net/wireguard: add a filter reload if something was reconfigured

PR: https://forum.opnsense.org/index.php?topic=37248.0
opnsense · Nov 29, 2023 · 7b94f91 · 7b94f91
1 parent 0b70e35
commit 7b94f91
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/net/wireguard/Makefile b/net/wireguard/Makefile
@@ -1,6 +1,6 @@
 PLUGIN_NAME=		wireguard
 PLUGIN_VERSION=		2.5
-PLUGIN_REVISION=	1
+PLUGIN_REVISION=	2
 PLUGIN_COMMENT=		WireGuard VPN service kernel implementation
 PLUGIN_DEPENDS=		wireguard-kmod
 PLUGIN_CONFLICTS=	wireguard-go

diff --git a/net/wireguard/pkg-descr b/net/wireguard/pkg-descr
@@ -20,6 +20,8 @@ Changelog
 
 * Fix error with empty tunnel address in instance (contributed by Monviech)
 * Switch "setconf" to "syncconf" on (re)configuration
+* Fix regression of UUID return in setClientAction()
+* Reload the packet filter after reconfiguration
 * Allow instance selection from peer
 * Use "syncconf" on newwanip event
 * CARP event handling improvements

diff --git a/net/wireguard/src/opnsense/scripts/Wireguard/wg-service-control.php b/net/wireguard/src/opnsense/scripts/Wireguard/wg-service-control.php
@@ -294,5 +294,9 @@ function get_stat_hash($fhandle)
             }
         }
     }
+
+    if (count($server_devs)) {
+        configd_run('filter reload'); /* XXX required for NAT rules, but needs coalescing */
+    }
 }
 closelog();