ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-03-11 06:54:06 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

Send a blanket rule to old versions. New versions will still bidirecitonally enforce on the inbound side.

Browse Source
This commit is contained in:
Adam Ierymenko 2016-11-08 14:24:30 -08:00
parent 6f3595bfd2
commit 3d948a930e
1 changed files with 14 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
controller/EmbeddedNetworkController.cpp
View File

@ -673,12 +673,20 @@ NetworkController::ResultCode EmbeddedNetworkController::doNetworkConfigRequest(
json &memberCapabilities = member["capabilities"]; json &memberCapabilities = member["capabilities"];
json &memberTags = member["tags"]; json &memberTags = member["tags"];
if (rules.is_array()) { if (metaData.getUI(ZT_NETWORKCONFIG_REQUEST_METADATA_KEY_RULES_ENGINE_REV,0) <= 0) {
for(unsigned long i=0;i<rules.size();++i) { // Old versions with no rules engine support get an allow everything rule.
if (nc.ruleCount >= ZT_MAX_NETWORK_RULES) // Since rules are enforced bidirectionally, newer versions *will* still
break; // enforce rules on the inbound side.
if (_parseRule(rules[i],nc.rules[nc.ruleCount])) nc.ruleCount = 1;
++nc.ruleCount; nc.rules[0].t = ZT_NETWORK_RULE_ACTION_ACCEPT;
} else {
if (rules.is_array()) {
for(unsigned long i=0;i<rules.size();++i) {
if (nc.ruleCount >= ZT_MAX_NETWORK_RULES)
break;
if (_parseRule(rules[i],nc.rules[nc.ruleCount]))
++nc.ruleCount;
}
} }
} }