add established and related state rule on fwd chain

gravitl · Dec 5, 2024 · e5f79f4 · e5f79f4
1 parent ca7154c
commit e5f79f4
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/firewall/iptables_linux.go b/firewall/iptables_linux.go
@@ -73,6 +73,20 @@ var (
 			table: defaultIpTable,
 			chain: iptableINChain,
 		},
+		{
+			rule: []string{"-i", ncutils.GetInterfaceName(), "-m", "conntrack",
+				"--ctstate", "ESTABLISHED,RELATED", "-m", "comment",
+				"--comment", netmakerSignature, "-j", "ACCEPT"},
+			table: defaultIpTable,
+			chain: iptableFWDChain,
+		},
+		{
+			rule: []string{"-o", ncutils.GetInterfaceName(), "-m", "conntrack",
+				"--ctstate", "ESTABLISHED,RELATED", "-m", "comment",
+				"--comment", netmakerSignature, "-j", "ACCEPT"},
+			table: defaultIpTable,
+			chain: iptableFWDChain,
+		},
 		{
 			rule: []string{"-i", ncutils.GetInterfaceName(), "-j", aclInputRulesChain,
 				"-m", "comment", "--comment", netmakerSignature},