voronind/nix
0
0
Fork 0
Code Issues41 Pull requests Packages Projects Releases Wiki Activity

Home: Enable v4 masq for vpn clients.

Browse source
This commit is contained in:
Dmitry Voronin 2025-01-27 20:41:23 +03:00
parent f53ed95207
commit 8e384d9e22
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
1 changed files with 3 additions and 3 deletions

6
host/x86_64-linux/home/Network.nix
View file

@ -144,8 +144,8 @@ in
firewall = {
enable = true;
extraCommands = ''
# Wan access for 10.0.0.0/24 subnet.
iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -d 0/0 -o ${wan} -j MASQUERADE
# Wan access for 10.0.0.0/8 subnet.
iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -d 0/0 -o ${wan} -j MASQUERADE
# Full access from Lan.
ip46tables -I INPUT -j ACCEPT -i ${lan}
@ -165,7 +165,7 @@ in
ip46tables -I INPUT -j ACCEPT -i ${wan} -p udp --dport 51413
# Terraria server.
ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22777
# ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22777
# Mumble.
ip46tables -I INPUT -j ACCEPT -i ${wan} -p tcp --dport 22666