1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-vps.git synced 2025-03-09 15:50:00 +00:00

Add 6in4 support

This commit is contained in:
Ycarus (Yannick Chabanois) 2018-05-04 06:28:28 +00:00
parent a4b8cebbd1
commit dcf20947f2
13 changed files with 142 additions and 17 deletions

View file

@ -14,6 +14,6 @@
?FORMAT 2
###############################################################################
#ZONE INTERFACE OPTIONS
net eth0 dhcp,tcpflags,nosmurfs,sourceroute=0
vpn gt-tun0 nosmurfs,tcpflags
net eth0 dhcp,tcpflags,rpfilter,forward=1
vpn omr-6in4 tcpflags,forward=1

View file

@ -13,10 +13,8 @@
###############################################################################
#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
vpn net ACCEPT
vpn fw ACCEPT
fw vpn ACCEPT
fw net ACCEPT
vpn all ACCEPT info
fw all ACCEPT
net all DROP info
# THE FOLLOWING POLICY MUST BE LAST
all all REJECT info

View file

@ -31,6 +31,7 @@ DNS(ACCEPT) $FW net
# Allow Ping from/to the VPN
#
Ping(ACCEPT) vpn $FW
Ping(ACCEPT) vpn net
Ping(ACCEPT) $FW vpn
#
# Allow Ping from the firewall to the network

21
shorewall6/snat Normal file
View file

@ -0,0 +1,21 @@
#
# Shorewall - Sample SNAT/Masqueradee File for two-interface configuration.
# Copyright (C) 2006-2016 by the Shorewall Team
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# See the file README.txt for further details.
#------------------------------------------------------------------------------
# For information about entries in this file, type "man shorewall-snat"
#
# See http://shorewall.net/manpages/shorewall-snat.html for more information
###########################################################################################################################################
#ACTION SOURCE DEST PROTO PORT IPSEC MARK USER SWITCH ORIGDEST PROBABILITY
#
MASQUERADE fe80::/10,\
fd00::/8 eth0
# SNAT from VPN server for all VPN clients
SNAT(fe80::a00:1) ::/0 omr-6in4

View file

@ -13,6 +13,6 @@
###############################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE
# PORT(S) PORT(S)
ACCEPT gt-tun0 -
ACCEPT - gt-tun0
ACCEPT omr-6in4 -
ACCEPT - omr-6in4