sophia: allow nat from wan1

devusb · May 18, 2024 · 656e3d8 · 656e3d8
1 parent d0e86c0
commit 656e3d8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/hosts/sophia/default.nix b/hosts/sophia/default.nix
@@ -153,6 +153,7 @@ with lib;
       extraCommands = ''
         iptables -I FORWARD 1 -i guest -d 192.168.0.0/16 -j DROP
         iptables -I FORWARD 1 -i isolated -o wan0 -j DROP
+        iptables -t nat -A POSTROUTING -o wan1 -j MASQUERADE -m mark --mark 0x1
       '';
     };