4
votes
Accepted
How to allow only one way traffic with wireguard
Given PC-s: A, B, C. A should be able to reach (ping, telnet, etc) B and C, B should be able to reach C, but not backwards.
That is not one-way traffic. To make a telnet connection, you have to send ...
- 471k
1
vote
Accepted
What type of NAT does iptables MASQUERADE implement?
In the example of Symmetric NAT from the linked question:
echo "1" >/proc/sys/net/ipv4/ip_forward
iptables --flush
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE --random
iptables -...
- 8,759
1
vote
How to allow only one way traffic with wireguard
The solution based on grawity_u1686's insights:
Iptables:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
11 ...
- 13
1
vote
Any updates ways to block wildcard outgoing traffic to a domain?
I would personally install unbound have these blocked on a DNS level by returning a NX ... that would require to have localhost as your only resolver and block queries to external DNS servers as well. ...
- 1,672
Only top scored, non community-wiki answers of a minimum length are eligible