Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

forward all established

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2023-12-06 14:36:06 +01:00
parent 3958b1891c
commit 1a6a8aa584
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/fw.cloonar.com/modules/firewall.nix
View file

@ -193,6 +193,9 @@
iifname { "lan", "wg_cloonar" } oifname { "wrwks", "wg_epicenter", "wg_ghetto_at" } counter accept iifname { "lan", "wg_cloonar" } oifname { "wrwks", "wg_epicenter", "wg_ghetto_at" } counter accept
iifname { "infrastructure" } oifname { "server", "vserver" } counter accept iifname { "infrastructure" } oifname { "server", "vserver" } counter accept
# allow all established, related
ct state { established, related } accept comment "Allow established traffic"
# Allow trusted network WAN access # Allow trusted network WAN access
iifname { iifname {
"lan", "lan",