Allow UDP Hole punching and port forwarding between private LAN and Guests network via WAN

[fakuivan]

When setting up a guest network as indicated in the tutorials on the wiki, UDP hole punching (used for WebRTC, tailscale, zerotier and many other p2p protocols) between these two zones via WAN is non functional, including forwarded ports from WAN. Essentially anything that's Guests -> WAN -> LAN gets blocked.

Would it be possible to make it so that any rules that apply for WAN -> LAN also applies for Guests -> WAN -> LAN?

This seems to be related:

Create a Public Port Forward that still works from Guest LAN [SOLUTION]

I have a fairly simple setup, a LAN network, and a Guest Network. The Guest network can't access the LAN, but has internet access. I then have a Port Forward configured to a server on my LAN, that I also wanted to have work from the Guest Network. ie: if a guest user goes to "myserver.example.com" they should be able to get to the site just as if they were on the public internet. Using the LuCI interface, I couldn't get it it work, and from hours and hours of searching, I couldn't find a solu…

[vgaetera]

Access a public website from VLAN to LAN - #2 by vgaetera

[fakuivan]

Does this fix UDP hole punching between lan and guests?

[fakuivan]

Yup, doesn't solve UDP hole punching. This is only useful for port forwards