New: allow_all_outgoing_traffic (true/false)

This commit is contained in:
2019-03-07 19:31:12 +01:00
parent f4e92ec8b3
commit 4967e6549d
6 changed files with 106 additions and 40 deletions

View File

@ -780,6 +780,23 @@ fi
echo_done
# -------------
# --- Allow all outgoing traffic
# -------------
echononl "\tAllow all outgoing traffic.."
if [[ -n "$allow_all_outgoing_traffic" ]] && $allow_all_outgoing_traffic ; then
for _dev in ${ext_if_arr[@]} ; do
$ip6t -A OUTPUT -o $_dev -p ALL -m conntrack --ctstate NEW -j ACCEPT
if $kernel_forward_between_interfaces ; then
$ip6t -A FORWARD -o $_dev -p ALL -m conntrack --ctstate NEW -j ACCEPT
fi
done
echo_done
else
echo_skipped
fi
# ---
# - Permit all traffic through VPN lines
# ---