Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

try only wan masquerade

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2023-11-30 22:57:58 +01:00
parent 4d38581dad
commit 9810882b95
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/fw.cloonar.com/modules/firewall.nix
View file

@ -65,7 +65,7 @@
# lan and vpn to any # lan and vpn to any
# TODO: disable wan when finished # TODO: disable wan when finished
iifname { "wan", "lan", "wg_cloonar" } oifname { "lan", "wg_cloonar", "server", "multimedia", "smart", "wrwks", "wg_epicenter", "wg_ghetto_at" } counter accept iifname { "wan", "lan", "wg_cloonar" } oifname { "lan", "server", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept
# Allow trusted network WAN access # Allow trusted network WAN access
iifname { iifname {
@ -99,7 +99,8 @@
# Setup NAT masquerading on the ppp0 interface # Setup NAT masquerading on the ppp0 interface
chain postrouting { chain postrouting {
type nat hook postrouting priority filter; policy accept; type nat hook postrouting priority filter; policy accept;
oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade # oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
oifname { "wan" } masquerade
} }
} }
''; '';