From dcb581b4dc77900e3b49c96e68deab27eee9ecda Mon Sep 17 00:00:00 2001
From: Alexandr Podgorniy <scaled@scaledteam.ru>
Date: Fri, 31 Oct 2025 18:58:13 +0500
Subject: [PATCH] =?UTF-8?q?=D0=94=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=20=D1=84=D0=B8=D0=BB=D1=8C=D1=82=D1=80=20=D0=BF=D0=BE=20?=
 =?UTF-8?q?LAN=20=D0=B8=D0=BD=D1=82=D0=B5=D1=84=D1=80=D0=B5=D0=B9=D1=81?=
 =?UTF-8?q?=D1=83?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 common/nft.sh         | 2 +-
 init.d/sysv/functions | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/common/nft.sh b/common/nft.sh
index 57697c7c..e52cbee6 100644
--- a/common/nft.sh
+++ b/common/nft.sh
@@ -474,7 +474,7 @@ _nft_fw_nfqws_post4()
 	[ "$DISABLE_IPV4" = "1" -o -z "$1" ] || {
 		local filter="$1" port="$2" rule chain=$(get_postchain) setmark
 		nft_print_op "$filter" "nfqws postrouting (qnum $port)" 4
-		rule="${3:+oifname @wanif} $(nft_mark_filter) $filter ip daddr != @nozapret"
+		rule="${3:+oifname @wanif} ${4:+iifname @lanif} $(nft_mark_filter) $filter ip daddr != @nozapret"
 		is_postnat && setmark="meta mark set meta mark or $DESYNC_MARK_POSTNAT"
 		nft_insert_rule $chain $rule $setmark $CONNMARKER $FW_EXTRA_POST queue num $port bypass
 		nft_add_nfqws_flow_exempt_rule "$rule"
diff --git a/init.d/sysv/functions b/init.d/sysv/functions
index 59e488ee..103715d7 100644
--- a/init.d/sysv/functions
+++ b/init.d/sysv/functions
@@ -133,7 +133,7 @@ nft_fw_tpws6()
 }
 nft_fw_nfqws_post4()
 {
-	_nft_fw_nfqws_post4 "$1" $2 "$IFACE_WAN"
+	_nft_fw_nfqws_post4 "$1" $2 "$IFACE_WAN" "$IFACE_LAN"
 }
 nft_fw_nfqws_post6()
 {