nigger/lixonet-ee
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update tinc-up.tmpl

Browse Source
This commit is contained in:
sump pump 2020-06-12 22:58:53 +00:00
parent 6c8779b8ea
commit 216e72b7bf
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
tinc/tinc-up.tmpl
View File

@ -5,3 +5,6 @@ ifconfig \$INTERFACE ${tinc_peer_address} netmask ${netmask:-255.255.255.0}
iptables -A FORWARD -o \$INTERFACE -d ${network_address}/${global_prefix:-16} -j ACCEPT
{{ if len "${bgp_routes:-}" }}{{ range "$bgp_routes" | split "," }}iptables -A FORWARD -o ${internal_interface:-eth0} -d {{.}} -j ACCEPT
{{ end }}{{ end }}
# Prevent spoofing attacks
iptables -A FORWARD -i \$INTERFACE -s ! ${network_address}/${global_prefix:-16} -j DROP