sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-24 07:39:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/reverse-proxy-allow-match-or' into reverse-proxy-crowdsec-appsec

Browse Source
This commit is contained in:
Viktor Liu
2026-09-23 09:55:28 +02:00
parent ba64c251f2 9847cbfef5
commit f39198bf16
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
proxy/internal/restrict/restrict.go
+3 -2
View File
@@ -351,8 +351,9 @@ func (f *Filter) checkAny(addr netip.Addr, geo GeoResolver) Verdict {
cidrAllowed ||
(countryActive && country != "" && slices.Contains(f.AllowedCountries, country))
if !allowed {
// Both allowlists missing is reported against the CIDR list, the one
// checked first, so the reason stays stable for existing access logs.
// When neither allowlist admitted the address, the denial is reported
// against the CIDR list, the one checked first, so the reason stays
// stable for existing access logs.
if cidrActive {
return DenyCIDR
}