2 changed files with 1 additions and 3 deletions
--- a/hosts/carbon/configuration.nix
+++ b/hosts/carbon/configuration.nix
@ -247,6 +247,7 @@
  clerie.firewall.extraForwardFilterCommands = ''
    ip46tables -A forward-filter -i enp1s0.202 -o ppp-ntvdsl -j ACCEPT
    ip46tables -A forward-filter -i enp1s0.202 -j DROP
+    ip46tables -A forward-filter -i ppp-ntvdsl -o enp1s0.202 -j ACCEPT
    ip46tables -A forward-filter -o enp1s0.202 -j DROP
  '';
  clerie.firewall.extraForwardMangleCommands = ''
--- a/modules/clerie-firewall/default.nix
+++ b/modules/clerie-firewall/default.nix
@ -24,9 +24,6 @@ let

    ip46tables -N forward-filter

-    # Allow packets from existing connections
-    ip46tables -A forward-filter -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
-
    ${cfg.extraForwardFilterCommands}

    ip46tables -A FORWARD -j forward-filter