Skip to content

Allow traffic between clients #683

@turicas

Description

@turicas

Hi, thanks for this amazing project!

A have a scenario where I need traffic to be allowed between clients. It can be accomplished by adding two iptables rules to PostUp on Wireguard Server config (iptables -A FORWARD -o wg0 -j ACCEPT and the same for ip6tables). Is it possible to make this a checkbox in the interface? I think it could be useful to other users too.

This is the current PostUp default configuration (one command per line, to make it easier to read):

iptables -A FORWARD -i wg0 -j ACCEPT;
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;
ip6tables -A FORWARD -i wg0 -j ACCEPT;
ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

After the change, it becomes:

iptables -A FORWARD -i wg0 -j ACCEPT;
iptables -A FORWARD -o wg0 -j ACCEPT; # Added
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;
ip6tables -A FORWARD -i wg0 -j ACCEPT;
ip6tables -A FORWARD -o wg0 -j ACCEPT; # Added
ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions