diff --git a/roles/firewall/templates/nftables.nft.j2 b/roles/firewall/templates/nftables.nft.j2 index ab1eab5..acb7d29 100644 --- a/roles/firewall/templates/nftables.nft.j2 +++ b/roles/firewall/templates/nftables.nft.j2 @@ -80,16 +80,6 @@ table inet filter { ct status dnat accept \ comment "Forward DNAT traffic for servers and suchlike" - # Forward IPv4 to/from VPN users in the same network. -{% for vlan in vrf_prefixes | selectattr('family.value', '==', 4) | map(attribute='vlan.name') | unique %} - iif @inside ip saddr @{{ vlan }} ip daddr @{{ vlan }} accept -{% endfor %} - - # Forward IPv6 to/from VPN users in the same network. -{% for vlan in vrf_prefixes | selectattr('family.value', '==', 6) | map(attribute='vlan.name') | unique %} - iif @inside ip6 saddr @{{ vlan }}/6 ip6 daddr @{{ vlan }}/6 accept -{% endfor %} - include "/etc/nftables.d/forward.nft*" }