Comments (1)
So there are a couple problems with this suggestion, first off if you supply a /8
it means you're effectively capturing that entire range making it unusable for any other application which might not be super great for users who run services on their own internal networks.
Its best to be as specific as possible when capturing IPv4 routes.
Secondly, there is no good mechanism to determine what routes would overlap well instead of capturing massive blocks.
Thirdly, you can already do this by creating a road warrior sort of config where you capture all routes 0.0.0.0/0
and then define specific MFA routes later as MFA routes take precedence.
Im going to mark this as not-planned as Its not something I want to add to the project for these reasons.
from wag.
Related Issues (20)
- High Availability HOT 5
- Feature Request: support for port based firewall HOT 27
- [Feature Request] Support `PresharedKey` HOT 5
- NGINX Reverse Proxy for https does not work (no way to configure ip tables rules from wag config file) HOT 6
- Build Prerequisites v4.1.1-1-gf055b4c HOT 1
- ManagementUI over TLS HOT 2
- Missing password reset for admin users HOT 1
- Missing MFA reset functionality in web interface HOT 1
- Config Generated Wrong DNS HOT 2
- When ports are used, generated wireguard config files are wrong
- Management UI should notify users if wag is out of date
- Possibility to customize MFA Portal HOT 12
- XdpWagFirewall error on sudo ./wag start HOT 4
- Whether to operate wireguard with routing or natting should be adjustable HOT 4
- Allow internal devices to access wireguard client HOT 6
- Redirect to MFA URL after activating wireguard. HOT 6
- unable to start router: could not attach XDP program: bpf_link not supported HOT 2
- ACL Rule Mfa always has precedence over Allow? HOT 52
- XDP eBPF firewall blocks register_mfa? HOT 18
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wag.