From 6cf51ce232dc7975ffea8bc10994ad3c827289c6 Mon Sep 17 00:00:00 2001 From: Xiao Pan Date: Fri, 28 Jun 2024 00:38:53 +0000 Subject: New wg and swgp config for route all traffic to ca Change swgp port to avoid server client same port error. New wg default route all traffic to ca with wg_ca. Only accept direct connect from insp when wg0 is enabled. --- etc/nftables.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/nftables.conf') diff --git a/etc/nftables.conf b/etc/nftables.conf index 5adbf28a..5c668feb 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -29,7 +29,7 @@ table inet my_table { #udp dport qbt accept #tcp dport iperf3 accept #udp dport wireguard accept - udp dport swgp accept + udp dport swgp-aa-server accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited counter comment "count any other traffic" -- cgit v1.2.3-70-g09d2