Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

try to fix nat

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-12-06 12:39:45 +01:00
parent ff0dab4b03
commit 8ffefca044
2 changed files with 28 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -203,7 +203,10 @@
# Setup NAT masquerading on external interfaces
chain postrouting {
type nat hook postrouting priority filter; policy accept;
oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
oifname { "wan" } masquerade
oifname { "wrwks" } masquerade
oifname { "wg_epicenter" } masquerade
oifname { "wg_ghetto_at" } masquerade
}
}
'';

48
hosts/fw.cloonar.com/modules/unbound.nix
View File

@@ -107,30 +107,30 @@ let
"10.43.97.1"
];
}
{
name = "epicenter.works.";
forward-addr = [
"10.50.60.1"
];
}
{
name = "akvorrat.at.";
forward-addr = [
"10.50.60.1"
];
}
{
name = "epicenter.intra.";
forward-addr = [
"10.14.1.1"
];
}
{
name = "intra.epicenter.works.";
forward-addr = [
"10.14.1.1"
];
}
# {
# name = "epicenter.works.";
# forward-addr = [
# "10.50.60.1"
# ];
# }
# {
# name = "akvorrat.at.";
# forward-addr = [
# "10.50.60.1"
# ];
# }
# {
# name = "epicenter.intra.";
# forward-addr = [
# "10.14.1.1"
# ];
# }
# {
# name = "intra.epicenter.works.";
# forward-addr = [
# "10.14.1.1"
# ];
# }
];
};
in {