DefGuard / DefGuard/defguard

Adding SNAT binding breaks VPN connection

Open
#2,637 0 comments 0 reactions 1 assignee Claimed by @wojcik91 View on GitHub
bug
Dominant language
Rust
Stars
2.8k
Forks
115
Avg merge
1d 4h
Merged PRs (30d)
51

Description

### Description

Rule in gateway
```
table inet DEFGUARD-wgNoMFA-2 {
chain FORWARD {
type filter hook forward priority filter; policy accept;
iifname != "wgNoMFA-2" counter packets 0 bytes 0 accept comment "Ignore traffic not related to the VPN"
ct state established,related counter packets 0 bytes 0 accept comment "Allow established and related traffic"
}

chain POSTROUTING {
type nat hook postrouting priority srcnat; policy accept;
ip saddr { 10.3.3.12, 10.3.3.22/31 } oifname != "lo" counter packets 0 bytes 0 snat ip to PUBLIC.IP comment "User 636 SNAT binding 11"
oifname != "lo" counter packets 0 bytes 0 masquerade
}
}
```

After setting this, there are no internet connection at all

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.