LiittleCookie/vpn-install
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

iptables flushing and restoring

Browse Source
This commit is contained in:
bedefaced 2017-04-14 14:47:43 +03:00
parent 2f3b03001a
commit e76c241069
2 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ipsec/iptables-setup.sh
View File

@ -57,6 +57,9 @@ read -p "Would you want to disable client-to-client routing? [yes] " ANSDROP
if [ "$DROP" == "$ANSDROP" ]; then if [ "$DROP" == "$ANSDROP" ]; then
# disable forwarding # disable forwarding
iptables -I FORWARD -s $LOCALIPMASK -d $LOCALIPMASK -j DROP iptables -I FORWARD -s $LOCALIPMASK -d $LOCALIPMASK -j DROP
else
echo "Deleting DROP rule if exists..."
iptables -D FORWARD -s $LOCALIPMASK -d $LOCALIPMASK -j DROP
fi fi
# MSS Clamping # MSS Clamping
@ -82,3 +85,9 @@ if [ $? -ne 0 ]; then
echo "Cannot save iptables-restore from $IPTABLES to $RCLOCAL." echo "Cannot save iptables-restore from $IPTABLES to $RCLOCAL."
fi fi
fi fi
iptables -F
if [[ ! -z $IPTABLERESTOR ]]; then
$IPTABLESRESTOR < $IPTABLES
fi

21
pptp/iptables-setup.sh
View File

@ -55,6 +55,9 @@ read -p "Would you want to disable client-to-client routing? [yes] " ANSDROP
if [ "$DROP" == "$ANSDROP" ]; then if [ "$DROP" == "$ANSDROP" ]; then
# disable forwarding # disable forwarding
iptables -I FORWARD -s $LOCALIPMASK -d $LOCALIPMASK -j DROP iptables -I FORWARD -s $LOCALIPMASK -d $LOCALIPMASK -j DROP
else
echo "Deleting DROP rule if exists..."
iptables -D FORWARD -s $LOCALIPMASK -d $LOCALIPMASK -j DROP
fi fi
# MSS Clamping # MSS Clamping
@ -84,3 +87,21 @@ if [ $? -ne 0 ]; then
echo "Cannot save iptables-restore from $IPTABLES to $RCLOCAL." echo "Cannot save iptables-restore from $IPTABLES to $RCLOCAL."
fi fi
fi fi
IPTABLESRESTOR=$(which iptables-restore)
RESTORPRESENTS=$(grep iptables-restore $RCLOCAL)
if [ $? -ne 0 ]; then
if [[ ! -z $IPTABLESRESTOR ]]; then
sed -i -e "/exit 0/d" $RCLOCAL
echo "$IPTABLESRESTOR < $IPTABLES" >> $RCLOCAL
echo "exit 0" >> $RCLOCAL
else
echo "Cannot save iptables-restore from $IPTABLES to $RCLOCAL."
fi
fi
iptables -F
if [[ ! -z $IPTABLERESTOR ]]; then
$IPTABLESRESTOR < $IPTABLES
fi