瀏覽代碼

Separate vpn port for mesh

Bob Mottram 7 年之前
父節點
當前提交
35b4222595
共有 2 個檔案被更改,包括 5 行新增2 行删除
  1. 3
    0
      src/freedombone-app-vpn
  2. 2
    2
      src/freedombone-mesh-batman

+ 3
- 0
src/freedombone-app-vpn 查看文件

46
 VPN_UNIT="Freedombone Unit"
46
 VPN_UNIT="Freedombone Unit"
47
 STUNNEL_PORT=3439
47
 STUNNEL_PORT=3439
48
 VPN_TLS_PORT=553
48
 VPN_TLS_PORT=553
49
+VPN_MESH_TLS_PORT=653
49
 
50
 
50
 vpn_variables=(MY_EMAIL_ADDRESS
51
 vpn_variables=(MY_EMAIL_ADDRESS
51
                DEFAULT_DOMAIN_NAME
52
                DEFAULT_DOMAIN_NAME
504
     if [ $rootdir ]; then
505
     if [ $rootdir ]; then
505
         prefix=$rootdir
506
         prefix=$rootdir
506
         prefixchroot="chroot $rootdir"
507
         prefixchroot="chroot $rootdir"
508
+        VPN_TLS_PORT=$VPN_MESH_TLS_PORT
507
     fi
509
     fi
508
 
510
 
509
     $prefixchroot apt-get -yq install stunnel4
511
     $prefixchroot apt-get -yq install stunnel4
634
     if [ $rootdir ]; then
636
     if [ $rootdir ]; then
635
         prefix=$rootdir
637
         prefix=$rootdir
636
         prefixchroot="chroot $rootdir"
638
         prefixchroot="chroot $rootdir"
639
+        VPN_TLS_PORT=$VPN_MESH_TLS_PORT
637
     fi
640
     fi
638
     $prefixchroot apt-get -yq install fastd openvpn easy-rsa
641
     $prefixchroot apt-get -yq install fastd openvpn easy-rsa
639
 
642
 

+ 2
- 2
src/freedombone-mesh-batman 查看文件

159
     iptables -D INPUT -p udp --dport 8008 -j ACCEPT
159
     iptables -D INPUT -p udp --dport 8008 -j ACCEPT
160
     iptables -D INPUT -p tcp --dport 8008 -j ACCEPT
160
     iptables -D INPUT -p tcp --dport 8008 -j ACCEPT
161
     # vpn over the internet
161
     # vpn over the internet
162
-    iptables -D INPUT -p tcp --dport 553 -j ACCEPT
163
-    iptables -D INPUT -p udp --dport 553 -j ACCEPT
162
+    iptables -D INPUT -p tcp --dport 653 -j ACCEPT
163
+    iptables -D INPUT -p udp --dport 653 -j ACCEPT
164
     iptables -D INPUT -i ${EIFACE} -m state --state NEW -p tcp --dport 1194 -j ACCEPT
164
     iptables -D INPUT -i ${EIFACE} -m state --state NEW -p tcp --dport 1194 -j ACCEPT
165
     iptables -D INPUT -i tun+ -j ACCEPT
165
     iptables -D INPUT -i tun+ -j ACCEPT
166
     iptables -D FORWARD -i tun+ -j ACCEPT
166
     iptables -D FORWARD -i tun+ -j ACCEPT