diff options
| author | Niklas Yann Wettengel <niyawe@niyawe.de> | 2018-03-15 14:09:20 +0100 |
|---|---|---|
| committer | Niklas Yann Wettengel <niyawe@niyawe.de> | 2018-03-15 14:09:20 +0100 |
| commit | ad992a78dd732e40981bd89ea153a0707560a4ef (patch) | |
| tree | 8189c94c7f408b47d552a91579d2645dffc4a9dd /roles/configure_iptables/templates/ip6tables.rules | |
| parent | c216adad03b74dbf954b0b2ed0c615a25f00e1ea (diff) | |
set wireguard backbone mtu to 1280
Diffstat (limited to 'roles/configure_iptables/templates/ip6tables.rules')
| -rw-r--r-- | roles/configure_iptables/templates/ip6tables.rules | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/roles/configure_iptables/templates/ip6tables.rules b/roles/configure_iptables/templates/ip6tables.rules index 3b3bd03..c0ec379 100644 --- a/roles/configure_iptables/templates/ip6tables.rules +++ b/roles/configure_iptables/templates/ip6tables.rules @@ -87,12 +87,8 @@ COMMIT {% endfor %} {% endif %} -A FORWARD -o {{ ansible_default_ipv6.interface }} -j REJECT -{% if 'ffrl_uplink' in group_names %} -{% for peer in ffrl_peers %} --A FORWARD -i {{ peer.name }} -d 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu --A FORWARD -o {{ peer.name }} -s 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu -{% endfor %} -{% endif %} +-A FORWARD -d 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu +-A FORWARD -s 2a03:2260:1016::/48 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu COMMIT *nat :PREROUTING ACCEPT [0:0] |