Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

try to fix nat

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-12-06 12:39:45 +01:00
parent ff0dab4b03
commit 8ffefca044
2 changed files with 28 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -203,7 +203,10 @@
# Setup NAT masquerading on external interfaces # Setup NAT masquerading on external interfaces
chain postrouting { chain postrouting {
type nat hook postrouting priority filter; policy accept; type nat hook postrouting priority filter; policy accept;
oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade oifname { "wan" } masquerade
oifname { "wrwks" } masquerade
oifname { "wg_epicenter" } masquerade
oifname { "wg_ghetto_at" } masquerade
} }
} }
''; '';

48
hosts/fw.cloonar.com/modules/unbound.nix
View File

@@ -107,30 +107,30 @@ let
"10.43.97.1" "10.43.97.1"
]; ];
} }
{ # {
name = "epicenter.works."; # name = "epicenter.works.";
forward-addr = [ # forward-addr = [
"10.50.60.1" # "10.50.60.1"
]; # ];
} # }
{ # {
name = "akvorrat.at."; # name = "akvorrat.at.";
forward-addr = [ # forward-addr = [
"10.50.60.1" # "10.50.60.1"
]; # ];
} # }
{ # {
name = "epicenter.intra."; # name = "epicenter.intra.";
forward-addr = [ # forward-addr = [
"10.14.1.1" # "10.14.1.1"
]; # ];
} # }
{ # {
name = "intra.epicenter.works."; # name = "intra.epicenter.works.";
forward-addr = [ # forward-addr = [
"10.14.1.1" # "10.14.1.1"
]; # ];
} # }
]; ];
}; };
in { in {