allow management (unifi) to contact the outside world

1 files changed, 6 insertions, 0 deletions

diff --git a/src/main.rs b/src/main.rs
index 003f480..9025f11 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -133,6 +133,12 @@ fn filter() -> Result<()> {
     let allow_established = Rule::new(&forward)?.established()?.accept();
     batch.add(&allow_established, MsgType::Add);
 
+    let allow_mgmt_to_wan4 = Rule::new(&forward)?
+        .iface("eth0")?
+        .oface("rsppp0")?
+        .accept();
+    batch.add(&allow_mgmt_to_wan4, MsgType::Add);
+
     let allow_trusted_to_wan4 = Rule::new(&forward)?
         .iface("eth0.10")?
         .oface("rsppp0")?