mirror of
https://github.com/trailofbits/algo.git
synced 2025-07-21 13:03:02 +02:00
fix what was here, script runs now
This commit is contained in:
parent
e8993b06dd
commit
041c6da9b0
3 changed files with 10 additions and 8 deletions
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
|
@ -0,0 +1 @@
|
|||
*.retry
|
|
@ -2,13 +2,15 @@
|
|||
- name: Install StrongSwan
|
||||
apt: name=strongswan state=latest update_cache=yes
|
||||
|
||||
- name: Modify sysctl values to route traffic appropriately
|
||||
sysctl:
|
||||
- name=net.ipv4.ip_forwarding value=1
|
||||
- name=net.ipv4.conf.all.accept_redirects value=0
|
||||
- name=net.ipv4.conf.all.send_redirects value=0
|
||||
- name: Enable packet forwarding for IPv4
|
||||
sysctl: name=net.ipv4.ip_forward value=1
|
||||
|
||||
- name: Do not accept ICMP redirects (prevent MITM attacks)
|
||||
sysctl: name=net.ipv4.conf.all.accept_redirects value=0
|
||||
|
||||
- name: Do not accept ICMP redirects (prevent MITM attacks)
|
||||
sysctl: name=net.ipv4.conf.all.send_redirects value=0
|
||||
|
||||
- name: Configure IPTables to route traffic appropriately
|
||||
iptables:
|
||||
- table=nat chain=POSTROUTING src=10.0.0.0/24 dst=10.0.0.0/24 jump=MASQUERADE
|
||||
iptables: table=nat chain=POSTROUTING source=10.0.0.0/24 out_interface=eth0 jump=MASQUERADE
|
||||
|
||||
|
|
1
vpn.yml
1
vpn.yml
|
@ -1,5 +1,4 @@
|
|||
---
|
||||
|
||||
- name: Install StrongSwan and its dependencies
|
||||
hosts: vpn
|
||||
roles:
|
||||
|
|
Loading…
Add table
Reference in a new issue