From 83ac3fea423be2d39040fb334e7f2f3b101c6799 Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Thu, 30 Nov 2023 23:59:02 +0100
Subject: [PATCH] try policy accept

---
 hosts/fw.cloonar.com/modules/firewall.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/fw.cloonar.com/modules/firewall.nix b/hosts/fw.cloonar.com/modules/firewall.nix
index 29daf46..5b3c9ef 100644
--- a/hosts/fw.cloonar.com/modules/firewall.nix
+++ b/hosts/fw.cloonar.com/modules/firewall.nix
@@ -55,7 +55,7 @@
           }
 
           chain forward {
-            type filter hook forward priority filter; policy drop;
+            type filter hook forward priority filter; policy accept;
 
             # enable flow offloading for better throughput
             # ip protocol { tcp, udp } flow offload @f