diff --git a/archi.nft b/archi.nft index d9cc885..e472e84 100644 --- a/archi.nft +++ b/archi.nft @@ -22,5 +22,5 @@ define range_aloes = 10.66.0.0/27 define range_prerezotage = 10.68.0.0/16 define range_public = 193.48.225.0/24 -define ip_self_public = 193.48.225.254 +define ip_self_public = 193.48.225.2 define ip_radius = 10.7.0.124 diff --git a/nat.nft b/nat.nft index 0a22db6..60ab593 100644 --- a/nat.nft +++ b/nat.nft @@ -18,6 +18,7 @@ table ip nat { chain postrouting { type nat hook postrouting priority 100 + meta oifname != $if_supelec return ip daddr != {10.0.0.0/8, $range_public} ip saddr vmap { $range_adherent : goto adherent_nat,