fix

1 files changed, 2 insertions, 0 deletions

diff --git a/modules/router.nix b/modules/router.nix
index 5864eb3..29de644 100644
--- a/modules/router.nix
+++ b/modules/router.nix
@@ -219,11 +219,13 @@ let
             ip6 nexthdr ipv6-icmp limit rate 4/second counter accept comment "accept all ICMP types"
 
             ct state vmap { established : accept, related : accept, invalid : drop }
+
             # Don't allow accidental vpn forwarding to wan.
             iifname vpnlan-vport oifname wan-vport counter reject
             oifname he0 counter accept
             oifname wan-vport counter accept
             oifname mullvad counter accept
+            iifname wg-vpn oifname wg-vpn counter accept
 
             # Transmission
             ip daddr 172.20.20.2 th dport {9091, 56732} counter accept;