summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNiklas Yann Wettengel <niyawe@niyawe.de>2018-06-08 16:59:35 +0200
committerNiklas Yann Wettengel <niyawe@niyawe.de>2018-06-08 16:59:35 +0200
commit4bfc6f1e293c2022d5238c1c09db130d80eea94d (patch)
tree5df9c325e8b91acd076677b11b18618fe96d0125
parent587d37b5f12d59b26e2b9291a18287a35e9abea8 (diff)
added whitelist for uplinks
-rw-r--r--roles/install_babeld/templates/babeld.conf.j26
1 files changed, 5 insertions, 1 deletions
diff --git a/roles/install_babeld/templates/babeld.conf.j2 b/roles/install_babeld/templates/babeld.conf.j2
index fbf7e30..4651b2f 100644
--- a/roles/install_babeld/templates/babeld.conf.j2
+++ b/roles/install_babeld/templates/babeld.conf.j2
@@ -38,7 +38,11 @@ reflect-kernel-metric true
# Filtering rules.
{% if 'uplink' in group_names %}
-in le 0 deny # ignore default routes on uplinks
+in ip 10.222.0.0/16 allow
+in ip 2a03:2260:1016::/48 allow
+in ip 2003:46:e028::/48 allow # finzelberg
+in ip fd62:44e1:da::/48 allow
+in deny # ignore default routes on uplinks
{% endif %}
{% if 'mullvad_uplink' in group_names %}