nigger/lixonet-ee
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update tinc-down.tmpl

Browse Source
This commit is contained in:
sump pump 2020-06-12 23:13:06 +00:00
parent 7c742d4a4e
commit a5df69d19a
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
tinc/tinc-down.tmpl
View File

@ -4,3 +4,8 @@
iptables -D FORWARD -o \$INTERFACE -d ${network_address}/${global_prefix:-16} -j ACCEPT
{{ if len "${bgp_routes:-}" }}{{ range "$bgp_routes" | split "," }}iptables -D FORWARD -o ${internal_interface:-eth0} -d {{.}} -j ACCEPT
{{ end }}{{ end }}
# Prevent spoofing attacks
iptables -D FORWARD -i \$INTERFACE -s ! ${network_address}/${global_prefix:-16} -j DROP
{{ if len "${bgp_routes:-}" }}{{ range "$bgp_routes" | split "," }}iptables -D FORWARD -i \$INTERFACE -s {{.}} -j DROP
{{ end }}{{ end }}