From 799edff6643686197709935f1ea28ff8019ffa93 Mon Sep 17 00:00:00 2001
From: Vincent Li <vincent.mc.li@gmail.com>
Date: Wed, 25 Jun 2025 09:43:32 -0700
Subject: [PATCH] wireguard: Automatically open ports for WireGuard

commit fc32e7b9147d2eeeb6e2bc1497859fb050001eb5
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Tue Apr 16 16:20:55 2024 +0200

    firewall: Automatically open ports for WireGuard

    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
---
 src/initscripts/system/firewall | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 012d94ab2..9422ecf57 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -330,6 +330,10 @@ iptables_init() {
 	iptables -N WIRELESSFORWARD
 	iptables -A FORWARD -m conntrack --ctstate NEW -j WIRELESSFORWARD
 
+	# WireGuard
+	iptables -N WGINPUT
+	iptables -A INPUT -j WGINPUT
+
 	# OpenVPN
 	iptables -N OVPNINPUT
 	iptables -A INPUT -j OVPNINPUT