Skip to content

Commit

Permalink
doc: correct a statement in use-case
Browse files Browse the repository at this point in the history
[no ci]
  • Loading branch information
EHfive committed Nov 19, 2024
1 parent 32535f0 commit 277536e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/guide/use-case.md
Original file line number Diff line number Diff line change
Expand Up @@ -118,4 +118,4 @@ $ sudo einat -i eth0 --nat44 --ports 20000-29999 --hairpin-if wg0 --internal <wg

You might also want to enable NAT66 for IPv6 with `--nat66` flag if you assign private IPv6 addresses instead of public IPv6 addresses to WireGuard peers.

Note if you don't specify internal source addresses with `--internal` and you are hosting TCP/UDP services on the same server, you might want to tweak external ports that `einat` uses so inbound initiated traffic towards unoccupied external ports are accepted. For example, the listening port of WireGuard service should not in range of external ports that `einat` uses(e.g. the default 20000-29999), tweak the port setting of either `einat` or WireGuard so inbound initiated traffic toward WireGuard service are accepted without filtering by `einat`.
Note if you are hosting TCP/UDP services on same server, you might want to tweak external ports that `einat` uses so inbound initiated traffic towards unoccupied external ports are accepted. For example, the listening port of WireGuard service should not in range of external ports that `einat` uses(e.g. the default 20000-29999), tweak the port setting of either `einat` or WireGuard so inbound initiated traffic toward WireGuard service are accepted without filtering by `einat`.

0 comments on commit 277536e

Please sign in to comment.