From a37d3b288d059b3b97440cd20f427145d66aef0e Mon Sep 17 00:00:00 2001 From: Xiao Pan Date: Thu, 20 Aug 2026 05:09:11 +0000 Subject: enable mimic because no udp maybe because VPS provider temp anti-DDOS setup --- etc/netns/ns0/nftables.conf | 3 +++ etc/systemd/system/mimic@.service.d/override.conf | 5 +++++ etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service | 1 + 3 files changed, 9 insertions(+) create mode 100644 etc/systemd/system/mimic@.service.d/override.conf create mode 120000 etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service diff --git a/etc/netns/ns0/nftables.conf b/etc/netns/ns0/nftables.conf index d0643505..f71e46b4 100644 --- a/etc/netns/ns0/nftables.conf +++ b/etc/netns/ns0/nftables.conf @@ -32,6 +32,9 @@ table inet my_table { tcp dport qbt accept udp dport qbt accept #tcp dport iperf3 accept + # mimic is both tcp and udp see perma link: + # https://github.com/hack3ric/mimic/blob/572a2ae5aeaa156afc2d6064a763e842962735bf/docs/getting-started.md#firewall + tcp dport wireguard accept udp dport wireguard accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited diff --git a/etc/systemd/system/mimic@.service.d/override.conf b/etc/systemd/system/mimic@.service.d/override.conf new file mode 100644 index 00000000..bb775d08 --- /dev/null +++ b/etc/systemd/system/mimic@.service.d/override.conf @@ -0,0 +1,5 @@ +[Unit] +After=ns0.service + +[Service] +NetworkNamespacePath=/run/netns/ns0 diff --git a/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service b/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service new file mode 120000 index 00000000..dce9a731 --- /dev/null +++ b/etc/systemd/system/multi-user.target.wants/mimic@ipvl0.service @@ -0,0 +1 @@ +/usr/lib/systemd/system/mimic@.service \ No newline at end of file -- cgit v1.3.1