diff options
author | Silvio Rhatto <rhatto@riseup.net> | 2022-05-07 11:21:03 -0300 |
---|---|---|
committer | Silvio Rhatto <rhatto@riseup.net> | 2022-05-07 11:21:03 -0300 |
commit | d07c917010714db82e8c038acb71c34d607a00c5 (patch) | |
tree | 2f4bc0fb2ed7baa5f519e34028d81de8ac47d5c7 /share/trashman | |
parent | ce27905021c1227e2be57d00dba485f9cb051818 (diff) | |
download | trashman-d07c917010714db82e8c038acb71c34d607a00c5.tar.gz trashman-d07c917010714db82e8c038acb71c34d607a00c5.tar.bz2 |
Updates njalla-wireguard
Diffstat (limited to 'share/trashman')
-rw-r--r-- | share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf | 8 | ||||
-rwxr-xr-x | share/trashman/njalla-wireguard/unix/linux/debian/install | 2 |
2 files changed, 5 insertions, 5 deletions
diff --git a/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf b/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf index 9ef8208..c99874c 100644 --- a/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf +++ b/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf @@ -45,7 +45,7 @@ # @def $IP_DNS_IPR_PUBLIC = ( 95.215.19.53/32 ); -# Add your ISP name server to this object if you want to restrict +# Add your ISP name server to this object if you want to restrict # which DNS servers can be queried. @def $IP_DNS_PUBLIC = 0.0.0.0/0; @@ -95,7 +95,7 @@ domain ip { # Allow local traffic to loopback interface. daddr $NET_LOOPBACK ACCEPT; - + # Allow inbound SSH on your LAN interface _only_. interface $DEV_LAN { proto tcp dport $PORT_SSH ACCEPT; @@ -118,7 +118,7 @@ domain ip { # Allow local traffic from the loopback interface. saddr $NET_LOOPBACK ACCEPT; - + # Respond to ping. proto icmp icmp-type echo-request ACCEPT; @@ -138,7 +138,7 @@ domain ip { chain FORWARD { policy DROP; - # If you use your machine to route traffic eg. + # If you use your machine to route traffic eg. # from a VM you have to add rules here! # Log dropped packets. diff --git a/share/trashman/njalla-wireguard/unix/linux/debian/install b/share/trashman/njalla-wireguard/unix/linux/debian/install index 4ff6d7d..c71ad04 100755 --- a/share/trashman/njalla-wireguard/unix/linux/debian/install +++ b/share/trashman/njalla-wireguard/unix/linux/debian/install @@ -30,7 +30,7 @@ LIB="$2" trashman_apt_install wireguard-tools resolvconf dnsutils curl # Firewall -$APT_INSTALL ferm ulogd2 ulogd2-pcap +trashman_apt_install ferm ulogd2 ulogd2-pcap cp $SHARE/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf /etc/ferm cp $SHARE/njalla-wireguard/unix/linux/debian/files/etc/udev/rules.d/81-vpn-firewall.rules /etc/udev/rules.d cp $SHARE/njalla-wireguard/unix/linux/debian/files/usr/local/bin/fermreload.sh /usr/local/bin |