diff options
Diffstat (limited to 'modules/foundation/vpn.nix')
| -rw-r--r-- | modules/foundation/vpn.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/modules/foundation/vpn.nix b/modules/foundation/vpn.nix index 1a7524d..f4a5d21 100644 --- a/modules/foundation/vpn.nix +++ b/modules/foundation/vpn.nix @@ -83,6 +83,9 @@ in type filter hook forward priority 0; policy accept; iifname "${interface}" oifname "${cfg.externalInterface}" accept iifname "${cfg.externalInterface}" oifname "${interface}" ct state established,related accept + + # drop vpn-sourced traffic headed anywhere but external + iifname "${interface}" drop } ''; }; |