mlow/vpnerator
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Randomize interface name, MASQUERADE only this client

Browse Source 
Minor cleanups
This commit is contained in:
Matt Low 2021-01-01 07:32:00 -07:00
parent e4afb7f972
commit fb98bb2c0b
1 changed files with 19 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
vpnerator.sh
View File

@ -8,8 +8,8 @@
HOST=$1 HOST=$1
HOST_ADDR=$(echo ${HOST} | awk -F '@' '{ print $NF }') HOST_ADDR=$(echo ${HOST} | awk -F '@' '{ print $NF }')
INTERFACE_NAME=tun
RAND=$(tr -dc 'a-zA-Z0-9' < /dev/urandom | fold -w 8 | head -1) RAND=$(tr -dc 'a-zA-Z0-9' < /dev/urandom | fold -w 8 | head -1)
INTERFACE_NAME=tun-${RAND}
SERVER_ADDR=10.99.255.1/24 SERVER_ADDR=10.99.255.1/24
CLIENT_ADDR=10.99.255.2/32 CLIENT_ADDR=10.99.255.2/32
DNS=8.8.8.8 DNS=8.8.8.8
@ -46,17 +46,26 @@ deps() {
return 0 return 0
} }
remove_interface() {
exec_sudo iptables -D FORWARD -i \$1 -j ACCEPT
exec_sudo iptables -D FORWARD -o \$1 -j ACCEPT
exec_sudo iptables -t nat -D POSTROUTING -s "${CLIENT_ADDR}" -o \${DEFAULT_IFACE} -j MASQUERADE
exec_sudo ip link del dev \$1
}
cleanup() { cleanup() {
if ip link show ${INTERFACE_NAME} type wireguard > /dev/null 2>&1 ; then sudo sysctl -wq net.ipv4.ip_forward=0
exec_sudo iptables -D FORWARD -i ${INTERFACE_NAME} -j ACCEPT
exec_sudo iptables -D FORWARD -o ${INTERFACE_NAME} -j ACCEPT EXIST_INTERFACE=\$(ip addr show to ${SERVER_ADDR} | head -1 | awk '{ print \$2 }' | cut -d':' -f1)
exec_sudo iptables -t nat -D POSTROUTING -o \${DEFAULT_IFACE} -j MASQUERADE
exec_sudo ip link del dev ${INTERFACE_NAME} if [ ! -z "\${EXIST_INTERFACE}" ] ; then
exec_sudo sysctl -wq net.ipv4.ip_forward=0 remove_interface \${EXIST_INTERFACE}
return 0
elif ip link show ${INTERFACE_NAME} type wireguard > /dev/null 2>&1 ; then
remove_interface ${INTERFACE_NAME}
return 0 return 0
else
return 1
fi fi
return 1
} }
END END
) )
@ -100,7 +109,7 @@ exec_sudo ip link set mtu 1420 up dev "${INTERFACE_NAME}"
exec_sudo iptables -A FORWARD -i "${INTERFACE_NAME}" -j ACCEPT exec_sudo iptables -A FORWARD -i "${INTERFACE_NAME}" -j ACCEPT
exec_sudo iptables -A FORWARD -o "${INTERFACE_NAME}" -j ACCEPT exec_sudo iptables -A FORWARD -o "${INTERFACE_NAME}" -j ACCEPT
exec_sudo iptables -t nat -A POSTROUTING -o "\${DEFAULT_IFACE}" -j MASQUERADE exec_sudo iptables -t nat -A POSTROUTING -s "${CLIENT_ADDR}" -o "\${DEFAULT_IFACE}" -j MASQUERADE
END END
if [ "$?" -ne 0 ]; then if [ "$?" -ne 0 ]; then