Fixed NAT/Masquerade for bridge
Packets from bridge to bridge shouldn't be masqueraded
This commit is contained in:
parent
8bb252b35c
commit
c366ef7dc0
|
@ -4,6 +4,6 @@ iface br-lxc inet static
|
|||
|
||||
bridge_ports none
|
||||
|
||||
up /sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 ! -d 192.168.1.0/24 -j MASQUERADE
|
||||
down /sbin/iptables -t nat -D POSTROUTING -s 192.168.1.0/24 ! -d 192.168.1.0/24 -j MASQUERADE
|
||||
up /sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 ! -o br-lxc ! -d 192.168.1.0/24 -j MASQUERADE
|
||||
down /sbin/iptables -t nat -D POSTROUTING -s 192.168.1.0/24 ! -o br-lxc ! -d 192.168.1.0/24 -j MASQUERADE
|
||||
|
||||
|
|
Loading…
Reference in a new issue