Files
headscale/hscontrol/policy/matcher
Kristoffer Dalby 95c6129315 policy: offer exit routes only to viewers whose rules reach the internet
Every destination overlaps /0, so any rule offered a peer's exit routes.
They now need a rule to the internet, the test exit-node visibility
uses; via steering defers them to a regular grant only on that test.
2026-10-28 18:28:22 +00:00
..