diff options
| author | lassulus <lassulus@lassul.us> | 2018-12-25 14:24:32 +0100 |
|---|---|---|
| committer | lassulus <lassulus@lassul.us> | 2018-12-25 14:38:35 +0100 |
| commit | 712ef03b7afce99f359cf1a5072b63f493ed461b (patch) | |
| tree | ae8c62d6d96f03df755ccb44e7dd3bd23bcfe88b /lass/1systems/prism/config.nix | |
| parent | 48847ca8154fdc8db62ff151effdb3e39cae87f7 (diff) | |
l prism: fix MASQUERADING for externals
Diffstat (limited to 'lass/1systems/prism/config.nix')
| -rw-r--r-- | lass/1systems/prism/config.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lass/1systems/prism/config.nix b/lass/1systems/prism/config.nix index 034721660..dd8ab0dd9 100644 --- a/lass/1systems/prism/config.nix +++ b/lass/1systems/prism/config.nix @@ -309,7 +309,7 @@ with import <stockholm/lib>; { precedence = 1000; predicate = "-i retiolum -o wiregrill"; target = "ACCEPT"; } ]; krebs.iptables.tables.nat.POSTROUTING.rules = [ - { v4 = false; predicate = "-s 42:1:ce16::/48 ! -d 42:1:ce16::48"; target = "MASQUERADE"; } + { v4 = false; predicate = "-s 42:1::/32 ! -d 42:1::/48"; target = "MASQUERADE"; } { v6 = false; predicate = "-s 10.244.1.0/24 ! -d 10.244.1.0/24"; target = "MASQUERADE"; } ]; services.dnsmasq = { |