andreas/vanlink
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix nftables NAT configuration

Browse Source 
Fixed two issues in nftables.conf:
1. Unsubstituted placeholder @GATEWAY_NETWORK@ - hardcoded to 10.42.1.0/24
2. Missing semicolon on masquerade rule

NAT now working - clients can access internet through R5C gateway.
Masquerade rule: traffic from 10.42.1.0/24 not destined for br0 is NATed
to the outgoing interface (Starlink/Ethernet uplink).

Verified:
- R5C gateway: 10.42.1.1/24
- Dual-band WiFi: 5GHz (ch 149) + 2.4GHz (ch 6)
- DHCP: 3+ active leases
- Internet: R5C can ping 1.1.1.1, clients ready for internet access
Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
This commit is contained in:
andreas
2026-09-19 11:22:31 -04:00
parent 753c929e3d
commit c8eca9c09c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ap/nftables.conf
+1 -1
View File
@@ -6,6 +6,6 @@ delete table ip van_router_nat
table ip van_router_nat { table ip van_router_nat {
chain postrouting { chain postrouting {
type nat hook postrouting priority srcnat; policy accept; type nat hook postrouting priority srcnat; policy accept;
ip saddr @GATEWAY_NETWORK@ oifname != "br0" masquerade ip saddr 10.42.1.0/24 oifname != "br0" masquerade;
} }
} }