|
@@ -4,7 +4,6 @@ import (
|
|
|
"encoding/json"
|
|
|
"errors"
|
|
|
"fmt"
|
|
|
- "net"
|
|
|
"strings"
|
|
|
"time"
|
|
|
|
|
@@ -334,12 +333,6 @@ func firewallNFTCommandsCreateEgress(networkInterface string, gatewayInterface s
|
|
|
postUp += "nft add table nat ; "
|
|
|
postUp += "nft 'add chain ip nat prerouting { type nat hook prerouting priority 0 ;}' ; "
|
|
|
postUp += "nft 'add chain ip nat postrouting { type nat hook postrouting priority 0 ;}' ; "
|
|
|
- for _, networkCIDR := range gatewayranges {
|
|
|
- if net.ParseIP(networkCIDR).To16() != nil {
|
|
|
- continue
|
|
|
- }
|
|
|
- postUp += "nft add rule nat postrouting iifname " + networkInterface + " oifname " + gatewayInterface + " ip saddr " + networkCIDR + " masquerade ; "
|
|
|
- }
|
|
|
|
|
|
postDown += "nft flush table filter ; "
|
|
|
|