5 Commits

Author	SHA1	Message	Date
Quentin McGaw	302f1f11f7	only use kernel modules error as context to an actual error, not as a requirement since some systems don't show what they support reliably	2026-02-26 23:14:40 +00:00
Quentin McGaw	a37354426b	Fallback to accepting only NEW output public traffic if conntrack netlink isn't supported	2026-02-26 23:08:32 +00:00
Quentin McGaw	6467f3b4ad	Flush using AF_UNSPEC and netfilter package	2026-02-26 23:01:27 +00:00
Quentin McGaw	034f8f6331	hotfix(netlink): specify IP family for conntrack calls and make conntrack failure a warning	2026-02-25 02:44:07 +00:00
Quentin McGaw	625a63e7c2	fix(firewall): flush conntrack table after enabling firewall at container start ... - prevent leaks for connections made the first ~10 milliseconds when Gluetun starts - seems critical, but in practice this very rarely happen and it very hard to reproduce	2026-02-22 13:31:38 +00:00