From 45ea9bec29245117222be71f1003115395b5f142 Mon Sep 17 00:00:00 2001 From: Clayton Craft Date: Thu, 21 Oct 2021 23:33:30 -0700 Subject: [PATCH] postmarketos-config-nftables: add forward rule to accept traffic on wlan (MR 2622) This seems to fix the last missing piece to getting the hotspot stuff working, at least when it's set up with networkmanager (I haven't tested other methods, but assume this rule is still needed there too...) fixes #1198 --- main/postmarketos-config-nftables/APKBUILD | 4 ++-- main/postmarketos-config-nftables/rules/51_hotspot.nft | 4 ++++ 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/main/postmarketos-config-nftables/APKBUILD b/main/postmarketos-config-nftables/APKBUILD index 066fdcf58..7f540a754 100644 --- a/main/postmarketos-config-nftables/APKBUILD +++ b/main/postmarketos-config-nftables/APKBUILD @@ -1,6 +1,6 @@ # Maintainer: Clayton Craft pkgname=postmarketos-config-nftables -pkgver=0.6 +pkgver=0.7 pkgrel=0 pkgdesc="nftables firewall configuration for postmarketOS" url="https://gitlab.com/postmarketos" @@ -81,7 +81,7 @@ sha512sums=" d5a7c7fc47924acfafee42d731e6a0109d83af6278053128deecbf3cf40e37447cb649360ee9ebddd2a5ea276888314b63ce7ef828708b5bf7dd1bface7fbc62 10_dhcp.nft 6b0d0c7c3368dde1ad61d26a0c2e13008f16d5bedaf11fa4a3511b49675505cbbdda8bf8ff158194846b197108f76bdfd66d40a2afb9f4d25c79b02acf5659b7 50_ssh.nft 8322a8a5a5b1e98e1f44e2091b8b3a06db1e8309ebba5b8b6abe9d6fbb009dffb248af55e631f06f01bbced98b23c205462de73cd354b116dbaa7b6c72746bfd 51_anbox.nft -c3c1dba2d10161ca8081f4adcb4dfc6dda4fcd3bc5c473a80d7260e4cdcf071997fc1a28789dcc0f06689c77fc6b477335af5a783ce558192eb897fb27500676 51_hotspot.nft +1ce70bb71c9008b6c727a2c26d11467be3b5a0cb9815a8bb0790150c7958457b22b110e35ba974973b9579d44bd14219985d85597c954b5fa8cf77bf206c959b 51_hotspot.nft bceb1a12a9de044daa3a4ba647b0d69b257881151a912fc350d6a00fdf0c0903b51fb58c56cfc73e9a75f529bac841d41d466e0f210b1f516e124e69cbfd1feb 51_usb_inet.nft dfe0c8f7e86f187a9a69a35f1f4e9125dca385ad372777aab3d820886b26061214f3dc3f0d012690e981e0dec9bcacf154c69eab56dfa549d132555663b1f8e9 50_vncserver.nft 0e86974602622c03f0b34acd048e3a31157c0226ab4b5ec093a19696af3fc9637ed84cecf0d190941e4bd3afeb0c76a37245fa850abef46778cd1235ad8106df 60_usb.nft diff --git a/main/postmarketos-config-nftables/rules/51_hotspot.nft b/main/postmarketos-config-nftables/rules/51_hotspot.nft index ff0e49022..53e1f4bfa 100644 --- a/main/postmarketos-config-nftables/rules/51_hotspot.nft +++ b/main/postmarketos-config-nftables/rules/51_hotspot.nft @@ -8,4 +8,8 @@ table inet filter { iifname "wlan*" udp dport 53 accept comment "Accept DNS over UDP on wlan*" } + + chain forward { + iifname "wlan*" accept comment "Accept forwarding from wlan*" + } }