979 B · 19 lines · Created 1w ago
12345678910111213141516171819[Interface]PrivateKey = <REDACTED>Address = 198.51.100.1/24ListenPort = 51820PostUp = iptables -I FORWARD 1 -o %i -d 198.51.100.2/32 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPTPostUp = iptables -I FORWARD 2 -i %i -s 198.51.100.2/32 -d 192.168.0.0/24 -j ACCEPTPostUp = iptables -I FORWARD 3 -i %i -d 192.168.0.0/24 -j REJECT --reject-with icmp-port-unreachablePostUp = iptables -t nat -A POSTROUTING -s 198.51.100.0/24 -o enp37s0 -j MASQUERADE
PostDown = iptables -D FORWARD -o %i -d 198.51.100.2/32 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPTPostDown = iptables -D FORWARD -i %i -s 198.51.100.2/32 -d 192.168.0.0/24 -j ACCEPTPostDown = iptables -D FORWARD -i %i -d 192.168.0.0/24 -j REJECT --reject-with icmp-port-unreachablePostDown = iptables -t nat -D POSTROUTING -s 198.51.100.0/24 -o enp37s0 -j MASQUERADE
# BEGIN ANSIBLE MANAGED BLOCK FOR salman[Peer]PublicKey = <REDACTED>AllowedIPs = 198.51.100.2/32# END ANSIBLE MANAGED BLOCK FOR salman