fix(start-wrt): hairpin published ports for every profile with Internet or LAN access - #3888

Merged

Dominion5254 merged 10 commits into

wrt/published-port-reflection-scope

Sep 4, 2026

Commits on Sep 3, 2026

fix(start-wrt): scope published-port NAT reflection to permitted zones
Dominion5254
committed
b6d91cb
refactor(start-wrt): type FirewallRedirect.reflection as Option<bool>
Dominion5254
committed
dcc9889
fix(start-wrt): emit reflection zones only for existing, non-masq zones
Dominion5254
committed
7cd7e15
fix(start-wrt): resync reflection zones on profile changes and at boot
Dominion5254
committed
9da2310
fix(start-wrt): resolve a published device's zone by address, not guess
Dominion5254
committed
c5b817f
docs(start-wrt): true up the hairpin section's wording and scope
Dominion5254
committed
fa7fba5
fix(start-wrt): fall back to the neighbor table for a device's zone
Dominion5254
committed
982a222
fix(start-wrt): clear reflection zones on reflection-off redirects
Dominion5254
committed
5318981
fix(start-wrt): hairpin published ports for every profile with Internet or LAN access
Dominion5254
committed
04c7035
fix(start-wrt): read WAN Whitelist and Blacklist entries against the published address
Dominion5254
committed
6f2c44d