# Strefa WireGuard
config zone
    option name 'wg'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'
    list network 'wg_home'

# Forwardowanie LAN <-> WG
config forwarding
    option src 'wg'
    option dest 'lan'

config forwarding
    option src 'lan'
    option dest 'wg'

# IPTV / Multicast
config rule
    option name 'Allow-IGMP'
    option src 'wan'
    option proto 'igmp'
    option target 'ACCEPT'

config rule
    option name 'Allow-UDP-Multicast'
    option src 'wan'
    option proto 'udp'
    option dest_port '1024-65535'
    option target 'ACCEPT'

# Port forwarding: Minecraft, Rust, DayZ
config redirect
    option name 'Minecraft_25565'
    option src 'wan'
    option src_dport '25565'
    option dest 'wg'
    option dest_ip '10.10.10.2'
    option dest_port '25565'
    option proto 'tcp'
    option target 'DNAT'

config redirect
    option name 'Rust_Range'
    option src 'wan'
    option src_dport '2700-2899'
    option dest 'wg'
    option dest_ip '10.10.10.2'
    option dest_port '2700-2899'
    option proto 'tcp udp'
    option target 'DNAT'

config redirect
    option name 'DayZ_Range'
    option src 'wan'
    option src_dport '2302-2305'
    option dest 'wg'
    option dest_ip '10.10.10.2'
    option dest_port '2302-2305'
    option proto 'udp'
    option target 'DNAT'
