forward all established

2023-12-06 14:36:06 +01:00
parent 3958b1891c
commit 1a6a8aa584
1 changed files with 3 additions and 0 deletions
--- a/hosts/fw.cloonar.com/modules/firewall.nix
+++ b/hosts/fw.cloonar.com/modules/firewall.nix
@@ -193,6 +193,9 @@
            iifname { "lan", "wg_cloonar" } oifname { "wrwks", "wg_epicenter", "wg_ghetto_at" } counter accept
            iifname { "infrastructure" } oifname { "server", "vserver" } counter accept

+            # allow all established, related
+            ct state { established, related } accept comment "Allow established traffic"
+
            # Allow trusted network WAN access
            iifname {
              "lan",