From e65f45d4bf12e7a1f58fc9e488297e03bc05069a Mon Sep 17 00:00:00 2001 From: Daniel Flanagan Date: Mon, 31 Jan 2022 11:59:39 -0600 Subject: [PATCH] Update firewall to use new network interface names --- nftables.conf | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/nftables.conf b/nftables.conf index 7d3d3ff..95a2727 100644 --- a/nftables.conf +++ b/nftables.conf @@ -1,4 +1,4 @@ -define WAN = eth0 +define WAN = wan0 define LAN = lan0 define ROUTER_TCP_PORTS = { 22 } @@ -43,15 +43,15 @@ table ip nat { chain prerouting { type nat hook prerouting priority -100; policy accept; - # ip daddr 10.0.0.1 tcp dport { 80, 443 } dnat to 10.0.0.10 + # ip daddr 10.0.0.1 tcp dport { 80, 443 } dnat to 10.0.0.25 - iifname $WAN tcp dport $FACELESS_TCP_PORTS dnat to 10.0.0.10 - # iifname $WAN udp dport $FACELESS_UDP_PORTS dnat to 10.0.0.10 - iifname $WAN udp dport 60000-60009 dnat to 10.0.0.10 + iifname $WAN tcp dport $FACELESS_TCP_PORTS dnat to 10.0.0.25 + # iifname $WAN udp dport $FACELESS_UDP_PORTS dnat to 10.0.0.25 + iifname $WAN udp dport 60000-60009 dnat to 10.0.0.25 - iifname $WAN tcp dport $DRAGON_TCP_PORTS dnat to 10.0.0.5 - # iifname $WAN udp dport $DRAGON_UDP_PORTS dnat to 10.0.0.5 - iifname $WAN udp dport 60020-60029 dnat to 10.0.0.5 + iifname $WAN tcp dport $DRAGON_TCP_PORTS dnat to 10.0.0.10 + # iifname $WAN udp dport $DRAGON_UDP_PORTS dnat to 10.0.0.10 + iifname $WAN udp dport 60020-60029 dnat to 10.0.0.10 } }