qusal/salt/sys-wireguard/files/server/qubes-firewall.d/60-sys-wireguard-nat

19 lines
684 B
Plaintext
Raw Normal View History

#!/usr/sbin/nft -f
# vim: ft=nftables
# SPDX-FileCopyrightText: 2022 unman <unman@thirdeyesecurity.org>
2024-01-29 10:49:54 -05:00
# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later
add chain ip6 qubes dnat-dns { type nat hook prerouting priority dstnat; policy accept; }
add chain ip qubes custom-dnat { type nat hook prerouting priority dstnat; policy accept; }
add chain ip6 qubes custom-dnat { type nat hook prerouting priority dstnat; policy accept; }
flush chain ip qubes dnat-dns
flush chain ip6 qubes dnat-dns
flush chain ip qubes custom-dnat
flush chain ip6 qubes custom-dnat
include "/var/run/wireguard/dnat.nft"