diff --git a/roles/nftables_router/templates/nftables.d/60-nat.conf.j2 b/roles/nftables_router/templates/nftables.d/60-nat.conf.j2 index 6e4fe12..6c8e0a6 100644 --- a/roles/nftables_router/templates/nftables.d/60-nat.conf.j2 +++ b/roles/nftables_router/templates/nftables.d/60-nat.conf.j2 @@ -15,10 +15,10 @@ table ip nat { } chain postrouting { - type nat hook prerouting priority 100 + type nat hook postrouting priority 100 policy accept - # oifname $wan_iface goto snat_to_wan + oifname $wan_iface goto snat_to_wan } }