ANSWERED Unable to FORWARD traffic from an interface to Eddie interface when -netlock=True

[qwertyuiopas 0]

Hi all,

I have a setup where I need to forward traffic from an interface (let's say eth1, with ip 192.168.1.1) to the "Eddie" interface when -netlock=True. After the Eddie interface was up, I set these rule:

iptables -t nat -A POSTROUTING -o Eddie -j MASQUERADE
iptables -A FORWARD -i eth1 -o Eddie -j ACCEPT

It works with netlock off. This setup works on Wireguard environment (wg-quick), but not with eddie. When pinging from the subnet (192.168.1.0/24), I get

Quote

ping: google.com: Temporary failure in name resolution

whenever netlock is on.

Is there any other particular rules I needed?
Much appreciate any help, thanks. Edited ... by qwertyuiopas

[qwertyuiopas 0]

I found the fix, seems like eddie added a drop rule to forward table, and appending the rule obviously takes lower priority. For future references, use -I instead of -A:

iptables -I FORWARD -i eth1 -o Eddie -j ACCEPT