ocserv: fix firewall config

Oops, let’s not drop everything but VPN packets in postrouting.
This commit is contained in:
Timotej Lazar 2025-08-11 12:26:55 +02:00
parent 11e456cff1
commit 292ddbb7e7

View file

@ -8,7 +8,7 @@ table inet ocserv {
table ip ocserv {
chain postrouting {
type nat hook postrouting priority srcnat; policy drop;
type nat hook postrouting priority srcnat; policy accept;
meta mark 0x100 masquerade
}
}