frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00
Code Issues Releases Wiki Activity

Check existing iptables rules

Browse Source
This commit is contained in:
billz 2020-03-24 17:45:04 +00:00
parent 1de12470d3
commit f92ec4ebda
1 changed files with 29 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
installers/configauth.sh
View File

@ -6,9 +6,17 @@
# @author billz # @author billz
# license: GNU General Public License v3.0 # license: GNU General Public License v3.0
# Exit on error
set -o errexit
# Exit on error inside functions
set -o errtrace
# Turn on traces, disabled by default
#set -o xtrace
file=$1 file=$1
auth=$2 auth=$2
interface=$3 interface=$3
readonly rulesv4="/etc/iptables/rules.v4"
if [ "$auth" = 1 ]; then if [ "$auth" = 1 ]; then
echo "Enabling auth-user-pass in OpenVPN client.conf" echo "Enabling auth-user-pass in OpenVPN client.conf"
@ -23,11 +31,26 @@ if [ "$auth" = 1 ]; then
fi fi
# Configure NAT and forwarding with iptables # Configure NAT and forwarding with iptables
echo "Adding iptables rules for $interface" echo "Checking iptables rules"
sudo iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE rules=(
sudo iptables -A FORWARD -i tun0 -o $interface -m state --state RELATED,ESTABLISHED -j ACCEPT "-A POSTROUTING -o tun0 -j MASQUERADE"
sudo iptables -A FORWARD -i wlan0 -o tun0 -j ACCEPT "-A FORWARD -i tun0 -o ${interface} -m state --state RELATED,ESTABLISHED -j ACCEPT"
"-A FORWARD -i wlan0 -o tun0 -j ACCEPT"
)
echo "Persisting IP tables rules" for rule in "${rules[@]}"; do
sudo iptables-save | sudo tee /etc/iptables/rules.v4 > /dev/null if grep -- "$rule" $rulesv4 > /dev/null; then
echo "Rule already exits: ${rule}"
else
rule=$(sed -e 's/^\(-A POSTROUTING\)/-t nat \1/' <<< $rule)
echo "Adding rule: ${rule}"
sudo iptables $rule
added=true
fi
done
if [ "$added" = true ]; then
echo "Persisting IP tables rules"
sudo iptables-save | sudo tee /etc/iptables/rules.v4 > /dev/null
fi