mirror of
https://github.com/trailofbits/algo.git
synced 2025-06-06 15:13:56 +02:00
change IP ranges #37
This commit is contained in:
parent
d6dc57459e
commit
e30eb9bf87
4 changed files with 5 additions and 4 deletions
|
@ -14,7 +14,8 @@ server_name: example.com
|
|||
server_ip: "{{ ansible_ssh_host }}"
|
||||
dns_servers:
|
||||
- 8.8.8.8
|
||||
- 8.8.4.4
|
||||
- 8.8.4.4
|
||||
vpn_network: 10.19.48.0/24
|
||||
|
||||
users:
|
||||
- mr.smith
|
||||
|
|
|
@ -62,7 +62,7 @@
|
|||
chain: PREROUTING
|
||||
protocol: udp
|
||||
destination_port: 53
|
||||
source: 10.0.0.0/24
|
||||
source: "{{ vpn_network }}"
|
||||
jump: DNAT
|
||||
to_destination: 172.16.0.1:53
|
||||
notify:
|
||||
|
|
|
@ -22,7 +22,7 @@ conn %default
|
|||
|
||||
right=%any
|
||||
rightauth=pubkey
|
||||
rightsourceip=10.0.0.0/24
|
||||
rightsourceip="{{ vpn_network }""
|
||||
{% if service_dns is defined and service_dns == "N" %}
|
||||
rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %}
|
||||
{% else %}
|
||||
|
|
2
vpn.yml
2
vpn.yml
|
@ -28,7 +28,7 @@
|
|||
- netfilter-persistent
|
||||
|
||||
- name: Configure iptables so IPSec traffic can traverse the tunnel
|
||||
iptables: table=nat chain=POSTROUTING source=10.0.0.0/24 jump=MASQUERADE
|
||||
iptables: table=nat chain=POSTROUTING source="{{ vpn_network }}" jump=MASQUERADE
|
||||
notify:
|
||||
- save iptables
|
||||
|
||||
|
|
Loading…
Add table
Reference in a new issue