summaryrefslogtreecommitdiff
path: root/config/networking/services/firewall/ruleset.nix
diff options
context:
space:
mode:
authorquentin@aristote.fr <quentin@aristote.fr>2026-10-10 19:24:22 +0200
committerquentin@aristote.fr <quentin@aristote.fr>2026-10-10 19:24:22 +0200
commit62c7fe136542e0af4f7b5e0da77b559ea3d35377 (patch)
tree50330b2c4b0a76d399a723c8d668577526f15b99 /config/networking/services/firewall/ruleset.nix
parent5110e87f0348bea528d9d61387b403511ecbcf79 (diff)
downloadkerberos-62c7fe136542e0af4f7b5e0da77b559ea3d35377.tar.gz
kerberos-62c7fe136542e0af4f7b5e0da77b559ea3d35377.tar.bz2
kerberos-62c7fe136542e0af4f7b5e0da77b559ea3d35377.tar.xz
networking: internet access via ppp
Diffstat (limited to 'config/networking/services/firewall/ruleset.nix')
-rw-r--r--config/networking/services/firewall/ruleset.nix6
1 files changed, 3 insertions, 3 deletions
diff --git a/config/networking/services/firewall/ruleset.nix b/config/networking/services/firewall/ruleset.nix
index ada3518..cbd7631 100644
--- a/config/networking/services/firewall/ruleset.nix
+++ b/config/networking/services/firewall/ruleset.nix
@@ -171,7 +171,7 @@ in
''
+ conntrack
+ ''
- meta oifname enp4s0 goto extranet
+ meta oifname ppp0 goto extranet
meta iifname . meta oifname vmap \
{ wan . iot : goto wan_iot \
, iot . wan : goto iot_wan \
@@ -187,8 +187,8 @@ in
priority = "srcnat";
policy = "accept";
rules = ''
- meta oifname enp4s0 \
- snat to ${interfaces.all.enp4s0.machines.self.ip}
+ meta oifname ppp0 \
+ masquerade
'';
};
};