nixos-module/container/upstream: put noNat.subnets4 in proper iptables chain
This commit is contained in:
parent
c356db8bb4
commit
555026dd84
|
@ -94,7 +94,7 @@ in
|
|||
# Do not NAT our public IPv4 addresses
|
||||
${lib.concatMapStringsSep "\n" (net:
|
||||
lib.concatMapStrings (subnet: ''
|
||||
iptables -t nat -I nixos-nat-post \
|
||||
iptables -t nat -I ${net}_nat \
|
||||
-s ${subnet} \
|
||||
-j RETURN
|
||||
'') upstreamInterfaces.${net}.upstream.noNat.subnets4 or []
|
||||
|
|
Loading…
Reference in New Issue