Skip to content

Instantly share code, notes, and snippets.

@inspector71

inspector71/routing.bash

Created November 14, 2018 00:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save inspector71/e3a42f9db62baeb0f6eda1151e4fcfc9 to your computer and use it in GitHub Desktop.
Save inspector71/e3a42f9db62baeb0f6eda1151e4fcfc9 to your computer and use it in GitHub Desktop.
Download ZIP
routing
Raw
routing.bash
# Accept all loopback traffic localhost or 127.0.0.1
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# Accept all local traffic from 192.168.1.1-192.168.1.255
iptables -A INPUT -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
iptables -A OUTPUT -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
# Forward all eth0, eth1, etc through tun interfaces
iptables -A FORWARD -i eth+ -o tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -o eth+ -j ACCEPT
# Postroute masquerade through tun interfaces
iptables -t nat -A POSTROUTING -o tun+ -j MASQUERADE
# Drop any other traffic through eth adapters
iptables -A OUTPUT -o eth+ ! -d a.b.c.d -j DROP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment