sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-27 09:09:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove partial userspace firewall mode and open foreign chains via a table-less allower

Browse Source
This commit is contained in:
Viktor Liu
2026-06-03 22:01:22 +02:00
parent 38603c7552
commit f7e9df6ffa
31 changed files with 840 additions and 475 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/firewall/iptables/routing_linux.go
+7 -11
View File
@@ -22,16 +22,14 @@ func (r *family) AddNatRule(pair firewall.RouterPair) error {
}
}
if !pair.Masquerade {
return nil
}
if pair.Masquerade {
if err := r.addNatRule(pair); err != nil {
return fmt.Errorf("add nat rule: %w", err)
}
if err := r.addNatRule(pair); err != nil {
return fmt.Errorf("add nat rule: %w", err)
}
if err := r.addNatRule(firewall.GetInversePair(pair)); err != nil {
return fmt.Errorf("add inverse nat rule: %w", err)
if err := r.addNatRule(firewall.GetInversePair(pair)); err != nil {
return fmt.Errorf("add inverse nat rule: %w", err)
}
}
r.updateState()
@@ -244,7 +242,6 @@ func (r *family) addNatRule(pair firewall.RouterPair) error {
r.rules[ruleID] = rule
r.updateState()
return nil
}
@@ -264,6 +261,5 @@ func (r *family) removeNatRule(pair firewall.RouterPair) error {
log.Debugf("marking rule %s not found", ruleID)
}
r.updateState()
return nil
}