This commit is contained in:
Daniel Flanagan 2022-11-14 09:42:25 -06:00
parent 5844f686e4
commit 201f49e750
5 changed files with 16 additions and 5 deletions

1
.gitignore vendored Normal file
View file

@ -0,0 +1 @@
dnsmasq.leases

View file

@ -15,6 +15,7 @@ noipv6rs
waitip 6
interface wan0
gateway
ipv6rs
iaid 1
option rapid_commit

View file

@ -12,6 +12,7 @@ local=/h.lyte.dev/
dhcp-host=dragon,10.0.0.10,12h
dhcp-host=faceless,10.0.0.210,12h
dhcp-host=mnemonic,10.0.0.248,ea:1b:7a:fb:8b:b8,12h
dhcp-host=frontdoorcam,10.0.0.89,9c:8e:cd:2b:71:e9,120m
dhcp-host=velop1,10.0.0.49,24:f5:a2:b0:86:2e,120m
@ -25,6 +26,9 @@ dhcp-host=datto1,10.0.0.81,78:f2:9e:91:44:c9,120m
address=/.h.lyte.dev/10.0.0.210
dhcp-host=AMC058BA_A75F1E,10.0.0.241,12h
dhcp-host=AMC0587F_A2969A,10.0.0.103,12h
# dhcp-host=kubeworker3,d0:50:99:26:89:86,ourcraft,10.0.0.244,120m
# address=/dragon.h.lyte.dev/10.0.0.10

View file

@ -33,4 +33,5 @@ recopy dhcpcd.conf /etc/dhcpcd.conf
# hosts file
recopy ./etc-hosts /etc/hblock/header
recopy ./etc-hosts /etc/hosts
# hblock # temporary disable hblock because Val loves ads

View file

@ -13,8 +13,8 @@ table inet filter {
ip protocol icmp accept
meta l4proto ipv6-icmp accept
# do these need ipv6-specific entries, too?
tcp dport { 51821, 22, 53, 67, 2201, 2221, 25565, 34197 } accept
udp dport { 51821, 51820, 53, 67, 34197 } accept
tcp dport { 51821, 51820, 22, 53, 67, 2201, 2221, 8448, 8008, 25565, 34197 } accept
udp dport { 51821, 51820, 22, 53, 67, 2201, 2221, 25565, 34197 } accept
udp dport { 60000-60009 } accept
udp dport dhcpv6-client accept
drop
@ -48,7 +48,7 @@ table ip nat {
fib daddr type local dnat ip addr . port to meta l4proto . th dport map @map_port_ipport
# faceless
iifname $WAN tcp dport { 443, 80, 22 } dnat to 10.0.0.210
iifname $WAN tcp dport { 443, 80, 22, 8008, 8448 } dnat to 10.0.0.210
iifname $WAN udp dport 60010-60019 dnat to 10.0.0.210
# dragon
@ -57,12 +57,16 @@ table ip nat {
# dragon reinstall?
iifname $WAN tcp dport { 2221, 5588, 5589 } dnat to 10.0.0.10
iifname $WAN udp dport { 2221, 5588, 5589 } dnat to 10.0.0.10
iifname $WAN udp dport 60020-60029 dnat to 10.0.0.10
iifname $WAN udp dport 9876-9877 dnat to 10.0.0.10
# mnemonic
iifname $WAN tcp dport { 8022 } dnat to 10.0.0.248
# ourcraft
iifname $WAN tcp dport { 25565, 34197 } dnat to 10.0.0.138
iifname $WAN udp dport { 25565, 34197 } dnat to 10.0.0.138
iifname $WAN tcp dport { 2456, 2457, 25565, 34197 } dnat to 10.0.0.10
iifname $WAN udp dport { 2456, 2457, 25565, 34197 } dnat to 10.0.0.10
}
chain output {