Fix of issue #5, more explicit iptables rules, release 0.1.5

Author: AndrianBdn

Makefile

@@ -1,4 +1,4 @@
-VERSION=0.1.4
+VERSION=0.1.5
 BUILD=`git rev-parse --short=8 HEAD`
 .PHONY: all fmt static precommit arm64 amd64 fmt static test release release_dir
 

README.md

@@ -29,10 +29,10 @@ Make sure you have WireGuard and iptables installed
 To download using curl run:
 ```shell
 # for x86_64 
-curl -SL https://github.com/andrianbdn/wg-cmd/releases/download/v0.1.4/wg-cmd-0.1.4-linux-amd64 -o /usr/local/bin/wg-cmd
+curl -SL https://github.com/andrianbdn/wg-cmd/releases/download/v0.1.5/wg-cmd-0.1.4-linux-amd64 -o /usr/local/bin/wg-cmd
 
 # for arm64 
-curl -SL https://github.com/andrianbdn/wg-cmd/releases/download/v0.1.4/wg-cmd-0.1.4-linux-arm64 -o /usr/local/bin/wg-cmd
+curl -SL https://github.com/andrianbdn/wg-cmd/releases/download/v0.1.5/wg-cmd-0.1.4-linux-arm64 -o /usr/local/bin/wg-cmd
 ```
 
 Set proper permissions and run the tool: 
@@ -169,6 +169,7 @@ It was tested on:
 - Ubuntu 22.04
 - Rocky Linux 9
 - Debian 11
+- Debian 12
 
 # Notes 
 There is no commercial purpose behind WG Commander. 

backend/server.go

@@ -80,17 +80,34 @@ func NewServerWithBlueprint(b ServerBlueprint) *Server {
 
 	if b.Nat4 {
 		s.PostUp4 = fmt.Sprintf("iptables -A FORWARD -i %s -j ACCEPT; "+
-			"iptables -t nat -A POSTROUTING -o %s -j MASQUERADE", b.InterfaceName, sysinfo.DefaultIP4Interface())
+			"iptables -A FORWARD -o %s -j ACCEPT; "+
+			"iptables -t nat -A POSTROUTING -o %s -j MASQUERADE",
+			b.InterfaceName,
+			b.InterfaceName,
+			sysinfo.DefaultIP4Interface())
 
 		s.PostDown4 = fmt.Sprintf("iptables -D FORWARD -i %s -j ACCEPT; "+
-			"iptables -t nat -D POSTROUTING -o %s -j MASQUERADE", b.InterfaceName, sysinfo.DefaultIP4Interface())
+			"iptables -D FORWARD -o %s -j ACCEPT; "+
+			"iptables -t nat -D POSTROUTING -o %s -j MASQUERADE",
+			b.InterfaceName,
+			b.InterfaceName,
+			sysinfo.DefaultIP4Interface())
 	}
 
 	if b.Nat6 {
 		s.PostUp6 = fmt.Sprintf("ip6tables -A FORWARD -i %s -j ACCEPT; "+
-			"ip6tables -t nat -A POSTROUTING -o %s -j MASQUERADE", b.InterfaceName, sysinfo.DefaultIP6Interface())
+			"ip6tables -A FORWARD -o %s -j ACCEPT; "+
+			"ip6tables -t nat -A POSTROUTING -o %s -j MASQUERADE",
+			b.InterfaceName,
+			b.InterfaceName,
+			sysinfo.DefaultIP6Interface())
+
 		s.PostDown6 = fmt.Sprintf("ip6tables -D FORWARD -i %s -j ACCEPT; "+
-			"ip6tables -t nat -D POSTROUTING -o %s -j MASQUERADE", b.InterfaceName, sysinfo.DefaultIP6Interface())
+			"ip6tables -D FORWARD -o %s -j ACCEPT; "+
+			"ip6tables -t nat -D POSTROUTING -o %s -j MASQUERADE",
+			b.InterfaceName,
+			b.InterfaceName,
+			sysinfo.DefaultIP6Interface())
 	}
 
 	if b.Nat4 {