diff options
| author | Kjetil Orbekk <kj@orbekk.com> | 2023-04-23 10:19:34 -0400 |
|---|---|---|
| committer | Kjetil Orbekk <kj@orbekk.com> | 2023-04-23 10:19:34 -0400 |
| commit | 2cdc1f0229bef01a2661dd38c529480fd37477ff (patch) | |
| tree | b49b1c5736e887ca0cd781a7e9aeeabefddabc93 | |
| parent | c9949fe7273ee6bb107a0389ca32b6b64087154d (diff) | |
fix router
| -rw-r--r-- | modules/router.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/router.nix b/modules/router.nix index 836f037..b73c3e2 100644 --- a/modules/router.nix +++ b/modules/router.nix @@ -209,7 +209,7 @@ let ct state vmap { established : accept, related : accept, invalid : drop } # Don't allow accidental vpn forwarding to wan. - iifname vpnlan-vport oifname wan-vport counter deny + iifname vpnlan-vport oifname wan-vport counter reject oifname he0 counter accept oifname wan-vport counter accept oifname mullvad counter accept |