netifd icon indicating copy to clipboard operation
netifd copied to clipboard

option to skip creating default rule to subnet when using ip4table / ip6table

Open rhjdvsgsgks opened this issue 1 year ago • 0 comments

hi

im setting up a vpn to pass all traffic trough it. to do that, im using ip4table and ip6table to create a route table for vpn outbound on wan only. and kept default route table have only vpn route.

but netifd will create route rule 10000 (local addresses as source) and 20000 (local subnets as destination) to the interface which using ip4/6table. and that make my traffic directly passed to wan without going through vpn when accessing address on wan subnet. which is not intended

i know the purpose of these rule is make subnet able to access even it not on the default route table. but it broke my custom rule and decreased flexibility. could you add a option to disable that? just like nohostroute option for wireguard

rhjdvsgsgks avatar Oct 02 '23 19:10 rhjdvsgsgks