lzc256
/
tailscale
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
tailscale/net/packet
History
Brad Fitzpatrick c1a2e2c380 net/{packet,tstun},wgengine/filter: fix unknown IP protocol handling 
01b90df2fa added SCTP support before
(with explicit parsing for ports) and
69de3bf7bf tried to add support for
arbitrary IP protocols (as long as the ACL permited a port of "*",
since we might not know how to find ports from an arbitrary IP
protocol, if it even has such a concept). But apparently that latter
commit wasn't tested end-to-end enough. It had a lot of tests, but the
tests made assumptions about layering that either weren't true, or
regressed since 1.20. Notably, it didn't remove the (*Filter).pre
bidirectional filter that dropped all "unknown" protocol packets both
leaving and entering, even if there were explicit protocol matches
allowing them in.

Also, don't map all unknown protocols to 0. Keep their IP protocol
number parsed so it's matchable by later layers. Only reject illegal
things.

Fixes #6423
Updates #2162
Updates #2163

Change-Id: I9659b3ece86f4db51d644f9b34df78821758842c
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
 		2023-01-14 10:32:18 -08:00
..
doc.go net/packet: s/ParsedPacket/Parsed/ to avoid package stuttering. 2020-11-09 23:52:54 -08:00
header.go all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
icmp.go wgengine, net/packet, cmd/tailscale: add ICMP echo 2022-05-03 13:03:45 -07:00
icmp4.go net/packet, wgengine{,/filter}: remove net/packet IPProto forwarding consts 2021-03-20 21:45:47 -07:00
icmp6.go net/packet: add ICMP6Header, like ICMP4Header 2021-12-09 09:30:10 -08:00
icmp6_test.go all: use various net/netip parse funcs directly 2022-07-25 21:12:28 -07:00
ip4.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
ip6.go all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
packet.go net/{packet,tstun},wgengine/filter: fix unknown IP protocol handling 2023-01-14 10:32:18 -08:00
packet_test.go net/{packet,tstun},wgengine/filter: fix unknown IP protocol handling 2023-01-14 10:32:18 -08:00
tsmp.go all: gofmt for Go 1.19 2022-08-02 10:08:05 -07:00
tsmp_test.go all: use various net/netip parse funcs directly 2022-07-25 21:12:28 -07:00
udp4.go net/packet, wgengine{,/filter}: remove net/packet IPProto forwarding consts 2021-03-20 21:45:47 -07:00
udp6.go net/packet: don't make IP6Header.marshalPseudo assume UDP 2021-12-08 21:15:46 -08:00