mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-22 04:56:03 +03:00
Code Issues Projects Releases Wiki Activity

Fix for CentOS 9

Browse Source 
- Fixed an issue with nftables on CentOS 9/8, where users may
  encounter the error "unsupported xtables compat expression"
  during VPN setup.
This commit is contained in:
hwdsl2 2024-05-01 20:35:02 -05:00
parent 30a46a0e15
commit bf965cfd18
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
vpnsetup_centos.sh
View File

@ -624,7 +624,11 @@ update_iptables() {
if [ "$use_nft" != 1 ]; then if [ "$use_nft" != 1 ]; then
iptables -A FORWARD -j DROP iptables -A FORWARD -j DROP
fi fi
if [ "$use_nft" = 1 ]; then
$ipp -s "$XAUTH_NET" -o "$NET_IFACE" ! -d "$XAUTH_NET" -j MASQUERADE
else
$ipp -s "$XAUTH_NET" -o "$NET_IFACE" -m policy --dir out --pol none -j MASQUERADE $ipp -s "$XAUTH_NET" -o "$NET_IFACE" -m policy --dir out --pol none -j MASQUERADE
fi
$ipp -s "$L2TP_NET" -o "$NET_IFACE" -j MASQUERADE $ipp -s "$L2TP_NET" -o "$NET_IFACE" -j MASQUERADE
echo "# Modified by hwdsl2 VPN script" > "$IPT_FILE" echo "# Modified by hwdsl2 VPN script" > "$IPT_FILE"
if [ "$use_nft" = 1 ]; then if [ "$use_nft" = 1 ]; then