Allow VoIP access Exposed -> Trusted

1 files changed, 7 insertions, 9 deletions

diff --git a/src/main.rs b/src/main.rs
index 895e0c1..1436a5f 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -296,6 +296,13 @@ fn filter() -> Result<()> {
         .accept();
     batch.add(&allow_exposed_to_wan6in4, MsgType::Add);
 
+    let allow_exposed_to_trusted_sip = Rule::new(&forward)?
+        .iface("eth0.40")?
+        .oface("eth0.10")?
+        .dport(5060, Protocol::UDP)
+        .accept();
+    batch.add(&allow_exposed_to_trusted_sip, MsgType::Add);
+
     let allow_exposed_to_vpn_sip = Rule::new(&forward)?
         .iface("eth0.40")?
         .oface("wg0")?
@@ -303,15 +310,6 @@ fn filter() -> Result<()> {
         .accept();
     batch.add(&allow_exposed_to_vpn_sip, MsgType::Add);
 
-    for port in 16384..=16482 {
-        let allow_exposed_to_vpn_rtp = Rule::new(&forward)?
-            .iface("eth0.40")?
-            .oface("wg0")?
-            .dport(port, Protocol::UDP)
-            .accept();
-        batch.add(&allow_exposed_to_vpn_rtp, MsgType::Add);
-    }
-
     let allow_vpn_to_modem = Rule::new(&forward)?.iface("wg0")?.oface("eth1")?.accept();
     batch.add(&allow_vpn_to_modem, MsgType::Add);