mptcp/openmptcprouter-vps
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-vps.git synced 2025-03-09 15:50:00 +00:00
Code Issues Releases Wiki Activity

Push latest scripts changes

Browse source
This commit is contained in:
Ycarus (Yannick Chabanois) 2022-08-09 18:36:09 +00:00
parent 2b5afea3a1
commit 4fbb8d08f3
10 changed files with 108 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

1
shorewall4/interfaces
View file

@ -20,6 +20,7 @@ vpn gt-udp-tun+ nosmurfs,tcpflags
vpn mlvpn+ nosmurfs,tcpflags
vpn tun+ nosmurfs,tcpflags
vpn wg+ nosmurfs,tcpflags
vpncl client-wg+ nosmurfs,tcpflags
vpn dsvpn+ nosmurfs,tcpflags
vpn gre-user+ nosmurfs,tcpflags
vpn omr-bonding nosmurfs,tcpflags

2
shorewall4/policy
View file

@ -19,6 +19,8 @@ fw vpn ACCEPT
fw net ACCEPT
net all DROP
vpn vpn DROP
vpncl vpn ACCEPT
vpn vpncl ACCEPT
# THE FOLLOWING POLICY MUST BE LAST
all all REJECT

10
shorewall4/shorewall.conf
View file

@ -137,7 +137,7 @@ ADMINISABSENTMINDED=Yes
AUTOCOMMENT=Yes
AUTOHELPERS=Yes
AUTOHELPERS=No
AUTOMAKE=No
@ -149,13 +149,13 @@ BLACKLIST="NEW,INVALID,UNTRACKED"
CLAMPMSS=No
CLEAR_TC=Yes
CLEAR_TC=No
COMPLETE=No
DEFER_DNS_RESOLUTION=Yes
DELETE_THEN_ADD=Yes
DELETE_THEN_ADD=No
DETECT_DNAT_IPADDRS=No
@ -163,7 +163,7 @@ DISABLE_IPV6=No
DOCKER=No
DONT_LOAD=
DONT_LOAD=nf_conntrack_sip
DYNAMIC_BLACKLIST=Yes
@ -233,7 +233,7 @@ SAVE_ARPTABLES=No
SAVE_IPSETS=No
TC_ENABLED=Simple
TC_ENABLED=No
TC_EXPERT=No

2
shorewall4/stoppedrules
View file

@ -25,4 +25,6 @@ ACCEPT tun+ -
ACCEPT - tun+
ACCEPT wg+ -
ACCEPT - wg+
ACCEPT client-wg+ -
ACCEPT - client-wg+

2
shorewall4/tcinterfaces
View file

@ -1,3 +1,3 @@
#INTERFACE TYPE IN-BANDWIDTH OUT-BANDWIDTH
$NET_IFACE External
$VPS_IFACE Internal
#$VPS_IFACE Internal

1
shorewall4/zones
View file

@ -16,4 +16,5 @@
fw firewall
net ipv4
vpn ipv4
vpncl ipv4