diff options
| author | Xiao Pan <xyz@flylightning.xyz> | 2026-08-20 05:09:11 +0000 |
|---|---|---|
| committer | Xiao Pan <xyz@flylightning.xyz> | 2026-08-20 05:09:11 +0000 |
| commit | a37d3b288d059b3b97440cd20f427145d66aef0e (patch) | |
| tree | 4952451e641eebbc39041593ee9c8d09f42e198b | |
| parent | 576f21c50ce7adafc4f98064cba7a6c76a408afe (diff) | |
enable mimic because no udp maybe because VPS provider temp anti-DDOS setup
| -rw-r--r-- | etc/netns/ns0/nftables.conf | 3 | ||||
| -rw-r--r-- | etc/systemd/system/mimic@.service.d/override.conf | 5 | ||||
| l--------- | etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service | 1 |
3 files changed, 9 insertions, 0 deletions
diff --git a/etc/netns/ns0/nftables.conf b/etc/netns/ns0/nftables.conf index d0643505..f71e46b4 100644 --- a/etc/netns/ns0/nftables.conf +++ b/etc/netns/ns0/nftables.conf @@ -32,6 +32,9 @@ table inet my_table { tcp dport qbt accept udp dport qbt accept #tcp dport iperf3 accept + # mimic is both tcp and udp see perma link: + # https://github.com/hack3ric/mimic/blob/572a2ae5aeaa156afc2d6064a763e842962735bf/docs/getting-started.md#firewall + tcp dport wireguard accept udp dport wireguard accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited diff --git a/etc/systemd/system/mimic@.service.d/override.conf b/etc/systemd/system/mimic@.service.d/override.conf new file mode 100644 index 00000000..bb775d08 --- /dev/null +++ b/etc/systemd/system/mimic@.service.d/override.conf @@ -0,0 +1,5 @@ +[Unit] +After=ns0.service + +[Service] +NetworkNamespacePath=/run/netns/ns0 diff --git a/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service b/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service new file mode 120000 index 00000000..dce9a731 --- /dev/null +++ b/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service @@ -0,0 +1 @@ +/usr/lib/systemd/system/mimic@.service
\ No newline at end of file |