sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-04-22 10:16:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

[client] Trust wg interface in firewalld to bypass owner-flagged chains (#5928)

Browse Source
This commit is contained in:
Viktor Liu
2026-04-22 00:57:16 +09:00
committed by GitHub
parent 75e408f51c
commit 064ec1c832
11 changed files with 407 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
client/firewall/nftables/manager_linux.go
View File

@@ -14,6 +14,7 @@ import (
log "github.com/sirupsen/logrus"
"golang.org/x/sys/unix"
"github.com/netbirdio/netbird/client/firewall/firewalld"
firewall "github.com/netbirdio/netbird/client/firewall/manager"
"github.com/netbirdio/netbird/client/iface/wgaddr"
"github.com/netbirdio/netbird/client/internal/statemanager"
@@ -217,6 +218,10 @@ func (m *Manager) AllowNetbird() error {
return fmt.Errorf("flush allow input netbird rules: %w", err)
}
if err := firewalld.TrustInterface(m.wgIface.Name()); err != nil {
log.Warnf("failed to trust interface in firewalld: %v", err)
}
return nil
}