From 09df394737c4a91a5a44909e29abeff8e1927ecc Mon Sep 17 00:00:00 2001 From: Emil Renner Berthing Date: Thu, 26 Jan 2023 23:00:16 +0100 Subject: space_server: nftables: NAT local traffic bound for colo if --- roles/space_server/templates/nftables.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/space_server/templates/nftables.conf.j2 b/roles/space_server/templates/nftables.conf.j2 index 412270c..b01ba96 100644 --- a/roles/space_server/templates/nftables.conf.j2 +++ b/roles/space_server/templates/nftables.conf.j2 @@ -269,8 +269,8 @@ table ip nat { chain postrouting { type nat hook postrouting priority -150; - oif $ext_if ip saddr $free_net4 snat $free_nat - oif $ext_if ip saddr $int_net4 snat $ext_ip4 + oif { $ext_if, $colo_if } ip saddr $free_net4 snat $free_nat + oif { $ext_if, $colo_if } ip saddr $int_net4 snat $ext_ip4 } } -- cgit v1.2.1