mirror of
https://github.com/angristan/openvpn-install.git
synced 2025-03-13 22:23:14 +01:00
Update openvpn-install.sh
Co-authored-by: randomshell <randshell@protonmail.com>
This commit is contained in:
parent
c9f0fba117
commit
cd517ae074
@ -855,13 +855,13 @@ verb 3" >> /etc/openvpn/server.conf
|
|||||||
# Add firewall rules --> firewalld / iptable (systemd scripts)
|
# Add firewall rules --> firewalld / iptable (systemd scripts)
|
||||||
if pgrep firewalld; then
|
if pgrep firewalld; then
|
||||||
# Allow incoming traffic
|
# Allow incoming traffic
|
||||||
if [[ "$PORT" == '1194' ]] && [[ "$PROTOCOL" == "udp" ]]; then
|
# Define new openvpn service
|
||||||
firewall-cmd --zone=public --add-service=openvpn
|
cp /usr/lib/firewalld/services/openvpn.xml /etc/firewalld/services
|
||||||
|
sed -i "s|udp|${PROTOCOL}|" /etc/firewalld/services/openvpn.xml
|
||||||
|
sed -i "s|1194|${PORT}|" /etc/firewalld/services/openvpn.xml
|
||||||
|
|
||||||
|
firewall-cmd --zone=public --add-service=openvpn
|
||||||
firewall-cmd --permanent --zone=public --add-service=openvpn
|
firewall-cmd --permanent --zone=public --add-service=openvpn
|
||||||
else
|
|
||||||
firewall-cmd --zone=public --add-port="$PORT/$PROTOCOL"
|
|
||||||
firewall-cmd --permanent --zone=public --add-port="$PORT/$PROTOCOL"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Add trusted zone
|
# Add trusted zone
|
||||||
firewall-cmd --zone=trusted --add-source=10.8.0.0/24
|
firewall-cmd --zone=trusted --add-source=10.8.0.0/24
|
||||||
|
Loading…
x
Reference in New Issue
Block a user