
2021-04-16Permit remaining packets to be forwarded via the tunnel interface onlyDavid Lönnhager1-0/+4
2021-04-16Permit forwarding of LAN trafficDavid Lönnhager1-12/+20
2021-04-16Permit forwarding of select DNS packetsDavid Lönnhager1-23/+29
2021-04-16Add nftables forward chainDavid Lönnhager1-2/+11
2021-03-31Remove use_fwmark optionDavid Lönnhager1-12/+5
2021-03-16Add counters to prerouting rulesDavid Lönnhager1-0/+7
2021-03-16Allow incoming traffic for exluded processes to pass through strict rpfDavid Lönnhager1-9/+21
2021-03-08Always set src_valid_mark when connectingEmīls1-0/+18
2021-03-05Add rules to allow relay traffic through rpfEmīls1-0/+17
2021-01-04Unblock API endpoint while connecting or blockedDavid Lönnhager1-4/+25
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.