Avoid Docker firewall policy bypass - #82

Draft

nekohasekai wants to merge 24 commits into

devfrom

codex/propose-fix-for-docker-firewall-policy-bypass

Commits on Jun 22, 2026

Fix lint errors
nekohasekai
committed
623f0ab
ping: Fix missing TTL and ICMP error handling
nekohasekai
committed
ebb52fb

Commits on Jun 29, 2026

Fix ping
nekohasekai
committed
53208c8

Commits on Jul 9, 2026

ping: Fix stale flows kept alive by unrelated ICMP traffic
nekohasekai
committed
8f387ab
Add MAC address include/exclude filtering for nftables auto-redirect
nekohasekai
committed
f2fb366
Make gtcpip public for external use
nekohasekai
committed
d47cef7
Add compatibility with docker bridge
nekohasekai
committed
6bb5b52
Add read waiter support for gVisor conn
nekohasekai
committed
712c420
Add DNS mode
nekohasekai
committed
27a88e9
Add flow dispatcher
nekohasekai
committed
f0cdbed
Fix gVisor process
nekohasekai
committed
b017e6d
Drain pending packets in Linux batch read
nekohasekai
committed
4412996
Add flow tracking
nekohasekai
committed
321ffec
Minor fixes
nekohasekai
committed
f456a50
Fix CalculateInterfaceName on iOS
nekohasekai
committed
95180d1
Add UDPTimeout option for flow
nekohasekai
committed
0e0b6ec
Fix android GSO
nekohasekai
committed
127c941
Add flow PortWithSelectorRange
nekohasekai
committed
4fb6a79
Reject flows on selector range exhaustion
nekohasekai
committed
f14624c
Fix flow close reasons
nekohasekai
committed
467c206
Improve darwin forwarding
nekohasekai
committed
1b35243
ping: Fix stale flows kept alive by unrelated ICMP traffic
nekohasekai
committed
f6c89a8
Fix logger check
nekohasekai
committed
8a2ff73

Commits on Jul 11, 2026

Avoid Docker firewall policy bypass
nekohasekai
committed
9432f47