summaryrefslogtreecommitdiffhomepage
path: root/util/linuxfw/iptables_runner.go
AgeCommit message (Expand)AuthorFilesLines
2026-04-14util/linuxfw,wgengine/router: allow incoming CGNAT range traffic with nodeattrNaman Sood1-17/+63
2026-03-10util/linuxfw: fix nil pointer panic in connmark rules without IPv6 (#18946)Mike O'Driscoll1-4/+4
2026-03-04util/linuxfw,wgengine/router: add connmark rules for rp_filter workaround (#1...Mike O'Driscoll1-0/+98
2026-01-23all: remove AUTHORS file and references to itWill Norris1-1/+1
2025-09-28tsconst, util/linuxfw, wgengine/router: move Linux fw consts to tsconstBrad Fitzpatrick1-6/+6
2025-09-27util/linuxfw, feature/buildfeatures: add ts_omit_iptables to make IPTables op...Brad Fitzpatrick1-156/+1
2025-07-10all: detect JetKVM and specialize a handful of things for itBrad Fitzpatrick1-2/+3
2024-10-03cmd/containerboot,util/linuxfw: create a SNAT rule for dst/src only once, cle...Irbe Krumina1-2/+43
2024-09-29cmd/containerboot,kube,util/linuxfw: configure kube egress proxies to route t...Irbe Krumina1-1/+1
2024-05-29util/linuxfw: don't try cleaning iptables on gokrazyBrad Fitzpatrick1-0/+6
2024-05-14util/linuxfw: fix IPv6 availability check for nftables (#12009)Irbe Krumina1-1/+1
2024-05-06various: implement stateful firewalling on Linux (#12025)Andrew Lytvynov1-0/+63
2024-04-23util/linuxfw,go.{mod,sum}: don't log errors when deleting non-existant chains...Irbe Krumina1-16/+15
2024-04-23cmd{containerboot,k8s-operator},util/linuxfw: support ExternalName Services (...Irbe Krumina1-0/+21
2024-04-09cmd/tailscaled: move cleanup to an implicit action during startupJames Tucker1-2/+2
2024-03-29util/linuxfw,wgengine/router: skip IPv6 firewall configuration in partial ipt...Irbe Krumina1-13/+22
2024-03-21util/linuxfw,wgengine/router: enable IPv6 configuration when netfilter is dis...James Tucker1-1/+1
2024-03-08util/linuxfw: fix support for containers without IPv6 iptables filters (#11381)James Tucker1-2/+22
2024-03-08util/linuxfw: correct logical error in NAT table check (#11380)James Tucker1-1/+1
2024-03-06util/linuxfw: add container-friendly IPv6 NAT check (#11353)Irbe Krumina1-6/+43
2023-12-05util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370)Naman Sood1-2/+60
2023-10-11cmd/containerboot: use linuxfw.NetfilterRunnerMaisem Ali1-0/+20
2023-10-10util/linuxfw: move detection logicMaisem Ali1-4/+4
2023-10-10util/linuxfw: add missing input rule to the tailscale tunJames Tucker1-1/+13
2023-07-19util/linuxfw: add nftables supportKevinLiang101-2/+15
2023-06-27util/linuxfw: decoupling IPTables logic from linux routerKevinLiang101-0/+475