Mirrors/wireguard_webadmin
1
0
Fork 0
mirror of https://github.com/eduardogsilva/wireguard_webadmin.git synced 2026-01-31 11:36:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Apply route policy rules before user firewall

Browse Source
This commit is contained in:
Eduardo Silva
2026-01-25 08:56:34 -03:00
parent c8abc2e599
commit 8ab8b995f4
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
firewall/tools.py
View File

@@ -169,9 +169,7 @@ def generate_route_policy_rules():
.order_by('wireguard_instance__instance_id', 'sort_order', 'name', 'public_key') .order_by('wireguard_instance__instance_id', 'sort_order', 'name', 'public_key')
) )
if peers.exists(): if not peers.exists():
route_policy_rules += 'iptables -t filter -A WGWADM_FORWARD -i wg+ -j WGWADM_ROUTE_POLICY\n\n'
else:
route_policy_rules += '# No peers with enforce_route_policy enabled\n\n' route_policy_rules += '# No peers with enforce_route_policy enabled\n\n'
return route_policy_rules return route_policy_rules
@@ -226,6 +224,7 @@ iptables -t nat -F WGWADM_POSTROUTING
iptables -t nat -F WGWADM_PREROUTING iptables -t nat -F WGWADM_PREROUTING
iptables -t filter -F WGWADM_FORWARD iptables -t filter -F WGWADM_FORWARD
iptables -t filter -F WGWADM_ROUTE_POLICY iptables -t filter -F WGWADM_ROUTE_POLICY
iptables -t filter -F FORWARD
iptables -t nat -D POSTROUTING -j WGWADM_POSTROUTING >> /dev/null 2>&1 iptables -t nat -D POSTROUTING -j WGWADM_POSTROUTING >> /dev/null 2>&1
iptables -t nat -D PREROUTING -j WGWADM_PREROUTING >> /dev/null 2>&1 iptables -t nat -D PREROUTING -j WGWADM_PREROUTING >> /dev/null 2>&1
@@ -233,9 +232,10 @@ iptables -t filter -D FORWARD -j WGWADM_FORWARD >> /dev/null 2>&1
iptables -t nat -I POSTROUTING -j WGWADM_POSTROUTING iptables -t nat -I POSTROUTING -j WGWADM_POSTROUTING
iptables -t nat -I PREROUTING -j WGWADM_PREROUTING iptables -t nat -I PREROUTING -j WGWADM_PREROUTING
iptables -t filter -I FORWARD -j WGWADM_FORWARD
iptables -t filter -A WGWADM_FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -t filter -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t filter -A FORWARD -i wg+ -j WGWADM_ROUTE_POLICY
iptables -t filter -A FORWARD -j WGWADM_FORWARD
''' '''
return header return header

2
wireguard_tools/views.py
View File

@@ -64,8 +64,8 @@ def export_firewall_configuration():
firewall_content = generate_firewall_header() firewall_content = generate_firewall_header()
firewall_content += generate_redirect_dns_rules() firewall_content += generate_redirect_dns_rules()
firewall_content += generate_port_forward_firewall() firewall_content += generate_port_forward_firewall()
firewall_content += export_user_firewall()
firewall_content += generate_route_policy_rules() firewall_content += generate_route_policy_rules()
firewall_content += export_user_firewall()
firewall_content += generate_firewall_footer() firewall_content += generate_firewall_footer()
firewall_path = "/etc/wireguard/wg-firewall.sh" firewall_path = "/etc/wireguard/wg-firewall.sh"
with open(firewall_path, "w") as firewall_file: with open(firewall_path, "w") as firewall_file: