From 852849c3cf69fae22d0680b6cf0ee1a6788f7f63 Mon Sep 17 00:00:00 2001 From: Alex Denes Date: Thu, 24 Mar 2022 06:22:06 +0000 Subject: [PATCH] Allow cross-peer communication over wireguard, act like a private network and not just a VPN --- config/nftables/APKBUILD | 2 +- .../nft/inet/redxenfirewall/filter/forward/wireguard | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/config/nftables/APKBUILD b/config/nftables/APKBUILD index f01970b..3497fb0 100644 --- a/config/nftables/APKBUILD +++ b/config/nftables/APKBUILD @@ -3,7 +3,7 @@ . ../APKBUILD-config.template -pkgver=2022.03.10.01 +pkgver=2022.03.23.01 pkgrel=0 options="!check" # check requires root? diff --git a/config/nftables/nft/inet/redxenfirewall/filter/forward/wireguard b/config/nftables/nft/inet/redxenfirewall/filter/forward/wireguard index 2dc8444..515f391 100644 --- a/config/nftables/nft/inet/redxenfirewall/filter/forward/wireguard +++ b/config/nftables/nft/inet/redxenfirewall/filter/forward/wireguard @@ -1,2 +1,3 @@ -iifname "rxmain" oifname "eth0" counter accept -iifname "eth0" oifname "rxmain" counter accept +iifname "rxmain" oifname "rxmain" counter accept; +iifname "rxmain" oifname "eth0" counter accept; +iifname "eth0" oifname "rxmain" counter accept;