change fw rule
This commit is contained in:
@@ -130,9 +130,6 @@
|
|||||||
}
|
}
|
||||||
|
|
||||||
table ip nat {
|
table ip nat {
|
||||||
chain post {
|
|
||||||
iifname { "vb-*" } oifname { "server" } masquerade comment "from internal interfaces"
|
|
||||||
}
|
|
||||||
chain prerouting {
|
chain prerouting {
|
||||||
type nat hook prerouting priority filter; policy accept;
|
type nat hook prerouting priority filter; policy accept;
|
||||||
}
|
}
|
||||||
@@ -141,6 +138,7 @@
|
|||||||
chain postrouting {
|
chain postrouting {
|
||||||
type nat hook postrouting priority filter; policy accept;
|
type nat hook postrouting priority filter; policy accept;
|
||||||
oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
|
oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
|
||||||
|
iifname { "vb-*" } oifname { "server" } masquerade comment "from internal interfaces"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
'';
|
'';
|
||||||
|
|||||||
Reference in New Issue
Block a user