From e742a3083bd82560b44e2bf459c749bb7fb8099c Mon Sep 17 00:00:00 2001
From: Eduardo Silva <eduardo@eth0.com.br>
Date: Mon, 9 Feb 2026 17:10:54 -0300
Subject: [PATCH] update route policy RETURN to firewall instead of accepting
 and skipping other rules.

---
 firewall/tools.py                          |  2 +-
 templates/firewall/firewall_rule_list.html | 14 ++++++++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/firewall/tools.py b/firewall/tools.py
index a39c461..53c77c7 100644
--- a/firewall/tools.py
+++ b/firewall/tools.py
@@ -200,7 +200,7 @@ def generate_route_policy_rules():
         for source in sources:
             for destination in destinations:
                 route_policy_rules += (
-                    f"iptables -t filter -A WGWADM_ROUTE_POLICY -i wg+ -s {source} -d {destination} -j ACCEPT\n"
+                    f"iptables -t filter -A WGWADM_ROUTE_POLICY -i wg+ -s {source} -d {destination} -j RETURN\n"
                 )
 
             route_policy_rules += (
diff --git a/templates/firewall/firewall_rule_list.html b/templates/firewall/firewall_rule_list.html
index 5c5fcec..8f03213 100644
--- a/templates/firewall/firewall_rule_list.html
+++ b/templates/firewall/firewall_rule_list.html
@@ -64,6 +64,20 @@
                             <td></td>
                         </tr>
 
+                        <tr class="fw_automatic_rule">
+                            <td>-</td>
+                            <td><i class="fas fa-info-circle" title="{% trans 'Automatic rule: Route Policy' %}"></i></td>
+                            <td>wg+</td>
+                            <td></td>
+                            <td></td>
+                            <td></td>
+                            <td>{% trans 'all' %}</td>
+                            <td></td>
+                            <td></td>
+                            <td>{% trans 'RETURN' %}</td>
+                            <td></td>
+                        </tr>
+
                         {% for rule in port_forward_list %}
                             {% if rule.add_forward_rule and current_chain == 'forward' %}
                                 <tr class="fw_automatic_rule">