firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add file INSTALL

Browse Source
This commit is contained in:
Christoph 2017-02-24 04:24:38 +01:00
parent c10647e763
commit 1c5531ccaf
1 changed files with 108 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

108
INSTALL Normal file
View File

@ -0,0 +1,108 @@
# ---
# - Install scripts
# ---
cp ipt-firewall-gateway /usr/local/sbin/
# - If ipv6 is in use..
# -
cp ip6t-firewall-gateway /usr/local/sbin/
# ---
# - Configuration
# ---
mkdir -p /etc/ipt-firewall
cp default_ports.conf \
include_functions.conf \
interfaces.conf \
load_modules_ipv4.conf \
load_modules_ipv6.conf \
logging_ipv4.conf \
logging_ipv6.conf \
post_decalrations.conf /etc/ipt-firewall/
cp interfaces_ipv4.conf.sample /etc/ipt-firewall/interfaces_ipv4.conf
cp main_ipv4.conf.sample /etc/ipt-firewall/main_ipv4.conf
# - Adjust files
# - /etc/ipt-firewall/interfaces_ipv4.conf
# - /etc/ipt-firewall/main_ipv4.conf
# - /etc/ipt-firewall/logging_ipv4.conf
# -
# - If ipv6 is in use..
# -
cp interfaces_ipv6.conf.sample /etc/ipt-firewall/interfaces_ipv6.conf
cp main_ipv6.conf.sample /etc/ipt-firewall/main_ipv6.conf
# - Adjust files
# - /etc/ipt-firewall/interfaces_ipv6.conf
# - /etc/ipt-firewall/main_ipv4.conf
# - /etc/ipt-firewall/logging_ipv6.conf
# -
# ---
# - systemd configuration for service "ipt-firewall-gateway" / "ip6t-firewall-gateway"
# ---
## - Create a systemd service
## -
# IPv4
#
cat <<EOF > /etc/systemd/system/ipt-firewall.service
[Unit]
Description=IPv4 Firewall with iptables
After=network.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/local/sbin/ipt-firewall-gateway start
ExecStop=/usr/local/sbin/ipt-firewall-gateway stop
User=root
[Install]
WantedBy=multi-user.target
EOF
# IPv6
#
cat <<EOF > /etc/systemd/system/ip6t-firewall.service
[Unit]
Description=IPv6 Firewall with ip6tables
After=network.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/local/sbin/ip6t-firewall-gateway start
ExecStop=/usr/local/sbin/ip6t-firewall-gateway stop
User=root
[Install]
WantedBy=multi-user.target
EOF
## - Eanable script (for autostart at boot time)
## -
systemctl enable ipt-firewall.service
systemctl enable ip6t-firewall.service
## - Reload systemd configuration
## -
systemctl daemon-reload
## - Start Services
## -
systemctl start ipt-firewall
systemctl start ip6t-firewall