Iptables restrictions bugfix: #2: Restrict inter-host access

src/functions/backend/setup/build-host-iptables-scripts.ts

@@ -322,6 +322,11 @@ export default function buildHostIptablesScripts({
         }
     }
 
+    accept_lines.push(
+        `# Prevent clients from forwarding traffic back into the WireGuard network`,
+        `iptables -A ${forward} -o ${interface_name} -j DROP`,
+    );
+
     const post_up = [
         `#!/bin/bash`,
         ``,