Quellcode durchsuchen

NM-9: fix all rsrc static node rule (#3593)

* user policies fix

* fix user acl rules for all resources tag

* handle relayed comms via gateway with active acl policies

* fix static node comms to all resources

* add all resources src rule for static node
Abhishek K vor 1 Monat
Ursprung
Commit
b3253cd17d
1 geänderte Dateien mit 16 neuen und 0 gelöschten Zeilen
  1. 16 0
      logic/acls.go

+ 16 - 0
logic/acls.go

@@ -59,6 +59,14 @@ func GetFwRulesOnIngressGateway(node models.Node) (rules []models.FwRule) {
 					},
 					Allow: true,
 				})
+				rules = append(rules, models.FwRule{
+					SrcIP: node.NetworkRange,
+					DstIP: net.IPNet{
+						IP:   nodeI.Address.IP,
+						Mask: net.CIDRMask(32, 32),
+					},
+					Allow: true,
+				})
 			}
 			if nodeI.Address6.IP != nil {
 				rules = append(rules, models.FwRule{
@@ -68,6 +76,14 @@ func GetFwRulesOnIngressGateway(node models.Node) (rules []models.FwRule) {
 					},
 					Allow: true,
 				})
+				rules = append(rules, models.FwRule{
+					SrcIP: node.NetworkRange6,
+					DstIP: net.IPNet{
+						IP:   nodeI.Address.IP,
+						Mask: net.CIDRMask(128, 128),
+					},
+					Allow: true,
+				})
 			}
 			continue
 		}