MHSanaei daf5b16eda fix(wireguard): hold /0 allowedIPs to the overlap guard ...

The tunnel overlap guard treated every /0 allowedIPs entry as claiming
no address, while the entry was stored with its host bits and the
consumers read them back: the AmneziaWG port forwarder resolves a peer's
target from them and the device routes the /0 by longest prefix. An
entry such as 10.8.1.2/0 therefore passed next to another client's
10.8.1.2/32, and forwarded ports reached that client's device.

A written entry now counts with its whole range, so a /0 collides with
every held address of its family. On the stored side only a literal
0.0.0.0/0 or ::/0 default route keeps nobody out, and a /0 with host
bits claims that host. Editing a legacy peer that echoes its stored
default route still works.

2026-11-01 00:06:09 +01:00

..

images

feat(hosts): add drag-and-drop and global subscription ordering (#6895)

2026-10-24 07:27:47 +02:00

CNAME

docs: vendor the documentation site into the monorepo

2026-07-07 23:07:14 +02:00

favicon.png

docs: vendor the documentation site into the monorepo

2026-07-07 23:07:14 +02:00

icon.png

docs: vendor the documentation site into the monorepo

2026-07-07 23:07:14 +02:00

logo-dark.png

docs: vendor the documentation site into the monorepo

2026-07-07 23:07:14 +02:00

logo-light.png

docs: vendor the documentation site into the monorepo

2026-07-07 23:07:14 +02:00

openapi.json

fix(wireguard): hold /0 allowedIPs to the overlap guard

2026-11-01 00:06:09 +01:00