From c6ef80b90d2a32975b653299292d383c3f912ed4 Mon Sep 17 00:00:00 2001 From: Xiao Pan Date: Thu, 29 Jun 2023 02:20:34 -0700 Subject: prepare for wg --- etc/nftables.conf | 1 + etc/services | 1 + etc/sysctl.d/99-sysctl.conf | 1 + 3 files changed, 3 insertions(+) create mode 100644 etc/sysctl.d/99-sysctl.conf diff --git a/etc/nftables.conf b/etc/nftables.conf index 821ce0fb..f5efb4f5 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -30,6 +30,7 @@ table inet my_table { udp dport qbt-forward accept #tcp dport monerod-p2p accept #tcp dport iperf3 accept + udp dport wireguard accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited counter comment "count any other traffic" diff --git a/etc/services b/etc/services index 3ebd737f..5df735e6 100644 --- a/etc/services +++ b/etc/services @@ -11509,6 +11509,7 @@ ai-webui 7860/tcp jackett 9117/tcp searx 49152/tcp qrcp 49153/tcp +wireguard 49432/udp iperf3 53497/tcp monerod-p2p 18080/tcp qbt-nox 57151/tcp diff --git a/etc/sysctl.d/99-sysctl.conf b/etc/sysctl.d/99-sysctl.conf new file mode 100644 index 00000000..4234b543 --- /dev/null +++ b/etc/sysctl.d/99-sysctl.conf @@ -0,0 +1 @@ +net.ipv4.ip_forward = 1 -- cgit v1.2.3-70-g09d2