0 0 198 Go

ipn/ipnlocal: reject SrcCaps-based packet filter rules for unsigned peers (#20513)

This change ensures `packetFilterPermitsUnlockedNodes` also considers SrcCaps-based grants when checking for unsigned peer access.

Fixes tailscale/corp#45116

Change-Id: I0ac938367888f67ed6f355fc19959cc8c31722a2

Signed-off-by: Mike Jensen <mikej@tailscale.com>

Mike Jensen committed 1mo ago

689c6c2e6d24763829f9d991a9037b92d8ee9ef4

Parent: bab3f5f

Committed by GitHub <noreply@github.com> on 7/17/2026, 9:58:06 PM