Changed Postup and Postdown script to drop traffic between the peers.

[mzs114]

Two new iptable rules were added, one to drop the traffic between the peers and another to clean this drop rule when the interface goes down.

Edit: These are required to enhance the security by avoiding the traffic between the peers.

[donaldzou]

Hi @NOXCIS , do you mind look over this please?

[NOXCIS]

@donaldzou The iptables scripts are just defaults a user can modfiy to their needs. No need to implimnet someones specific use case.

[DaanSelen]

@mzs114 is this not like the rules PostUp = iptables -I FORWARD -i wg0 -o wg0 -j DROP? Which disallows peers to talk to eachother?

[mzs114]

@mzs114 is this not like the rules PostUp = iptables -I FORWARD -i wg0 -o wg0 -j DROP? Which disallows peers to talk to eachother?

Yes these are the same, as these were missing in the scripts.

@NOXCIS There exists some preset rules, this is adding a new rule(and another one to remove).
A sane default helps the users, advanced users anyways will be customizing.

[DaanSelen]

Hi @mzs114 is this not done with the new code?

[mzs114]

Hi @mzs114 is this not done with the new code?

Not sure which code or version you are referring to? I mean these changes were not merged, so this is still pending? The reason for this PR is to include such rule in the given scripts.