-we need ip forwarding on bridges

1 files changed, 4 insertions, 3 deletions

diff --git a/contrib/netjail/netjail_core.sh b/contrib/netjail/netjail_core.sh
index da784fa5e..5e4fb39f1 100755
--- a/contrib/netjail/netjail_core.sh
+++ b/contrib/netjail/netjail_core.sh
@@ -188,9 +188,10 @@ netjail_node_add_nat() {
         local ADDRESS=$2
         local MASK=$3
 
-    ip netns exec $NODE nft add table nat
-    ip netns exec $NODE nft add chain nat postrouting { type nat hook postrouting priority 0 \; }
-    ip netns exec $NODE nft add rule ip nat postrouting ip saddr "$ADDRESS/$MASK" counter masquerade
+  ip netns exec $NODE sysctl -w net.ipv4.ip_forward=1
+  ip netns exec $NODE nft add table nat
+  ip netns exec $NODE nft add chain nat postrouting { type nat hook postrouting priority 0 \; }
+  ip netns exec $NODE nft add rule ip nat postrouting ip saddr "$ADDRESS/$MASK" counter masquerade
         # ip netns exec $NODE iptables -t nat -A POSTROUTING -s "$ADDRESS/$MASK" -j MASQUERADE
 }