ocserv: fix firewall config
Oops, let’s not drop everything but VPN packets in postrouting.
This commit is contained in:
parent
11e456cff1
commit
292ddbb7e7
1 changed files with 1 additions and 1 deletions
|
@ -8,7 +8,7 @@ table inet ocserv {
|
||||||
|
|
||||||
table ip ocserv {
|
table ip ocserv {
|
||||||
chain postrouting {
|
chain postrouting {
|
||||||
type nat hook postrouting priority srcnat; policy drop;
|
type nat hook postrouting priority srcnat; policy accept;
|
||||||
meta mark 0x100 masquerade
|
meta mark 0x100 masquerade
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue