diff options
| author | Grigory Shipunov | 2023-02-08 16:38:58 +0100 |
|---|---|---|
| committer | Grigory Shipunov | 2023-02-08 16:38:58 +0100 |
| commit | 0c63cfbe7a01522607965be761534c514ea37b6c (patch) | |
| tree | 82c368f26626efd21e6570b80a2d42cfce93cfee /hosts/cirrus | |
| parent | d638a73d3ec46b104bd8da4f6b3c14488618afbe (diff) | |
nat: exclude lo from masquerade
Diffstat (limited to 'hosts/cirrus')
| -rw-r--r-- | hosts/cirrus/wireguard-server.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hosts/cirrus/wireguard-server.nix b/hosts/cirrus/wireguard-server.nix index 5b17782..d9fc754 100644 --- a/hosts/cirrus/wireguard-server.nix +++ b/hosts/cirrus/wireguard-server.nix @@ -13,7 +13,7 @@ # port-forward ssh to the music machine extraCommands = '' iptables -t nat -I PREROUTING -p tcp --dport 2020 -j DNAT --to-destination 10.34.45.101:22 - iptables -t nat -A POSTROUTING -j MASQUERADE + iptables ! -o lo -t nat -A POSTROUTING -j MASQUERADE ''; extraStopCommands = '' iptables -t nat -D PREROUTING -p tcp --dport 2020 -j DNAT --to-destination 10.34.45.101:22 || true |