6 Commits

Author	SHA1	Message	Date
Quentin McGaw	11883aa830	feat(netlink): detect ipv6 support level (#2523) ... - add option `IPV6_CHECK_ADDRESSESES=[2001:4860:4860::8888]:53,[2606:4700:4700::1111]:53` - gluetun needs access to the addresses above through the host firewall, to test ipv6 support before setting up the vpn	2026-04-07 07:48:15 -04:00
Quentin McGaw	086e3740f3	fix(firewall/iptables): shared mutex for both iptables and ip6tables	2026-03-23 14:35:33 +00:00
Quentin McGaw	c6c3a2bf1b	fix(openvpn/extract): restrict custom openvpn config protocol to tcp or udp internally ... - Fix #3179 - I believe specifying tcp4, tcp6 or tcp-client does not change anything versus tcp + remote ip address - I believe specifying udp4 or udp6 does not change anything versus tcp + remote ip address - Simplify firewall code to not account for tcp-client etc.	2026-03-04 18:58:33 +00:00
Quentin McGaw	ec24ffdfd8	hotfix(firewall): save and restore behavior fixed ... - restore if IPv4 set all policies fails - fix deadlock when using iptables custom rules - fix setting ipv6 rules when running runMixedIptablesInstruction	2026-02-28 14:37:58 +00:00
Quentin McGaw	2bb4deccd5	feat(firewall): atomic iptables operations ... - all operations rollback on failure - disabling the firewall means rolling back to its state before enabling it - aligns with nftables atomicity feature	2026-02-26 22:58:52 +00:00
Quentin McGaw	d21953f62e	chore(firewall): split apart iptables specific code in internal/firewall/iptables	2026-02-25 04:23:53 +00:00