fix awk for ipv4, add ipv6 local allows

This commit is contained in:
Joe Roback
2025-11-15 15:23:36 -07:00
parent 1168e6e1b2
commit eaa78e1217
+6 -1
View File
@@ -33,6 +33,8 @@ shutdown () {
trap shutdown SIGTERM SIGINT SIGQUIT
wg show
# kill switches for ipv4 and ipv6 wg-quick(8)
iptables -I OUTPUT ! -o ${WIREGUARD_INTERFACE} -m mark ! --mark $(wg show ${WIREGUARD_INTERFACE} fwmark) -m addrtype ! --dst-type LOCAL -j REJECT
ip6tables -I OUTPUT ! -o ${WIREGUARD_INTERFACE} -m mark ! --mark $(wg show ${WIREGUARD_INTERFACE} fwmark) -m addrtype ! --dst-type LOCAL -j REJECT
@@ -42,6 +44,10 @@ for network in $(ip -o addr show | awk '/^(\d)+: eth(.+)inet/ {print $4}'); do
iptables -I OUTPUT -d ${network} -j ACCEPT
done
for network in $(ip -o addr show | awk '/^(\d)+: eth(.+)inet6 / {print $4}'); do
ip6tables -I OUTPUT -d ${network} -j ACCEPT
done
# allow connections user defined local networks
for local_subnet in ${LOCAL_SUBNETS//,/$IFS}
do
@@ -49,7 +55,6 @@ do
iptables -I OUTPUT -d ${local_subnet} -j ACCEPT
done
wg show
sleep 2
# check to see if tunnel allows port forwarding