Author	SHA1	Message	Date
atlas	5189e8fb4b	egress: refresh a leased pair on dhcp renewal and default anti-spoof to log ... dnsmasq runs the dhcp-script on a renewal only with script-on-renewal, so a pair loaded at the first lease timed out while the lease kept renewing and the bridge table dropped the container's traffic. Set script-on-renewal, time pairs out remaining + 300s, default antiSpoof to log, and run the vm test through renewals with drop.	2026-11-13 23:55:12 +01:00
atlas	dff662c6b3	refuse tls hellos that carry encrypted client hello before squid sees them	2026-11-13 12:56:58 +01:00
atlas	712dcf2b25	squid intercepts restricted and log agents' web traffic, named from the bound source address	2026-11-13 09:47:09 +01:00
atlas	70179b6c1f	egress anti-spoofing: keep established bindings, load tables with bindings and leases in one transaction	2026-11-13 08:53:23 +01:00
atlas	c3f1ef6eb2	hive-priv: egress-pin and egress-lease sub-commands that bind bridge ports to MACs and load leases	2026-11-13 08:53:23 +01:00