Add file INSTALL
This commit is contained in:
parent
c10647e763
commit
1c5531ccaf
108
INSTALL
Normal file
108
INSTALL
Normal file
@ -0,0 +1,108 @@
|
||||
|
||||
# ---
|
||||
# - Install scripts
|
||||
# ---
|
||||
|
||||
cp ipt-firewall-gateway /usr/local/sbin/
|
||||
|
||||
# - If ipv6 is in use..
|
||||
# -
|
||||
cp ip6t-firewall-gateway /usr/local/sbin/
|
||||
|
||||
|
||||
|
||||
# ---
|
||||
# - Configuration
|
||||
# ---
|
||||
|
||||
mkdir -p /etc/ipt-firewall
|
||||
cp default_ports.conf \
|
||||
include_functions.conf \
|
||||
interfaces.conf \
|
||||
load_modules_ipv4.conf \
|
||||
load_modules_ipv6.conf \
|
||||
logging_ipv4.conf \
|
||||
logging_ipv6.conf \
|
||||
post_decalrations.conf /etc/ipt-firewall/
|
||||
|
||||
cp interfaces_ipv4.conf.sample /etc/ipt-firewall/interfaces_ipv4.conf
|
||||
cp main_ipv4.conf.sample /etc/ipt-firewall/main_ipv4.conf
|
||||
|
||||
# - Adjust files
|
||||
# - /etc/ipt-firewall/interfaces_ipv4.conf
|
||||
# - /etc/ipt-firewall/main_ipv4.conf
|
||||
# - /etc/ipt-firewall/logging_ipv4.conf
|
||||
# -
|
||||
|
||||
# - If ipv6 is in use..
|
||||
# -
|
||||
cp interfaces_ipv6.conf.sample /etc/ipt-firewall/interfaces_ipv6.conf
|
||||
cp main_ipv6.conf.sample /etc/ipt-firewall/main_ipv6.conf
|
||||
|
||||
# - Adjust files
|
||||
# - /etc/ipt-firewall/interfaces_ipv6.conf
|
||||
# - /etc/ipt-firewall/main_ipv4.conf
|
||||
# - /etc/ipt-firewall/logging_ipv6.conf
|
||||
# -
|
||||
|
||||
|
||||
|
||||
# ---
|
||||
# - systemd configuration for service "ipt-firewall-gateway" / "ip6t-firewall-gateway"
|
||||
# ---
|
||||
|
||||
## - Create a systemd service
|
||||
## -
|
||||
|
||||
# IPv4
|
||||
#
|
||||
cat <<EOF > /etc/systemd/system/ipt-firewall.service
|
||||
[Unit]
|
||||
Description=IPv4 Firewall with iptables
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/usr/local/sbin/ipt-firewall-gateway start
|
||||
ExecStop=/usr/local/sbin/ipt-firewall-gateway stop
|
||||
User=root
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
# IPv6
|
||||
#
|
||||
cat <<EOF > /etc/systemd/system/ip6t-firewall.service
|
||||
[Unit]
|
||||
Description=IPv6 Firewall with ip6tables
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/usr/local/sbin/ip6t-firewall-gateway start
|
||||
ExecStop=/usr/local/sbin/ip6t-firewall-gateway stop
|
||||
User=root
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
|
||||
## - Eanable script (for autostart at boot time)
|
||||
## -
|
||||
systemctl enable ipt-firewall.service
|
||||
systemctl enable ip6t-firewall.service
|
||||
|
||||
## - Reload systemd configuration
|
||||
## -
|
||||
systemctl daemon-reload
|
||||
|
||||
|
||||
## - Start Services
|
||||
## -
|
||||
systemctl start ipt-firewall
|
||||
systemctl start ip6t-firewall
|
||||
|
Loading…
Reference in New Issue
Block a user