Skip to content

[Draft] VR: allow outgoing traffic from Remote access VPN clients #10083

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft

weizhouapache wants to merge 1 commit into apache:4.20

from weizhouapache:4.20-vr-allow-outgoing-remote-access-vpn-client

+2 −0

Draft

[Draft] VR: allow outgoing traffic from Remote access VPN clients #10083

Changes from all commits

Commits

Show all changes

Select commit

VR: allow outgoing traffic from Remote access VPN clients

weizhouapache Dec 11, 2024

File filter

Filter by extension

Conversations

Jump to

Jump to file

Failed to load files.

Loading

Diff view

Diff view

2 changes: 2 additions & 0 deletions systemvm/debian/opt/cloud/bin/configure.py

Show comments View file Open in desktop

Original file line number	Diff line number	Diff line change
Expand Up		@@ -1287,10 +1287,12 @@ def remoteaccessvpn_iptables(self, publicip, obj):
		self.fw.append(["", "", "-A VPN_FORWARD -s %s -j RETURN" % localcidr])
		self.fw.append(["", "", "-A VPN_FORWARD -i ppp+ -d %s -j RETURN" % localcidr])
		self.fw.append(["", "", "-A VPN_FORWARD -i ppp+ -o ppp+ -j RETURN"])
	self.fw.append(["", "", "-A VPN_FORWARD -j ACCEPT"])
		else:
		self.fw.append(["", "", "-A FORWARD -i ppp+ -o ppp+ -j ACCEPT"])
		self.fw.append(["", "", "-A FORWARD -s %s -o ppp+ -j ACCEPT" % localcidr])
		self.fw.append(["", "", "-A FORWARD -i ppp+ -d %s -j ACCEPT" % localcidr])
	self.fw.append(["", "", "-A FORWARD -i ppp+ -j ACCEPT"])

		self.fw.append(["", "", "-A INPUT -i ppp+ -m udp -p udp --dport 53 -j ACCEPT"])
		self.fw.append(["", "", "-A INPUT -i ppp+ -m tcp -p tcp --dport 53 -j ACCEPT"])
Expand Down

Loading