aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2022-05-07 11:21:03 -0300
committerSilvio Rhatto <rhatto@riseup.net>2022-05-07 11:21:03 -0300
commitd07c917010714db82e8c038acb71c34d607a00c5 (patch)
tree2f4bc0fb2ed7baa5f519e34028d81de8ac47d5c7
parentce27905021c1227e2be57d00dba485f9cb051818 (diff)
downloadtrashman-d07c917010714db82e8c038acb71c34d607a00c5.tar.gz
trashman-d07c917010714db82e8c038acb71c34d607a00c5.tar.bz2
Updates njalla-wireguard
-rw-r--r--share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf8
-rwxr-xr-xshare/trashman/njalla-wireguard/unix/linux/debian/install2
2 files changed, 5 insertions, 5 deletions
diff --git a/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf b/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf
index 9ef8208..c99874c 100644
--- a/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf
+++ b/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf
@@ -45,7 +45,7 @@
#
@def $IP_DNS_IPR_PUBLIC = ( 95.215.19.53/32 );
-# Add your ISP name server to this object if you want to restrict
+# Add your ISP name server to this object if you want to restrict
# which DNS servers can be queried.
@def $IP_DNS_PUBLIC = 0.0.0.0/0;
@@ -95,7 +95,7 @@ domain ip {
# Allow local traffic to loopback interface.
daddr $NET_LOOPBACK ACCEPT;
-
+
# Allow inbound SSH on your LAN interface _only_.
interface $DEV_LAN {
proto tcp dport $PORT_SSH ACCEPT;
@@ -118,7 +118,7 @@ domain ip {
# Allow local traffic from the loopback interface.
saddr $NET_LOOPBACK ACCEPT;
-
+
# Respond to ping.
proto icmp icmp-type echo-request ACCEPT;
@@ -138,7 +138,7 @@ domain ip {
chain FORWARD {
policy DROP;
- # If you use your machine to route traffic eg.
+ # If you use your machine to route traffic eg.
# from a VM you have to add rules here!
# Log dropped packets.
diff --git a/share/trashman/njalla-wireguard/unix/linux/debian/install b/share/trashman/njalla-wireguard/unix/linux/debian/install
index 4ff6d7d..c71ad04 100755
--- a/share/trashman/njalla-wireguard/unix/linux/debian/install
+++ b/share/trashman/njalla-wireguard/unix/linux/debian/install
@@ -30,7 +30,7 @@ LIB="$2"
trashman_apt_install wireguard-tools resolvconf dnsutils curl
# Firewall
-$APT_INSTALL ferm ulogd2 ulogd2-pcap
+trashman_apt_install ferm ulogd2 ulogd2-pcap
cp $SHARE/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf /etc/ferm
cp $SHARE/njalla-wireguard/unix/linux/debian/files/etc/udev/rules.d/81-vpn-firewall.rules /etc/udev/rules.d
cp $SHARE/njalla-wireguard/unix/linux/debian/files/usr/local/bin/fermreload.sh /usr/local/bin