diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2023-03-05 11:47:52 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2023-03-05 11:47:52 +0100 |
| commit | 73d27b7275b155fa6572a5ea23717ff2f4ee8dc9 (patch) | |
| tree | 08d44508ed6ea2404f7504aa25a0459b3ff2b8fc /hosts/vidhar/network | |
| parent | ca9c2e873a0c1d63d5c4a44508e96911efc4f1b9 (diff) | |
| download | nixos-73d27b7275b155fa6572a5ea23717ff2f4ee8dc9.tar nixos-73d27b7275b155fa6572a5ea23717ff2f4ee8dc9.tar.gz nixos-73d27b7275b155fa6572a5ea23717ff2f4ee8dc9.tar.bz2 nixos-73d27b7275b155fa6572a5ea23717ff2f4ee8dc9.tar.xz nixos-73d27b7275b155fa6572a5ea23717ff2f4ee8dc9.zip | |
...
Diffstat (limited to 'hosts/vidhar/network')
| -rw-r--r-- | hosts/vidhar/network/ruleset.nft | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft index 37c1cf55..47a55fcc 100644 --- a/hosts/vidhar/network/ruleset.nft +++ b/hosts/vidhar/network/ruleset.nft | |||
| @@ -254,15 +254,17 @@ table inet filter { | |||
| 254 | } | 254 | } |
| 255 | } | 255 | } |
| 256 | 256 | ||
| 257 | table ip nat { | 257 | table inet nat { |
| 258 | counter dsl-nat {} | 258 | counter dsl-nat {} |
| 259 | counter container-nat {} | ||
| 259 | 260 | ||
| 260 | chain postrouting { | 261 | chain postrouting { |
| 261 | type nat hook postrouting priority srcnat | 262 | type nat hook postrouting priority srcnat |
| 262 | policy accept | 263 | policy accept |
| 263 | 264 | ||
| 264 | 265 | ||
| 265 | oifname dsl counter name dsl-nat masquerade | 266 | meta nfproto ipv4 oifname dsl counter name dsl-nat masquerade |
| 267 | iifname ve-* oifname dsl counter name container-nat masquerade | ||
| 266 | } | 268 | } |
| 267 | } | 269 | } |
| 268 | 270 | ||
