diff options
| author | Xiao Pan <xyz@flylightning.xyz> | 2025-08-28 14:39:01 +0000 |
|---|---|---|
| committer | Xiao Pan <xyz@flylightning.xyz> | 2025-08-28 14:39:01 +0000 |
| commit | b507abd30eed0010b637b674643730023277a58c (patch) | |
| tree | 906b92c1e9af85b039e7eb5f80b52d2d77efaa36 /etc | |
| parent | 145ad1f234139d3d359173922135bdc770602a91 (diff) | |
wg to ba then swgp forward to ib or caba
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/mimic/ens18.conf | 2 | ||||
| -rw-r--r-- | etc/nftables.conf | 5 | ||||
| -rw-r--r-- | etc/services | 6 |
3 files changed, 13 insertions, 0 deletions
diff --git a/etc/mimic/ens18.conf b/etc/mimic/ens18.conf index 3179d091..b1d87731 100644 --- a/etc/mimic/ens18.conf +++ b/etc/mimic/ens18.conf @@ -40,3 +40,5 @@ # Filter format follows `(local|remote)=IP:port`. For IPv6, IP addresses # need to be surrounded by square brackets. See below for examples. filter = local=104.224.159.210:54635 +filter = local=104.224.159.210:54644 +filter = local=104.224.159.210:54645 diff --git a/etc/nftables.conf b/etc/nftables.conf index 41f490e9..4726b499 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -34,6 +34,11 @@ table inet my_table { # https://github.com/hack3ric/mimic/blob/572a2ae5aeaa156afc2d6064a763e842962735bf/docs/getting-started.md#firewall tcp dport swgp accept udp dport swgp accept + # wg swgp mimic to ba then ba swgp config set wgEndpoint forward to ib + tcp dport swgp-ba-forward-ib accept + udp dport swgp-ba-forward-ib accept + tcp dport swgp-ba-forward-ca accept + udp dport swgp-ba-forward-ca accept tcp dport monerod-p2p accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited diff --git a/etc/services b/etc/services index d571596b..81ccfd9f 100644 --- a/etc/services +++ b/etc/services @@ -11525,5 +11525,11 @@ wireguard 49432/udp iperf3 53497/tcp swgp 54635/tcp swgp 54635/udp +# mimic is both tcp and udp, so here I use both tcp and udp for swgp +# wg swgp mimic to ba then ba swgp config set wgEndpoint forward to ib +swgp-ba-forward-ib 54644/tcp +swgp-ba-forward-ib 54644/udp +swgp-ba-forward-ca 54645/tcp +swgp-ba-forward-ca 54645/udp # phantun server listen phantun 59083/tcp |