ソースを参照

prevent internet gateway on server

Matthew R. Kasun 3 年 前
コミット
0fb076f3c4
2 ファイル変更2 行追加1 行削除
  1. 1 0
      logic/server.go
  2. 1 1
      netclient/wireguard/common.go

+ 1 - 0
logic/server.go

@@ -209,6 +209,7 @@ func GetServerPeers(serverNode *models.Node) ([]wgtypes.PeerConfig, bool, []stri
 		for _, node := range nodes {
 			//if egress ranges is internet (0.0.0.0/0 or ::/0) remove as don't want server to use internet gateway
 			if node.IsEgressGateway == "yes" && (slices.Contains(node.EgressGatewayRanges, "0.0.0.0/0") || slices.Contains(node.EgressGatewayRanges, "::/0")) {
+				logger.Log(0, "skipping internet gateway for server")
 				continue
 			}
 			if node.IsEgressGateway == "yes" && !IsLocalServer(&node) {

+ 1 - 1
netclient/wireguard/common.go

@@ -132,7 +132,7 @@ func SetPeers(iface string, node *models.Node, peers []wgtypes.PeerConfig) error
 			}
 		}
 	}
-	if internetGateway {
+	if internetGateway && node.IsServer != "yes" {
 		if err := local.SetDefaultRoute(iface, gateway); err != nil {
 			return err
 		}