From 2743913ca1a571f6172704dbe7e1d4e8f986c38e Mon Sep 17 00:00:00 2001 From: BrainStone Date: Sun, 19 Feb 2023 02:21:40 +0100 Subject: [PATCH] Automatically remove the firewall rules --- src/config.js | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/config.js b/src/config.js index 28c9fc5a..e0c478e9 100644 --- a/src/config.js +++ b/src/config.js @@ -18,11 +18,11 @@ module.exports.WG_ALLOWED_IPS = process.env.WG_ALLOWED_IPS || '0.0.0.0/0, ::/0'; module.exports.WG_PRE_UP = process.env.WG_PRE_UP || ''; module.exports.WG_POST_UP = process.env.WG_POST_UP || ` -iptables -t nat -A POSTROUTING -s ${module.exports.WG_DEFAULT_ADDRESS.replace('x', '0')}/24 -o eth0 -j MASQUERADE; -iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; -iptables -A FORWARD -i wg0 -j ACCEPT; -iptables -A FORWARD -o wg0 -j ACCEPT; +iptables -t nat -A POSTROUTING -s ${module.exports.WG_DEFAULT_ADDRESS.replace('x', '0')}/24 -o eth0 -j MASQUERADE -m comment --comment "wg-easy rule"; +iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT -m comment --comment "wg-easy rule"; +iptables -A FORWARD -i wg0 -j ACCEPT -m comment --comment "wg-easy rule"; +iptables -A FORWARD -o wg0 -j ACCEPT -m comment --comment "wg-easy rule"; `.split('\n').join(' '); -module.exports.WG_PRE_DOWN = process.env.WG_PRE_DOWN || ''; +module.exports.WG_PRE_DOWN = process.env.WG_PRE_DOWN || 'iptables-save | grep -vF "wg-easy rule" | iptables-restore'; module.exports.WG_POST_DOWN = process.env.WG_POST_DOWN || '';