diff --git a/ip6t-firewall-gateway b/ip6t-firewall-gateway index f54cdfe..e44f1d5 100755 --- a/ip6t-firewall-gateway +++ b/ip6t-firewall-gateway @@ -936,9 +936,11 @@ echo_done echononl "\tPermit all traffic through WireGuard lines.." for _wg_if in ${wg_if_arr[@]} ; do $ip6t -A INPUT -i $_wg_if -m conntrack --ctstate NEW -j ACCEPT + $ip6t -A OUTPUT -o $_wg_if -m conntrack --ctstate NEW -j ACCEPT if $kernel_forward_between_interfaces ; then for _local_dev in ${local_if_arr[@]} ; do $ip6t -A FORWARD -i $_wg_if -o $_local_dev -m conntrack --ctstate NEW -j ACCEPT + $ip6t -A FORWARD -i $_local_dev -o $_wg_if -m conntrack --ctstate NEW -j ACCEPT done fi done diff --git a/ipt-firewall-gateway b/ipt-firewall-gateway index 8538615..e5d1292 100755 --- a/ipt-firewall-gateway +++ b/ipt-firewall-gateway @@ -1571,9 +1571,11 @@ echo_done echononl "\tPermit all traffic through WireGuard lines.." for _wg_if in ${wg_if_arr[@]} ; do $ipt -A INPUT -i $_wg_if -m conntrack --ctstate NEW -j ACCEPT + $ipt -A OUTPUT -o $_wg_if -m conntrack --ctstate NEW -j ACCEPT if $kernel_activate_forwarding ; then for _local_dev in ${local_if_arr[@]} ; do $ipt -A FORWARD -i $_wg_if -o $_local_dev -m conntrack --ctstate NEW -j ACCEPT + $ipt -A FORWARD -i $_local_dev -o $_wg_if -m conntrack --ctstate NEW -j ACCEPT done fi done