You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
1.1 KiB
30 lines
1.1 KiB
#!/bin/sh
|
|
|
|
#move to script directory so all relative paths work
|
|
cd "$(dirname "$0")"
|
|
|
|
#add the includes
|
|
. ./config.sh
|
|
. ./colors.sh
|
|
. ./environment.sh
|
|
|
|
#send a message
|
|
verbose "Configuring nftables"
|
|
|
|
#run iptables commands
|
|
nft add rule ip filter INPUT iifname "lo" counter accept
|
|
nft add rule ip filter INPUT ct state related,established counter accept
|
|
nft add rule ip filter INPUT tcp dport 22 counter accept
|
|
nft add rule ip filter INPUT tcp dport 80 counter accept
|
|
nft add rule ip filter INPUT tcp dport 443 counter accept
|
|
nft add rule ip filter INPUT tcp dport 7443 counter accept
|
|
nft add rule ip filter INPUT tcp dport 5060-5091 counter accept
|
|
nft add rule ip filter INPUT udp dport 5060-5091 counter accept
|
|
nft add rule ip filter INPUT udp dport 16384-32768 counter accept
|
|
nft add rule ip filter INPUT icmp type echo-request counter accept
|
|
nft add rule ip filter INPUT udp dport 1194 counter accept
|
|
nft add rule ip mangle OUTPUT udp sport 16384-32768 counter ip dscp set 0x2e
|
|
nft add rule ip mangle OUTPUT tcp sport 5060-5091 counter ip dscp set 0x1a
|
|
nft add rule ip mangle OUTPUT udp sport 5060-5091 counter ip dscp set 0x1a
|
|
|
|
|