mirror of
https://github.com/wg-easy/wg-easy.git
synced 2026-04-24 00:49:53 +08:00
Deployed 414e9a1 to Pre-release with MkDocs 1.6.1 and mike 2.1.4
This commit is contained in:
github-actions[bot]
@@ -25,7 +25,7 @@
|
||||
|
||||
|
||||
<link rel="icon" href="../../../assets/logo/favicon.png">
|
||||
<meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.7.0">
|
||||
<meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.7.5">
|
||||
|
||||
|
||||
|
||||
@@ -33,7 +33,7 @@
|
||||
|
||||
|
||||
|
||||
<link rel="stylesheet" href="../../../assets/stylesheets/main.618322db.min.css">
|
||||
<link rel="stylesheet" href="../../../assets/stylesheets/main.484c7ddc.min.css">
|
||||
|
||||
|
||||
<link rel="stylesheet" href="../../../assets/stylesheets/palette.ab4e12ef.min.css">
|
||||
@@ -2015,6 +2015,15 @@ sysctl<span class="w"> </span>-n<span class="w"> </span>net.ipv4.ip_forward<span
|
||||
<p>PostDown</p>
|
||||
<div class="highlight"><pre><span></span><code>iptables<span class="w"> </span>-D<span class="w"> </span>INPUT<span class="w"> </span>-p<span class="w"> </span>udp<span class="w"> </span>-m<span class="w"> </span>udp<span class="w"> </span>--dport<span class="w"> </span><span class="o">{{</span>port<span class="o">}}</span><span class="w"> </span>-j<span class="w"> </span>ACCEPT<span class="p">;</span><span class="w"> </span>iptables<span class="w"> </span>-D<span class="w"> </span>FORWARD<span class="w"> </span>-i<span class="w"> </span>wg0<span class="w"> </span>-j<span class="w"> </span>ACCEPT<span class="p">;</span><span class="w"> </span>iptables<span class="w"> </span>-D<span class="w"> </span>FORWARD<span class="w"> </span>-o<span class="w"> </span>wg0<span class="w"> </span>-j<span class="w"> </span>ACCEPT<span class="p">;</span><span class="w"> </span>ip6tables<span class="w"> </span>-D<span class="w"> </span>INPUT<span class="w"> </span>-p<span class="w"> </span>udp<span class="w"> </span>-m<span class="w"> </span>udp<span class="w"> </span>--dport<span class="w"> </span><span class="o">{{</span>port<span class="o">}}</span><span class="w"> </span>-j<span class="w"> </span>ACCEPT<span class="p">;</span><span class="w"> </span>ip6tables<span class="w"> </span>-D<span class="w"> </span>FORWARD<span class="w"> </span>-i<span class="w"> </span>wg0<span class="w"> </span>-j<span class="w"> </span>ACCEPT<span class="p">;</span><span class="w"> </span>ip6tables<span class="w"> </span>-D<span class="w"> </span>FORWARD<span class="w"> </span>-o<span class="w"> </span>wg0<span class="w"> </span>-j<span class="w"> </span>ACCEPT
|
||||
</code></pre></div>
|
||||
<div class="admonition warning">
|
||||
<p class="admonition-title">Important: When using nftables use the following hooks instead.</p>
|
||||
<p>PostUp</p>
|
||||
<div class="highlight"><pre><span></span><code>nft<span class="w"> </span>add<span class="w"> </span>chain<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>rule<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>DOCKER-USER<span class="w"> </span>jump<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>rule<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="w"> </span>iifname<span class="w"> </span><span class="o">{{</span>device<span class="o">}}</span><span class="w"> </span>accept<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>rule<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="w"> </span>oifname<span class="w"> </span><span class="o">{{</span>device<span class="o">}}</span><span class="w"> </span>accept<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>chain<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>rule<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>DOCKER-USER<span class="w"> </span>jump<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>rule<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="w"> </span>iifname<span class="w"> </span><span class="o">{{</span>device<span class="o">}}</span><span class="w"> </span>accept<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>add<span class="w"> </span>rule<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="w"> </span>oifname<span class="w"> </span><span class="o">{{</span>device<span class="o">}}</span><span class="w"> </span>accept<span class="p">;</span>
|
||||
</code></pre></div>
|
||||
<p>PostDown</p>
|
||||
<div class="highlight"><pre><span></span><code>nft<span class="w"> </span>delete<span class="w"> </span>rule<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>DOCKER-USER<span class="w"> </span>handle<span class="w"> </span><span class="k">$(</span>nft<span class="w"> </span>-a<span class="w"> </span>list<span class="w"> </span>chain<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>DOCKER-USER<span class="w"> </span><span class="p">|</span><span class="w"> </span>awk<span class="w"> </span><span class="s1">'/jump WG_EASY/ {print $NF}'</span><span class="k">)</span><span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>flush<span class="w"> </span>chain<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>delete<span class="w"> </span>chain<span class="w"> </span>ip<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>delete<span class="w"> </span>rule<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>DOCKER-USER<span class="w"> </span>handle<span class="w"> </span><span class="k">$(</span>nft<span class="w"> </span>-a<span class="w"> </span>list<span class="w"> </span>chain<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>DOCKER-USER<span class="w"> </span><span class="p">|</span><span class="w"> </span>awk<span class="w"> </span><span class="s1">'/jump WG_EASY/ {print $NF}'</span><span class="k">)</span><span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>flush<span class="w"> </span>chain<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>WG_EASY<span class="p">;</span><span class="w"> </span>nft<span class="w"> </span>delete<span class="w"> </span>chain<span class="w"> </span>ip6<span class="w"> </span>filter<span class="w"> </span>WG_EASY
|
||||
</code></pre></div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
@@ -2078,10 +2087,10 @@ sysctl<span class="w"> </span>-n<span class="w"> </span>net.ipv4.ip_forward<span
|
||||
|
||||
|
||||
|
||||
<script id="__config" type="application/json">{"annotate": null, "base": "../../..", "features": ["navigation.tabs", "navigation.top", "navigation.expand", "navigation.instant", "content.action.edit", "content.action.view", "content.code.annotate"], "search": "../../../assets/javascripts/workers/search.7a47a382.min.js", "tags": null, "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"provider": "mike"}}</script>
|
||||
<script id="__config" type="application/json">{"annotate": null, "base": "../../..", "features": ["navigation.tabs", "navigation.top", "navigation.expand", "navigation.instant", "content.action.edit", "content.action.view", "content.code.annotate"], "search": "../../../assets/javascripts/workers/search.2c215733.min.js", "tags": null, "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"provider": "mike"}}</script>
|
||||
|
||||
|
||||
<script src="../../../assets/javascripts/bundle.e71a0d61.min.js"></script>
|
||||
<script src="../../../assets/javascripts/bundle.79ae519e.min.js"></script>
|
||||
|
||||
|
||||
</body>
|
||||
|
||||
Reference in New Issue
Block a user