Fernando Serboncini c355618e73 wgengine/router/osrouter: skip netfilter add-ons when chain setup fails (#19757) ...

linuxRouter has two blocks (connmark rules and the CGNAT drop rule) that
gate on cfg.NetfilterMode, the requested config state. This may cause an
error when setNetfilterModeLocked fails, since it may keep assuming this
config is valid.

We now gate both blocks on r.netfilterMode, matching the pattern used by
SNAT, stateful, and loopback paths.

Fixes #19737

Change-Id: Ia6003a082db99c376e662132d725661afbac0ee9

Signed-off-by: Fernando Serboncini <fserb@tailscale.com>

2026-05-15 09:32:30 -04:00

..

bench

wgengine/magicsock: restore SetDERPMap signature, add SetDERPMapWithoutReSTUN

2026-04-29 12:46:15 -07:00

filter

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

magicsock

ipn/ipnlocal,wgengine/magicsock: add basic counters for cached peer connectivity (#19699)

2026-05-12 12:01:05 -07:00

netlog

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

netstack

wgengine/netstack: stop inject goroutine from leaking in Impl.Start (#19721)

2026-05-13 08:13:40 -07:00

router

wgengine/router/osrouter: skip netfilter add-ons when chain setup fails (#19757)

2026-05-15 09:32:30 -04:00

wgcfg

wgengine, all: remove LazyWG, use wireguard-go callback API for on-demand peers

2026-04-29 19:46:19 -07:00

wgint

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

wglog

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

winnet

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

mem_ios.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

pendopen_omit.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

pendopen.go

all: use bart.Lite instead of bart.Table where appropriate

2026-03-24 14:45:23 +00:00

userspace_ext_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

userspace_test.go

cmd/cloner: preserve nil-valued entries when cloning map (#19749)

2026-05-14 10:30:59 -04:00

userspace.go

wgengine: simplify ResetAndStop, drop drain loop

2026-05-14 15:45:38 -07:00

watchdog_omit.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

watchdog_test.go

cmd/vet: add subtestnames analyzer; fix all existing violations

2026-04-05 15:52:51 -07:00

watchdog.go

wgengine, all: remove LazyWG, use wireguard-go callback API for on-demand peers

2026-04-29 19:46:19 -07:00

wgengine.go

wgengine, all: remove LazyWG, use wireguard-go callback API for on-demand peers

2026-04-29 19:46:19 -07:00