From d07c917010714db82e8c038acb71c34d607a00c5 Mon Sep 17 00:00:00 2001 From: Silvio Rhatto Date: Sat, 7 May 2022 11:21:03 -0300 Subject: Updates njalla-wireguard --- .../njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf | 8 ++++---- share/trashman/njalla-wireguard/unix/linux/debian/install | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf b/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf index 9ef8208..c99874c 100644 --- a/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf +++ b/share/trashman/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf @@ -45,7 +45,7 @@ # @def $IP_DNS_IPR_PUBLIC = ( 95.215.19.53/32 ); -# Add your ISP name server to this object if you want to restrict +# Add your ISP name server to this object if you want to restrict # which DNS servers can be queried. @def $IP_DNS_PUBLIC = 0.0.0.0/0; @@ -95,7 +95,7 @@ domain ip { # Allow local traffic to loopback interface. daddr $NET_LOOPBACK ACCEPT; - + # Allow inbound SSH on your LAN interface _only_. interface $DEV_LAN { proto tcp dport $PORT_SSH ACCEPT; @@ -118,7 +118,7 @@ domain ip { # Allow local traffic from the loopback interface. saddr $NET_LOOPBACK ACCEPT; - + # Respond to ping. proto icmp icmp-type echo-request ACCEPT; @@ -138,7 +138,7 @@ domain ip { chain FORWARD { policy DROP; - # If you use your machine to route traffic eg. + # If you use your machine to route traffic eg. # from a VM you have to add rules here! # Log dropped packets. diff --git a/share/trashman/njalla-wireguard/unix/linux/debian/install b/share/trashman/njalla-wireguard/unix/linux/debian/install index 4ff6d7d..c71ad04 100755 --- a/share/trashman/njalla-wireguard/unix/linux/debian/install +++ b/share/trashman/njalla-wireguard/unix/linux/debian/install @@ -30,7 +30,7 @@ LIB="$2" trashman_apt_install wireguard-tools resolvconf dnsutils curl # Firewall -$APT_INSTALL ferm ulogd2 ulogd2-pcap +trashman_apt_install ferm ulogd2 ulogd2-pcap cp $SHARE/njalla-wireguard/unix/linux/debian/files/etc/ferm/ferm.conf /etc/ferm cp $SHARE/njalla-wireguard/unix/linux/debian/files/etc/udev/rules.d/81-vpn-firewall.rules /etc/udev/rules.d cp $SHARE/njalla-wireguard/unix/linux/debian/files/usr/local/bin/fermreload.sh /usr/local/bin -- cgit v1.2.3