3 ms·
Was that Tailscale firewall rule intended, a bug or a security issue?
by aborsy 1y ago
Was that Tailscale firewall rule intended, a bug or a security issue?
- tennysont 1y agoIt was intended. Since my original comment, I have learned that the output of `iptables -L` is incomplete when using `iptables-nft`. Specifically, if hide that the rule ACCEPT all -- anywhere anywhere is configured to only match on the interface `tailscale0`. The folks at security@tailscale.com were prompt to set me straight when I reported it, and I greatly appreciate that.