|
diff --git a/src/yggdrasil/tcp.go b/src/yggdrasil/tcp.go
|
|
index 9cca419..45f93a5 100644
|
|
--- a/src/yggdrasil/tcp.go
|
|
+++ b/src/yggdrasil/tcp.go
|
|
@@ -25,6 +25,7 @@ import (
|
|
|
|
"golang.org/x/net/proxy"
|
|
|
|
+ "github.com/yggdrasil-network/yggdrasil-go/src/address"
|
|
"github.com/yggdrasil-network/yggdrasil-go/src/util"
|
|
)
|
|
|
|
@@ -386,6 +387,19 @@ func (t *tcp) handler(sock net.Conn, incoming bool, options interface{}, upgrade
|
|
local, _, _ = net.SplitHostPort(sock.LocalAddr().String())
|
|
remote, _, _ = net.SplitHostPort(sock.RemoteAddr().String())
|
|
}
|
|
+ localIP := net.ParseIP(local)
|
|
+ if localIP = localIP.To16(); localIP != nil {
|
|
+ var laddr address.Address
|
|
+ var lsubnet address.Subnet
|
|
+ copy(laddr[:], localIP)
|
|
+ copy(lsubnet[:], localIP)
|
|
+ if laddr.IsValid() || lsubnet.IsValid() {
|
|
+ // The local address is with the network address/prefix range
|
|
+ // This would route ygg over ygg, which we don't want
|
|
+ t.link.core.log.Debugln("Dropping ygg-tunneled connection", local, remote)
|
|
+ return
|
|
+ }
|
|
+ }
|
|
force := net.ParseIP(strings.Split(remote, "%")[0]).IsLinkLocalUnicast()
|
|
link, err := t.link.core.link.create(&stream, name, proto, local, remote, incoming, force)
|
|
if err != nil {
|
|
|