Modify gaming rules.

This commit is contained in:
2022-11-13 02:36:50 +01:00
parent 338b2cf8d7
commit fa86a604d6
4 changed files with 208 additions and 3 deletions

View File

@ -2183,6 +2183,16 @@ if $allow_http_request_out && ! $permit_local_net_to_inet ; then
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
$ip6t -A FORWARD -o $_dev -p tcp -m multiport --dports $standard_http_ports -m conntrack --ctstate NEW -j ACCEPT
fi
# - Note:
# - If (local) alias interfaces like eth1:0 in use, youe need a further
# - special rule.
# -
if $kernel_forward_between_interfaces && $local_alias_interfaces ; then
$ip6t -A FORWARD -p tcp -o $_dev -m multiport --dports $http_ports --tcp-flag ACK ACK -j ACCEPT
$ip6t -A FORWARD -p tcp -i $_dev -m multiport --sports $http_ports --tcp-flag ACK ACK -j ACCEPT
fi
done
echo_done
else
@ -4695,6 +4705,46 @@ fi
# ---
echo ""
ec:,hononl "\t\tGaming UDP local Ports out"
if $allow_gaming_out ; then
for _dev in ${ext_if_arr[@]} ; do
for _port in ${game_ports_local_udp_arr[@]} ; do
$ip6t -A FORWARD -o $_dev -p udp --sport $_port -m conntrack --ctstate NEW -j ACCEPT
done
done
echo_done
else
echo_skipped
fi
echononl "\t\tGaming TCP local Ports out"
if $allow_gaming_out ; then
for _dev in ${ext_if_arr[@]} ; do
for _port in ${game_ports_local_tcp_arr[@]} ; do
$ip6t -A FORWARD -o $_dev -p tcp --sport $_port -m conntrack --ctstate NEW -j ACCEPT
done
# - Rule is needed if (local) interface aliases in use (like eth0:1)
# -
if $kernel_forward_between_interfaces && $local_alias_interfaces ; then
$ip6t -A FORWARD -p tcp -o $_dev --sport $_port --tcp-flag ACK ACK -j ACCEPT
$ip6t -A FORWARD -p tcp -i $_dev --dport $_port --tcp-flag ACK ACK -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
echononl "\t\tGaming UDP Ports out"
if $allow_gaming_out && ! $permit_local_net_to_inet ; then