netbird/client/firewall/nftables
Viktor Liu ad9f044aad
[client] Add stateful userspace firewall and remove egress filters (#3093)
- Add stateful firewall functionality for UDP/TCP/ICMP in userspace firewalll
- Removes all egress drop rules/filters, still needs refactoring so we don't add output rules to any chains/filters.
- on Linux, if the OUTPUT policy is DROP  then we don't do anything about it (no extra allow rules). This is up to the user, if they don't want anything leaving their machine they'll have to manage these rules explicitly.
2024-12-23 18:22:17 +01:00
..
acl_linux.go [client] Add stateful userspace firewall and remove egress filters (#3093) 2024-12-23 18:22:17 +01:00
ipsetstore_linux.go Fix/acl for forward (#1305) 2023-12-08 10:48:21 +01:00
manager_linux_test.go [client] Test nftables for incompatible iptables rules (#2948) 2024-11-25 15:11:56 +01:00
manager_linux.go [client] Fix allow netbird rule verdict (#2925) 2024-11-21 16:53:37 +01:00
router_linux_test.go [client] Use the prerouting chain to mark for masquerading to support older systems (#2808) 2024-11-07 12:37:04 +01:00
router_linux.go [client] Use the prerouting chain to mark for masquerading to support older systems (#2808) 2024-11-07 12:37:04 +01:00
rule_linux.go Fix/acl for forward (#1305) 2023-12-08 10:48:21 +01:00
state_linux.go [client] Cleanup firewall state on startup (#2768) 2024-10-24 14:46:24 +02:00