From 59101497d9793bc8f9012b0730a48b66b1704f0b Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sun, 17 Apr 2016 15:41:26 +0200
Subject: more lenient firewall

---
 bragi.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bragi.nix b/bragi.nix
index f520d05c..57ebd42f 100644
--- a/bragi.nix
+++ b/bragi.nix
@@ -196,7 +196,8 @@ in rec {
                            ];
     extraCommands = ''
       iptables -t nat -A POSTROUTING -o wlp4s0 -j MASQUERADE
-      iptables -A FORWARD -i wlp4s0 -o enp1s0 -m state --state RELATED,ESTABLISHED -j ACCEPT
+      #iptables -A FORWARD -i wlp4s0 -o enp1s0 -m state --state RELATED,ESTABLISHED -j ACCEPT
+      iptables -A FORWARD -i wlp4s0 -o enp1s0 -j ACCEPT
       iptables -A FORWARD -i enp1s0 -o wlp4s0 -j ACCEPT
     '';
   };
-- 
cgit v1.2.3