freifunk/ansible-ffibk
9
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Role network-iptables-gateway: rename var internet_exit_mtu_ipv[4|6] to internet_exit_tcp_mss_ipv[4|6]

Browse source
This commit is contained in:
Tobias Hachmer 2017-10-04 12:55:29 +02:00
parent b46be69a26
commit cc43741a91
4 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
inventory/group_vars/all
View file

@ -2,8 +2,8 @@
as_private_mwu: 65037 as_private_mwu: 65037
as_public_ffrl: 201701 as_public_ffrl: 201701
internet_exit_mtu_ipv4: 1240 internet_exit_tcp_mss_ipv4: 1240
internet_exit_mtu_ipv6: 1220 internet_exit_tcp_mss_ipv6: 1220
routing_tables: routing_tables:
icvpn: 23 icvpn: 23

4
roles/network-iptables-gateway/README.md
View file

@ -24,6 +24,6 @@ meshes:
... ...
´´´ ´´´
- Variable `internet_exit_mtu_ipv4` - Variable `internet_exit_tcp_mss_ipv4`
- Variable `internet_exit_mtu_ipv6` - Variable `internet_exit_tcp_mss_ipv6`
- Host Variable `ffrl_public_ipv4_nat` # Format ip-adresse/prefix - Host Variable `ffrl_public_ipv4_nat` # Format ip-adresse/prefix

2
roles/network-iptables-gateway/templates/rules.v4.j2
View file

@ -23,7 +23,7 @@ COMMIT
:FORWARD ACCEPT [0:0] :FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ffrl+ -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss ! --mss 0:{{ internet_exit_mtu_ipv4 }} -j TCPMSS --set-mss {{ internet_exit_mtu_ipv4 }} -A POSTROUTING -o ffrl+ -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss ! --mss 0:{{ internet_exit_tcp_mss_ipv4 }} -j TCPMSS --set-mss {{ internet_exit_tcp_mss_ipv4 }}
COMMIT COMMIT
*nat *nat
:PREROUTING ACCEPT [0:0] :PREROUTING ACCEPT [0:0]

2
roles/network-iptables-gateway/templates/rules.v6.j2
View file

@ -21,7 +21,7 @@ COMMIT
:FORWARD ACCEPT [0:0] :FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ffrl+ -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss ! --mss 0:{{ internet_exit_mtu_ipv6 }} -j TCPMSS --set-mss {{ internet_exit_mtu_ipv6 }} -A POSTROUTING -o ffrl+ -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss ! --mss 0:{{ internet_exit_tcp_mss_ipv6 }} -j TCPMSS --set-mss {{ internet_exit_tcp_mss_ipv6 }}
COMMIT COMMIT
*nat *nat
:PREROUTING ACCEPT [0:0] :PREROUTING ACCEPT [0:0]