frodovdr
/
raspap-webgui
mirror of https://github.com/billz/raspap-webgui.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Replace update rc.local w/ iptables-save

This commit is contained in:
billz 2020-03-24 11:17:01 +00:00
parent aa497b46e4
commit 1de12470d3
1 changed files with 7 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
installers/configauth.sh
View File

@ -22,26 +22,12 @@ if [ "$auth" = 1 ]; then
fi fi
fi fi
# Generate iptables entries to place into rc.local file. # Configure NAT and forwarding with iptables
# #RASPAP is for uninstall script echo "Adding iptables rules for $interface"
echo "Checking iptables rules for $interface" sudo iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
sudo iptables -A FORWARD -i tun0 -o $interface -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i wlan0 -o tun0 -j ACCEPT
lines=( echo "Persisting IP tables rules"
"iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE #RASPAP" sudo iptables-save | sudo tee /etc/iptables/rules.v4 > /dev/null
"iptables -A FORWARD -i tun0 -o $interface -m state --state RELATED,ESTABLISHED -j ACCEPT #RASPAP"
"iptables -A FORWARD -i wlan0 -o tun0 -j ACCEPT #RASPAP"
)
for line in "${lines[@]}"; do
if grep "$line" /etc/rc.local > /dev/null; then
echo "$line: Line already added"
else
sudo sed -i "s/^exit 0$/$line\nexit 0/" /etc/rc.local
echo "Adding rule: $line"
fi
done
# Force a reload of new settings in /etc/rc.local
sudo systemctl restart rc-local.service
sudo systemctl daemon-reload