alexz 0dca06fbc8 Fix host routing: use nft for NAT, insert FORWARD rules before Cisco chains ...

- host-routing.sh: Use nft instead of iptables for NAT masquerade
  (iptables-nft backend doesn't support iptables -t nat commands)
- cisco-vpn: Use -I FORWARD 1 instead of -A FORWARD to insert rules
  BEFORE Cisco VPN chains (which have catch-all DROP rules)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-17 09:21:09 +00:00

4.1 KiB

Raw Blame History

View Raw