Viktor Liu 567f36b07e Fix legacy dynamic route NAT missing v6 duplicate ...

The legacy DNS resolver path creates NAT pairs with destination
0.0.0.0/0 (a prefix, not a DomainSet). The v6 NAT duplication only
triggered for DomainSets, so legacy dynamic routes never got a v6
NAT rule.

Extract NeedsV6NATDuplicate and ToV6NatPair helpers that detect both
DomainSets and the v4 default wildcard 0.0.0.0/0. Both nftables and
iptables managers now use these for Add/RemoveNatRule, ensuring v6
NAT duplication works for both modern and legacy DNS resolver paths.

2026-04-10 12:59:35 +02:00

..

iptables

Fix legacy dynamic route NAT missing v6 duplicate

2026-04-10 12:59:35 +02:00

manager

Fix legacy dynamic route NAT missing v6 duplicate

2026-04-10 12:59:35 +02:00

nftables

Fix legacy dynamic route NAT missing v6 duplicate

2026-04-10 12:59:35 +02:00

test

[client] Set up firewall rules for dns routes dynamically based on dns response (#3702)

2025-04-24 17:37:28 +02:00

uspfilter

Add IPv6 dispatch for OutputDNAT, fix v6 guard pattern, rename DNAT params

2026-04-10 12:32:41 +02:00

create_linux.go

[client] Use native firewall for peer ACLs in userspace WireGuard mode (#5668)

2026-04-10 09:12:13 +08:00

create.go

[client] Clamp MSS on outbound traffic (#4735)

2025-11-04 17:18:51 +01:00

iface.go

[client] Use native firewall for peer ACLs in userspace WireGuard mode (#5668)

2026-04-10 09:12:13 +08:00