search

netbirdio / netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
11.07k stars 509 forks source link

Question: Block internal DNS #2355

Open sahara101 opened 3 months ago

sahara101 commented 3 months ago

Hello!

I have an exit node defined. Is there a way to use it only for the internet traffic and block the LAN access to it? I tried with an access control where I blocked my DNS IP, 192.168.1.172/32, but it still works. My iPhone and the exit node are both in a group called exit. I added DNS for it as 8.8.8.8. Thanks!

lixmal commented 3 months ago

Currently, there's nothing built-in, but you could add custom iptables/nftables rules to block traffic from the netbird interface that targets any of your LAN networks

sahara101 commented 3 months ago

Thank you