Add: Allow all traffic from local ip to the internet

This commit is contained in:
2019-07-09 15:47:48 +02:00
parent 45b144f416
commit f535a29ca6
5 changed files with 93 additions and 2 deletions

View File

@ -916,6 +916,34 @@ fi
# ---
# - Allow all traffic from local ip to the internet
# ---
echononl "\tAllow all traffic from local ip to the internet"
if [[ ${#allow_local_ip_to_inet_arr[@]} -gt 0 ]] \
&& $kernel_forward_between_interfaces ; then
for _ip in ${allow_local_ip_to_inet_arr[@]} ; do
$ip6t -A FORWARD -p ALL -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# - Note:
# - If (local) alias interfaces like eth1:0 in use, youe need a further
# - special rule.
# -
if $local_alias_interfaces ; then
$ip6t -A FORWARD -p tcp -d $_ip --tcp-flag ACK ACK -j ACCEPT
$ip6t -A FORWARD -p tcp -s $_ip --tcp-flag ACK ACK -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
# ---
# - Allow local services from given local networks
# ---