mirror of
https://github.com/pivpn/pivpn.git
synced 2024-12-18 10:50:16 +00:00
fix(ufw): Fix ufw insert error
fix ufw error when inserting rules with an empty chain
This commit is contained in:
parent
955f268db2
commit
8603013fc3
1 changed files with 15 additions and 11 deletions
|
@ -3178,21 +3178,25 @@ confNetwork() {
|
|||
fi
|
||||
fi
|
||||
|
||||
# Insert rules at the beginning of the chain
|
||||
# Checks for any existing UFW rules and
|
||||
# insert rules at the beginning of the chain
|
||||
# (in case there are other rules that may drop the traffic)
|
||||
${SUDO} ufw insert 1 \
|
||||
allow "${pivpnPORT}/${pivpnPROTO}" \
|
||||
comment "allow-${VPN}" > /dev/null
|
||||
${SUDO} ufw route insert 1 \
|
||||
allow in on "${pivpnDEV}" \
|
||||
from "${pivpnNET}/${subnetClass}" \
|
||||
out on "${IPv4dev}" to any > /dev/null
|
||||
if ${SUDO} ufw status numbered | grep -E "\[.[0-9]{1}\]" > /dev/null; then
|
||||
${SUDO} ufw insert 1 \
|
||||
allow "${pivpnPORT}/${pivpnPROTO}" \
|
||||
comment "allow-${VPN}" > /dev/null
|
||||
|
||||
if [[ "${pivpnenableipv6}" -eq 1 ]]; then
|
||||
${SUDO} ufw route insert 1 \
|
||||
allow in on "${pivpnDEV}" \
|
||||
from "${pivpnNETv6}/${subnetClassv6}" \
|
||||
out on "${IPv6dev}" to any > /dev/null
|
||||
from "${pivpnNET}/${subnetClass}" \
|
||||
out on "${IPv4dev}" to any > /dev/null
|
||||
|
||||
if [[ "${pivpnenableipv6}" -eq 1 ]]; then
|
||||
${SUDO} ufw route insert 1 \
|
||||
allow in on "${pivpnDEV}" \
|
||||
from "${pivpnNETv6}/${subnetClassv6}" \
|
||||
out on "${IPv6dev}" to any > /dev/null
|
||||
fi
|
||||
fi
|
||||
|
||||
${SUDO} ufw reload > /dev/null
|
||||
|
|
Loading…
Reference in a new issue