ocserv: fix firewall config
Oops, let’s not drop everything but VPN packets in postrouting.
This commit is contained in:
parent
11e456cff1
commit
292ddbb7e7
1 changed files with 1 additions and 1 deletions
|
@ -8,7 +8,7 @@ table inet ocserv {
|
|||
|
||||
table ip ocserv {
|
||||
chain postrouting {
|
||||
type nat hook postrouting priority srcnat; policy drop;
|
||||
type nat hook postrouting priority srcnat; policy accept;
|
||||
meta mark 0x100 masquerade
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue