Moduletrace/wireguard-ui
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Iptables bugfix: allow dns queries over wireguard tunnel

Browse Source
This commit is contained in:
tben
2026-09-21 15:08:54 +01:00
parent b0536765ce
commit 803ba0adef
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/functions/backend/setup/build-host-iptables-scripts.ts
+4 -1
View File
@@ -209,7 +209,7 @@ export default function buildHostIptablesScripts({
accept_lines.push( accept_lines.push(
`iptables -A ${forward} -s ${source} -d ${scoped_subnet} -j ACCEPT`, `iptables -A ${forward} -s ${source} -d ${scoped_subnet} -j ACCEPT`,
`iptables -A ${forward} -s ${source} -o ${target_interface} -j ACCEPT`, `iptables -A ${forward} -s ${source} -o ${target_interface} -j ACCEPT`,
`iptables -A ${input} -s ${source} -d ${scoped_subnet} -j ACCEPT`, `iptables -A ${input} -s ${source} -j ACCEPT`,
); );
} else { } else {
accept_lines.push( accept_lines.push(
@@ -268,6 +268,9 @@ export default function buildHostIptablesScripts({
`iptables -A ${forward} -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT`, `iptables -A ${forward} -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT`,
`iptables -A ${input} -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT`, `iptables -A ${input} -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT`,
``, ``,
`iptables -A ${input} -i${interface_name} -p udp --dport 53 -j ACCEPT`,
`iptables -A ${input} -i${interface_name} -p tcp --dport 53 -j ACCEPT`,
``,
...accept_lines, ...accept_lines,
``, ``,
`iptables -A ${forward} -j DROP`, `iptables -A ${forward} -j DROP`,