diff options
| author | Niklas Yann Wettengel <niyawe@niyawe.de> | 2018-01-25 18:10:43 +0100 |
|---|---|---|
| committer | Niklas Yann Wettengel <niyawe@niyawe.de> | 2018-01-25 18:10:43 +0100 |
| commit | 0e9d895e778b592bc9e823ee2a06e5b15dd638eb (patch) | |
| tree | c7eddf992b12ae5fdf01003bd75b90fe244ff35e /roles/configure_iptables/templates | |
| parent | 99dddff8625388641b9dd84b0e87a55f5c13bc82 (diff) | |
added mullvad uplink
Diffstat (limited to 'roles/configure_iptables/templates')
| -rw-r--r-- | roles/configure_iptables/templates/ip6tables.rules | 22 | ||||
| -rw-r--r-- | roles/configure_iptables/templates/iptables.rules | 14 |
2 files changed, 27 insertions, 9 deletions
diff --git a/roles/configure_iptables/templates/ip6tables.rules b/roles/configure_iptables/templates/ip6tables.rules index 0f31387..913ac7c 100644 --- a/roles/configure_iptables/templates/ip6tables.rules +++ b/roles/configure_iptables/templates/ip6tables.rules @@ -10,13 +10,18 @@ {% endfor %} {% endif %} -{% if 'ffrl_uplink' in group_names %} +{% if 'fastd' in group_names %} +{% for peer in groups['ffrl_uplink'] %} +-A PREROUTING -i bb{{ hostvars[peer]['wireguard_bb_name'] }} ! -s fe80::/64 ! -d fe80::/64 -j MARK --set-xmark 0x1/0xffffffff +{% endfor %} +{% endif %} +{% if 'mullvad_uplink' in group_names %} {% for peer in groups['fastd'] %} -A PREROUTING -i bb{{ hostvars[peer]['wireguard_bb_name'] }} ! -s fe80::/64 ! -d fe80::/64 -j MARK --set-xmark 0x1/0xffffffff {% endfor %} {% endif %} -{% if 'fastd' in group_names %} -{% for peer in groups['ffrl_uplink'] %} +{% if 'ffrl_uplink' in group_names %} +{% for peer in groups['fastd'] %} -A PREROUTING -i bb{{ hostvars[peer]['wireguard_bb_name'] }} ! -s fe80::/64 ! -d fe80::/64 -j MARK --set-xmark 0x1/0xffffffff {% endfor %} {% endif %} @@ -47,13 +52,18 @@ COMMIT {% endfor %} {% endif %} # wireguard_backbone -{% if 'ffrl_uplink' in group_names %} +{% if 'fastd' in group_names %} +{% for peer in groups['ffrl_uplink'] %} +-A INPUT -i bb{{ hostvars[peer]['wireguard_bb_name'] }} -p udp --dport 6696 -j ACCEPT +{% endfor %} +{% endif %} +{% if 'mullvad_uplink' in group_names %} {% for peer in groups['fastd'] %} -A INPUT -i bb{{ hostvars[peer]['wireguard_bb_name'] }} -p udp --dport 6696 -j ACCEPT {% endfor %} {% endif %} -{% if 'fastd' in group_names %} -{% for peer in groups['ffrl_uplink'] %} +{% if 'ffrl_uplink' in group_names %} +{% for peer in groups['fastd'] %} -A INPUT -i bb{{ hostvars[peer]['wireguard_bb_name'] }} -p udp --dport 6696 -j ACCEPT {% endfor %} {% endif %} diff --git a/roles/configure_iptables/templates/iptables.rules b/roles/configure_iptables/templates/iptables.rules index d395a42..5b5410d 100644 --- a/roles/configure_iptables/templates/iptables.rules +++ b/roles/configure_iptables/templates/iptables.rules @@ -10,13 +10,18 @@ {% endfor %} {% endif %} -{% if 'ffrl_uplink' in group_names %} +{% if 'fastd' in group_names %} +{% for peer in groups['ffrl_uplink'] %} +-A PREROUTING -i bb{{ hostvars[peer]['wireguard_bb_name'] }} -j MARK --set-xmark 0x1/0xffffffff +{% endfor %} +{% endif %} +{% if 'mullvad_uplink' in group_names %} {% for peer in groups['fastd'] %} -A PREROUTING -i bb{{ hostvars[peer]['wireguard_bb_name'] }} -j MARK --set-xmark 0x1/0xffffffff {% endfor %} {% endif %} -{% if 'fastd' in group_names %} -{% for peer in groups['ffrl_uplink'] %} +{% if 'ffrl_uplink' in group_names %} +{% for peer in groups['fastd'] %} -A PREROUTING -i bb{{ hostvars[peer]['wireguard_bb_name'] }} -j MARK --set-xmark 0x1/0xffffffff {% endfor %} {% endif %} @@ -78,4 +83,7 @@ COMMIT -A POSTROUTING ! -s {{ ffrl_ip4 }} -o {{ peer.name }} -j SNAT --to-source {{ ffrl_ip4 }} {% endfor %} {% endif %} +{% if 'mullvad_uplink' in group_names %} +-A POSTROUTING -o mullvad -j MASQUERADE +{% endif %} COMMIT |