Restrict guest network

Block IP4 traffic from and to guest network
2021-08-19 19:03:34 +02:00 · 2021-08-01 14:50:31 +02:00
1 changed files with 7 additions and 0 deletions
--- a/hosts/carbon/configuration.nix
+++ b/hosts/carbon/configuration.nix
@ -115,6 +115,13 @@

  networking.firewall.allowedUDPPorts = [ 60001 ];

+  networking.firewall.extraCommands = ''
+    iptables -A FORWARD -i enp1s0.202 -o enp1s0.102 -j ACCEPT
+    iptables -A FORWARD -i enp1s0.202 -j DROP
+    iptables -A FORWARD -i enp1s0.102 -o enp1s0.202 -j ACCEPT
+    iptables -A FORWARD -o enp1s0.202 -j DROP
+  '';
+
  # Routing tables
  # Table: 10000
  # - primary routes
Author	SHA1	Message	Date
clerie	c55c0d7367	Restrict guest network	2021-08-19 19:03:34 +02:00
clerie	222d538de6	Block IP4 traffic from and to guest network	2021-08-01 14:50:31 +02:00