5
0
Fork
You've already forked wg-daemon
1

implement firewalling #3

Open
opened 2026年01月13日 11:08:50 +01:00 by fkooman · 1 comment

Currently the daemon does not set up any firewalling, it might be possible to do that automatically, for example for "split tunnel" VPNs where it because impossible for the clients to route traffic to destinations not part of the list of allowed prefixes.

Not sure if this is a good idea, but it would be possible to set this up through netlink as well...

Currently the daemon does not set up any firewalling, it _might_ be possible to do that automatically, for example for "split tunnel" VPNs where it because impossible for the clients to route traffic to destinations not part of the list of allowed prefixes. Not sure if this is a good idea, but it would be possible to set this up through netlink as well...
Author
Owner
Copy link

Another approach might be to use virtual routing tables for each "profile", then no firewalling would be needed, e.g. ip rule / ip route.

Another approach might be to use virtual routing tables for each "profile", then no firewalling would be needed, e.g. `ip rule` / `ip route`.
Sign in to join this conversation.
No Branch/Tag specified
main
0.0.13
0.0.12
0.0.11
0.0.10
0.0.9
0.0.8
0.0.7
0.0.6
0.0.5
0.0.4
0.0.3
0.0.2
0.0.1
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/wg-daemon#3
Reference in a new issue
eduVPN/wg-daemon
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?