fixup! fix: add missing --on-ip equivalence in nft tproxy rules

springzfx · Jan 25, 2023 · a94c84b · a94c84b
1 parent 7594499
commit a94c84b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/nftables.sh b/nftables.sh
@@ -38,7 +38,8 @@ table inet cgproxy {
     chain tproxy_ent {
         # core
         socket wildcard 0 mark set $fwmark_tproxy accept
-        meta l4proto { tcp, udp } tproxy ip to 127.0.0.1:$port tproxy ip6 to [::1]:$port meta mark set $fwmark_tproxy
+        meta l4proto { tcp, udp } tproxy ip to 127.0.0.1:$port meta mark set $fwmark_tproxy
+        meta l4proto { tcp, udp } tproxy ip6 to [::1]:$port meta mark set $fwmark_tproxy
     }
 
     chain tproxy_pre {