mirror of
https://github.com/evilsocket/opensnitch.git
synced 2025-03-04 08:34:40 +01:00
![]() On some kernels (4.19), adding the interception rule to the
inet-mangle-output chain failed.
According to the nftables wiki, the mangle-output chain have (must?) to
be of type Route:
"route type: ... mangle table ... for the output hook (for other
hooks use type filter instead)."
https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains#Base_chain_types
So if we fail adding the interception rule, we retry it with type Filter
instead of Route.
Related: #781 ,
|
||
---|---|---|
.. | ||
conman | ||
core | ||
dns | ||
firewall | ||
log | ||
netfilter | ||
netlink | ||
netstat | ||
procmon | ||
rule | ||
statistics | ||
ui | ||
.gitignore | ||
default-config.json | ||
go.mod | ||
Gopkg.toml | ||
main.go | ||
Makefile | ||
opensnitchd.service | ||
system-fw.json |