mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-03-09 15:40:03 +00:00
Code Issues Releases Wiki Activity

Add ipsec support

Browse source
This commit is contained in:
Ycarus (Yannick Chabanois) 2020-01-24 21:04:26 +01:00
parent 62a2f4ff7f
commit bf4ee2cc5e
13 changed files with 690 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

54
luci-app-ipsec-vpnd/root/etc/uci-defaults/ipsec Normal file
View file

@ -0,0 +1,54 @@
#!/bin/sh
uci -q batch <<-EOF >/dev/null
delete firewall.ipsecd
set firewall.ipsecd=include
set firewall.ipsecd.type=script
set firewall.ipsecd.path=/etc/ipsec.include
set firewall.ipsecd.reload=1
commit firewall
EOF
uci -q batch <<-EOF >/dev/null
delete firewall.ike
add firewall rule
rename firewall.@rule[-1]="ike"
set firewall.@rule[-1].name="ike"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].proto="udp"
set firewall.@rule[-1].dest_port="500"
delete firewall.ipsec
add firewall rule
rename firewall.@rule[-1]="ipsec"
set firewall.@rule[-1].name="ipsec"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].proto="udp"
set firewall.@rule[-1].dest_port="4500"
delete firewall.ah
add firewall rule
rename firewall.@rule[-1]="ah"
set firewall.@rule[-1].name="ah"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].proto="ah"
delete firewall.esp
add firewall rule
rename firewall.@rule[-1]="esp"
set firewall.@rule[-1].name="esp"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].proto="esp"
commit firewall
EOF
uci -q batch <<-EOF >/dev/null
delete ucitrack.@ipsec[-1]
add ucitrack ipsec
set ucitrack.@ipsec[-1].init=ipsec
commit ucitrack
EOF
rm -f /tmp/luci-indexcache
exit 0