Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to access local network #1

Open
declanshanaghy opened this issue Feb 26, 2021 · 1 comment
Open

Unable to access local network #1

declanshanaghy opened this issue Feb 26, 2021 · 1 comment

Comments

@declanshanaghy
Copy link

declanshanaghy commented Feb 26, 2021

Hey, thanks so much for sharing this it helped me out soooo much. You should add one of those "Buy me a beer links" ;-P

I realize you probably didn't want to sign yourself up for IT support for any random person on github, 🤣 but would you mind sharing any pointers on something I'm doing wrong here? 🍻

My local network is not available within the network. I updated the LOCAL_IPS to my subnet which is 192.168.1.0/24 but that didn't fix it.

I was playing around and decided to add add a route to the local net just to see. When i did that I was able to ping the local IPs that the container is running on. But still can't reach anywhere else.

Here's the diff on my fork that Im running:
24427b1...declanshanaghy:b1469c390e86e9b9cf2338b1ed5d404eb63677dc

@nolar
Copy link
Owner

nolar commented Apr 10, 2021

Hello. Sorry for the late response — I somehow missed the notification email.

Can you please clarify what do you mean by "anywhere else"? The solution intentionally bans "anywhere else" going not via the tunnel interface in the iptables rules, and only allows local & special IPs here:

# Special-purpose addresses, DNS resolvers, VPN servers (initial connections).
for ip in ${NS} ${SPECIAL_IPS} ${ALLOWED_IPS}; do
iptables -A OUTPUT -d "$ip" -j ACCEPT
done

Try playing with SPECIAL_IPS.

Or extend LOCAL_IPS to be something like LOCAL_IPS: "192.168.0.0/16 172.16.0.0/12 10.0.0.0/8" if you want incoming connections too.

A beer-link feature is now provided by GitHub as one-time donations ;-) https://github.com/sponsors/nolar?frequency=one-time

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants