LOTS of stuff

2025-05-07 20:24:19 +03:00
parent a2e8ca3af3
commit 27c2f8fbc2
2 changed files with 93 additions and 14 deletions
--- a/wireguard.nix
+++ b/wireguard.nix
@@ -0,0 +1,18 @@
+# { config, pkgs, lib, ... }:{
+#   networking.firewall.checkReversePath = "loose"; 
+# }
+{ config, pkgs, lib, ... }:{
+  networking.firewall = {
+   # if packets are still dropped, they will show up in dmesg
+   logReversePathDrops = true;
+   # wireguard trips rpfilter up
+   extraCommands = ''
+     ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 16632 -j RETURN
+     ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 16632 -j RETURN
+   '';
+   extraStopCommands = ''
+     ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 16632 -j RETURN || true
+     ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 16632 -j RETURN || true
+   '';
+  };
+}