add dev ip
This commit is contained in:
15
init.sh
15
init.sh
@@ -5,12 +5,12 @@ set -e
|
||||
|
||||
WG_IF=${WG_INTERFACE:-wg0}
|
||||
PHY_IF=${WG_HOST_INTERFACE:-$(ip route | awk '/default/ { print $5 }')}
|
||||
ADDRESS=${WG_ADDRESS:-192.168.2.1}
|
||||
ADDRESS=${WG_ADDRESS:-10.200.200.1/24}
|
||||
|
||||
function shutdown() {
|
||||
wg-quick down $WG_IF
|
||||
#iptables -D FORWARD -i $WG_IF -j ACCEPT; iptables -D FORWARD -i $WG_IF -o $PHY_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -D FORWARD -i $PHY_IF -o $WG_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -t nat -D POSTROUTING -s $ADDRESS/32 -o $PHY_IF -j MASQUERADE;
|
||||
iptables -D FORWARD -i $WG_IF -j ACCEPT; iptables -t nat -D POSTROUTING -o $PHY_IF -j MASQUERADE
|
||||
ip link del dev $WG_IF
|
||||
iptables -D FORWARD -i $WG_IF -j ACCEPT; iptables -D FORWARD -i $WG_IF -o $PHY_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -D FORWARD -i $PHY_IF -o $WG_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -t nat -D POSTROUTING -s $ADDRESS -o $PHY_IF -j MASQUERADE;
|
||||
#iptables -D FORWARD -i $WG_IF -j ACCEPT; iptables -t nat -D POSTROUTING -o $PHY_IF -j MASQUERADE
|
||||
wg showconf $WG_IF > /etc/wireguard/$WG_IF.conf
|
||||
killall sleep
|
||||
}
|
||||
@@ -28,8 +28,9 @@ fi
|
||||
|
||||
trap shutdown EXIT
|
||||
|
||||
ifconfig $WG_IF up $ADDRESS
|
||||
#iptables -A FORWARD -i $WG_IF -j ACCEPT; iptables -A FORWARD -i $WG_IF -o $PHY_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -A FORWARD -i $PHY_IF -o $WG_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -t nat -A POSTROUTING -s $ADDRESS/32 -o $PHY_IF -j MASQUERADE;
|
||||
iptables -A FORWARD -i $WG_IF -j ACCEPT; iptables -t nat -A POSTROUTING -o $PHY_IF -j MASQUERADE
|
||||
ip link set up dev $WG_IF
|
||||
ip address add $ADDRESS dev $WG_IF
|
||||
iptables -A FORWARD -i $WG_IF -j ACCEPT; iptables -A FORWARD -i $WG_IF -o $PHY_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -A FORWARD -i $PHY_IF -o $WG_IF -m state --state RELATED,ESTABLISHED -j ACCEPT; iptables -t nat -A POSTROUTING -s $ADDRESS -o $PHY_IF -j MASQUERADE;
|
||||
#iptables -A FORWARD -i $WG_IF -j ACCEPT; iptables -t nat -A POSTROUTING -o $PHY_IF -j MASQUERADE
|
||||
|
||||
sleep 100000000
|
||||
|
Reference in New Issue
Block a user