| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
fix(start-os,start-tunnel): pin a forward's outbound UDP source port to its external port (#4104) * fix(start-os,start-tunnel): pin a forward's outbound source port to its external port forward-port installed only the inbound DNAT. Traffic the target starts from its forwarded port fell to lxc-net's masquerade (StartTunnel: its egress masquerade), which picks another source port on a NAT clash and then reuses that mapping for every later flow from the same source. A peer-to-peer service that publishes its port was then seen on a different one. Add a per-forward SNAT, tagged like the rest of the forward, in a new `forward_snat` chain at priority srcnat - 1: traffic from the target's port out of the interface holding the external address leaves as that address:port. Ranges map port by port. Addresses on lo and lxcbr0 get no rule. Closes #4103 Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> * fix(net): scope forwarded outbound source-port pinning to UDP Helix-Harness: pi Helix-Model: openai-codex/gpt-6.1-sol --------- Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Co-authored-by: Helix <267227783+helix-nine@users.noreply.github.com> | 17 天前 |