asonix/sbc-deploys
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Always allow inbound wireguard

Browse source
This commit is contained in:
asonix 2024-07-06 14:08:58 -05:00
parent 5a1a151de6
commit 63d5ff273b
1 changed files with 1 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
modules/router/default.nix
View file

@ -226,11 +226,6 @@ in
elements = { 22, 3128 } elements = { 22, 3128 }
} }
set internal_access_udp {
type inet_service; flags interval;
elements = { 51820 }
}
set network_required_udp { set network_required_udp {
type inet_service; flags interval; type inet_service; flags interval;
elements = { 53, 67, 68, 546, 547 } elements = { 53, 67, 68, 546, 547 }
@ -331,13 +326,7 @@ in
$WAN : jump rate_limit $WAN : jump rate_limit
} }
udp dport @internal_access_udp ct state new iifname vmap { udp dport 51820 ct state new accept comment "Allow wireguard"
$BRIDGE : accept,
$WG0 : accept,
$DEVICES : jump reject_politely,
$WIFI : jump rate_limit,
$WAN : jump rate_limit
}
udp dport @network_required_udp ct state new accept comment "Allow internal network required stuff" udp dport @network_required_udp ct state new accept comment "Allow internal network required stuff"