diff options
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/netns/ns0/nftables.conf | 3 | ||||
| -rw-r--r-- | etc/systemd/system/mimic@.service.d/override.conf | 5 | ||||
| l--------- | etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service | 1 |
3 files changed, 9 insertions, 0 deletions
diff --git a/etc/netns/ns0/nftables.conf b/etc/netns/ns0/nftables.conf index d0643505..f71e46b4 100644 --- a/etc/netns/ns0/nftables.conf +++ b/etc/netns/ns0/nftables.conf @@ -32,6 +32,9 @@ table inet my_table { tcp dport qbt accept udp dport qbt accept #tcp dport iperf3 accept + # mimic is both tcp and udp see perma link: + # https://github.com/hack3ric/mimic/blob/572a2ae5aeaa156afc2d6064a763e842962735bf/docs/getting-started.md#firewall + tcp dport wireguard accept udp dport wireguard accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited diff --git a/etc/systemd/system/mimic@.service.d/override.conf b/etc/systemd/system/mimic@.service.d/override.conf new file mode 100644 index 00000000..bb775d08 --- /dev/null +++ b/etc/systemd/system/mimic@.service.d/override.conf @@ -0,0 +1,5 @@ +[Unit] +After=ns0.service + +[Service] +NetworkNamespacePath=/run/netns/ns0 diff --git a/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service b/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service new file mode 120000 index 00000000..dce9a731 --- /dev/null +++ b/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service @@ -0,0 +1 @@ +/usr/lib/systemd/system/mimic@.service
\ No newline at end of file |