netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

First commit -- re-adding DROP

Browse Source
This commit is contained in:
Kevin Krakauer
2020-01-08 12:43:46 -08:00
parent 366e050ad5
commit 7cebd77806
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/sentry/socket/netfilter/netfilter.go
+1 -4
View File
@@ -410,10 +410,7 @@ func parseTarget(optVal []byte) (iptables.Target, uint32, *syserr.Error) {
case iptables.Accept:
return iptables.UnconditionalAcceptTarget{}, linux.SizeOfXTStandardTarget, nil
case iptables.Drop:
// TODO(gvisor.dev/issue/170): Return an
// iptables.UnconditionalDropTarget to support DROP.
log.Infof("netfilter DROP is not supported yet.")
return nil, 0, syserr.ErrInvalidArgument
return iptables.UnconditionalDropTarget{}, linux.SizeOfXTStandardTarget, nil
default:
panic(fmt.Sprintf("Unknown verdict: %v", verdict))
}