sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-29 10:09:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Install nftables peer filter and mangle rules in a single transaction

Browse Source
This commit is contained in:
Viktor Liu
2026-06-10 17:44:33 +02:00
parent a14586b142
commit 1b6294f2ff
9 changed files with 258 additions and 133 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/firewall/nftables/routing_linux.go
+6
View File
@@ -79,6 +79,7 @@ func (r *family) addNatRule(pair firewall.RouterPair) error {
destExp, err := r.applyNetwork(pair.Destination, nil, false)
if err != nil {
r.dropNetworkMatch(sourceExp)
return fmt.Errorf("apply destination: %w", err)
}
@@ -126,6 +127,8 @@ func (r *family) addNatRule(pair firewall.RouterPair) error {
if _, exists := r.rules[ruleID]; exists {
if err := r.removeNatRule(pair); err != nil {
r.dropNetworkMatch(sourceExp)
r.dropNetworkMatch(destExp)
return fmt.Errorf("remove prerouting rule: %w", err)
}
}
@@ -302,6 +305,7 @@ func (r *family) addLegacyRouteRule(pair firewall.RouterPair) error {
destExp, err := r.applyNetwork(pair.Destination, nil, false)
if err != nil {
r.dropNetworkMatch(sourceExp)
return fmt.Errorf("apply destination: %w", err)
}
@@ -317,6 +321,8 @@ func (r *family) addLegacyRouteRule(pair firewall.RouterPair) error {
if _, exists := r.rules[ruleID]; exists {
if err := r.removeLegacyRouteRule(pair); err != nil {
r.dropNetworkMatch(sourceExp)
r.dropNetworkMatch(destExp)
return fmt.Errorf("remove legacy routing rule: %w", err)
}
}