angristan / angristan/wireguard-install

Issue with firewalld settings and some IPv6 handling

オープン
#530 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る
主要言語
Shell
スター
11.3k
フォーク
1.7k
PR マージ指標
30日以内にマージされた PR はありません

説明

First there is a little bug in your firewalld settings:

`PostDown = firewall-cmd --zone=public --add-interface=${SERVER_WG_NIC} && firewall-cmd --remove-port ${SERVER_PORT}/udp && firewall-cmd --remove-rich-rule='rule family=ipv4 source address=${FIREWALLD_IPV4_ADDRESS}/24 masquerade' && firewall-cmd --remove-rich-rule='rule family=ipv6 source address=${FIREWALLD_IPV6_ADDRESS}/24 masquerade'" >>"/etc/wireguard/${SERVER_WG_NIC}.conf"`

There should be --remove-interface there.

Now other issues with firewalld and IPv6 handling:

- we should have a choice in to what zone we want to add wireguard interface in i personally have it in trusted zone, same as my lan interface, because i want to have same access over wireguard as i would be connected to lan.

- other issue is IPv6 handling, there should be choice if IPv6 traffic is masqueraded or no. I have /56 subnet from my ISP, i have no issue assigning one of /64 subnets to VPN and use it natively.

- dns setting currently doesnt take IPv6 as a valid DNS server

And I know all this settings can be later fixed in config and i did that, just suggesting some things, that i noticed in my setup.

コントリビューションガイド

このリポジトリのコントリビューションガイドは索引されていません

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。