mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-03-09 15:40:03 +00:00
Code Issues Releases Wiki Activity

Update DSVPN

Browse source
This commit is contained in:
Ycarus (Yannick Chabanois) 2019-12-06 20:01:10 +01:00
parent a66d365cc0
commit 956d791ea4
3 changed files with 38 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

64
dsvpn/patches/nofirewall.patch
View file

@ -1,8 +1,6 @@
diff --git a/src/os.c b/src/os.c
index d5e4482..ee525aa 100644
--- a/src/os.c
+++ b/src/os.c
@@ -445,20 +445,25 @@ Cmds firewall_rules_cmds(int is_server)
--- a/src/os.c 2019-12-06 19:49:50.323898270 +0100
+++ b/src/os.c 2019-12-06 19:54:20.987206244 +0100
@@ -445,24 +445,28 @@
#ifdef __linux__
static const char
*set_cmds[] =
@ -13,6 +11,8 @@ index d5e4482..ee525aa 100644
"ip link set dev $IF_NAME up",
+#ifndef NO_DEFAULT_FIREWALL
+ "sysctl net.ipv4.ip_forward=1",
"iptables -t raw -I PREROUTING ! -i $IF_NAME -d $LOCAL_TUN_IP -m addrtype ! "
"--src-type LOCAL -j DROP",
"iptables -t nat -A POSTROUTING -o $EXT_IF_NAME -s $REMOTE_TUN_IP -j MASQUERADE",
"iptables -t filter -A FORWARD -i $EXT_IF_NAME -o $IF_NAME -m state --state "
"RELATED,ESTABLISHED -j ACCEPT",
@ -24,38 +24,42 @@ index d5e4482..ee525aa 100644
"iptables -t nat -D POSTROUTING -o $EXT_IF_NAME -s $REMOTE_TUN_IP -j MASQUERADE",
"iptables -t filter -D FORWARD -i $EXT_IF_NAME -o $IF_NAME -m state --state "
"RELATED,ESTABLISHED -j ACCEPT",
- "iptables -t filter -D FORWARD -i $IF_NAME -o $EXT_IF_NAME -j ACCEPT", NULL
+ "iptables -t filter -D FORWARD -i $IF_NAME -o $EXT_IF_NAME -j ACCEPT",
"iptables -t filter -D FORWARD -i $IF_NAME -o $EXT_IF_NAME -j ACCEPT",
"iptables -t raw -D PREROUTING ! -i $IF_NAME -d $LOCAL_TUN_IP -m addrtype ! "
"--src-type LOCAL -j DROP",
+#endif
+ NULL
NULL
};
#elif defined(__APPLE__) || defined(__OpenBSD__) || defined(__FreeBSD__) || \
defined(__DragonFly__) || defined(__NetBSD__)
@@ -492,7 +497,10 @@ Cmds firewall_rules_cmds(int is_server)
};
@@ -503,12 +507,17 @@
#elif defined(__linux__)
static const char
- *set_cmds[] = { "sysctl net.ipv4.tcp_congestion_control=bbr",
+ *set_cmds[] = {
*set_cmds[] =
- { "sysctl net.ipv4.tcp_congestion_control=bbr",
+ {
+#ifndef NO_DEFAULT_CONGESTION
+ "sysctl net.ipv4.tcp_congestion_control=bbr",
+ "sysctl net.ipv4.tcp_congestion_control=bbr",
+#endif
"ip link set dev $IF_NAME up",
"ip addr add $LOCAL_TUN_IP peer $REMOTE_TUN_IP dev $IF_NAME",
"ip -6 addr add $LOCAL_TUN_IP6 peer $REMOTE_TUN_IP6/96 dev $IF_NAME",
@@ -505,9 +513,13 @@ Cmds firewall_rules_cmds(int is_server)
"ip -6 rule add table main suppress_prefixlength 0",
"ip link set dev $IF_NAME up",
- "iptables -t raw -I PREROUTING ! -i $IF_NAME -d $LOCAL_TUN_IP -m addrtype ! "
- "--src-type LOCAL -j DROP",
"ip addr add $LOCAL_TUN_IP peer $REMOTE_TUN_IP dev $IF_NAME",
"ip -6 addr add $LOCAL_TUN_IP6 peer $REMOTE_TUN_IP6/96 dev $IF_NAME",
+#ifndef NO_DEFAULT_FIREWALL
+ "iptables -t raw -I PREROUTING ! -i $IF_NAME -d $LOCAL_TUN_IP -m addrtype ! "
+ "--src-type LOCAL -j DROP",
+#endif
#ifndef NO_DEFAULT_ROUTES
"ip route add default dev $IF_NAME table 42069",
"ip -6 route add default dev $IF_NAME table 42069",
@@ -525,8 +534,10 @@
"ip rule delete table main suppress_prefixlength 0",
"ip -6 rule delete table main suppress_prefixlength 0",
#endif
NULL },
- *unset_cmds[] = { "ip rule delete table 42069", "ip -6 rule delete table 42069",
+ *unset_cmds[] = {
+#ifndef NO_DEFAULT_ROUTES
+ "ip rule delete table 42069", "ip -6 rule delete table 42069",
"ip rule delete table main suppress_prefixlength 0",
- "ip -6 rule delete table main suppress_prefixlength 0", NULL };
+ "ip -6 rule delete table main suppress_prefixlength 0",
+#ifndef NO_DEFAULT_FIREWALL
"iptables -t raw -D PREROUTING ! -i $IF_NAME -d $LOCAL_TUN_IP -m addrtype ! "
"--src-type LOCAL -j DROP",
+#endif
+ NULL };
NULL
};
#else
static const char *const *set_cmds = NULL, *const *unset_cmds = NULL;
#endif