tailscale/net
Andrew Dunham 16ef88754d net/portmapper: don't return unspecified/local external IPs
We were previously not checking that the external IP that we got back
from a UPnP portmap was a valid endpoint; add minimal validation that
this endpoint is something that is routeable by another host.

Updates tailscale/corp#23538

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: Id9649e7683394aced326d5348f4caa24d0efd532
2024-10-01 14:13:40 -04:00
..
art
captivedetection net/captivedetection: exclude ipsec interfaces from captive portal detection (#13598) 2024-09-26 17:28:10 +00:00
connstats
dns cli: add `tailscale dns query` (#13368) 2024-09-24 20:18:45 +00:00
dnscache
dnsfallback
flowtrack
ipset
ktimeout
memnet
netaddr
netcheck net/netcheck,wgengine/magicsock: plumb OnlyTCP443 controlknob through netcheck (#13491) 2024-09-17 12:24:42 -07:00
neterror
netkernelconf
netknob
netmon
netns
netstat
netutil {ipn,net,tsnet}: use tsaddr helpers 2024-09-26 12:17:31 +02:00
packet
ping
portmapper net/portmapper: don't return unspecified/local external IPs 2024-10-01 14:13:40 -04:00
proxymux
routetable
socks5
sockstats
speedtest
stun
stunserver
tcpinfo
tlsdial
tsaddr net/tsaddr: add WithoutExitRoutes and IsExitRoute 2024-09-26 12:17:31 +02:00
tsdial
tshttpproxy
tstun util/usermetrics: make usermetrics non-global 2024-09-25 15:57:00 +02:00
wsconn