From cda3710d5a20edbf718ff15434d4f5a2d813ed0f Mon Sep 17 00:00:00 2001
From: Wade Simmons <wadey@slack-corp.com>
Date: Sat, 17 Oct 2026 11:09:25 -0400
Subject: [PATCH] fix error return in handleOutsideMessagePacket (#1970)

Introduced by #1961, we should still return early for invalid packets
---
 outside.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/outside.go b/outside.go
index 8c88c7e4..54a1d393 100644
--- a/outside.go
+++ b/outside.go
@@ -478,8 +478,8 @@ func (f *Interface) handleOutsideMessagePacket(hostinfo *HostInfo, messageCounte
 	if err != nil {
 		if f.l.Enabled(context.Background(), slog.LevelDebug) {
 			hostinfo.logger(f.l).Debug("Error while validating inbound packet", "error", err, "packet", out)
-			return
 		}
+		return
 	}
 
 	dropReason := f.firewall.Drop(rxc.fwPacket.Packet, true, hostinfo, f.pki.GetCAPool(), rxc.ctCache.Get())