summaryrefslogtreecommitdiff
path: root/hosts/toaster/stateful-network.nix
diff options
context:
space:
mode:
authorGrisha Shipunov2025-01-02 16:29:05 +0100
committerGrisha Shipunov2025-01-02 16:29:05 +0100
commitcd63ec45b8776bebc4014efb9990b364e0afb443 (patch)
tree1caf8f248c59179d914ac7f1d90e2cf1bb802263 /hosts/toaster/stateful-network.nix
parent772af12ffef7885ea9f0e3ef182599b61d0e72db (diff)
toaster works
Diffstat (limited to 'hosts/toaster/stateful-network.nix')
-rw-r--r--hosts/toaster/stateful-network.nix18
1 files changed, 0 insertions, 18 deletions
diff --git a/hosts/toaster/stateful-network.nix b/hosts/toaster/stateful-network.nix
index fcf5b7a..d65022d 100644
--- a/hosts/toaster/stateful-network.nix
+++ b/hosts/toaster/stateful-network.nix
@@ -18,22 +18,4 @@
];
};
- # fixup the rpfilter fucking up the networkmanager wireguard
- networking.firewall = {
- # if packets are still dropped, they will show up in dmesg
- logReversePathDrops = true;
- # wireguard trips rpfilter up
- extraCommands = ''
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN
- '';
- extraStopCommands = ''
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN || true
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN || true
- '';
- };
}