rc/friwall
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Oops, missed a six

Browse source
This commit is contained in:
Timotej Lazar 2024-05-02 17:27:18 +02:00
parent d123db4e64
commit 32af5a43c0
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
web/system.py
View file

@ -134,11 +134,12 @@ def save_config():
# Forwarding rules for VPN users. # Forwarding rules for VPN users.
if vpn_networks := sorted(name for name, data in ipsets.items() if data.get('vpn')): if vpn_networks := sorted(name for name, data in ipsets.items() if data.get('vpn')):
nft_forward = 'iif @inside oif @inside ip saddr @{name} ip daddr @{name} accept\n' nft_forward = 'iif @inside oif @inside ip saddr @{name} ip daddr @{name} accept\n'
nft_forward6 = 'iif @inside oif @inside ip6 saddr @{name}/6 ip6 daddr @{name}/6 accept\n'
f.write('# forward from the VPN interface to physical networks and back\n') f.write('# forward from the VPN interface to physical networks and back\n')
for name in vpn_networks: for name in vpn_networks:
f.write(nft_forward.format(name=name)) f.write(nft_forward.format(name=name))
for name in vpn_networks: for name in vpn_networks:
f.write(nft_forward.format(name=f'{name}/6')) f.write(nft_forward6.format(name=name))
f.write('\n') f.write('\n')
# Custom forwarding rules. # Custom forwarding rules.