sprinterfreak/ansible-ffrgb
1
0
Fork 0
forked from FF-RGB/ansible
Code Pull Requests 1 Releases Activity

exit_ip: add support for NAT pools

Browse Source
This commit is contained in:
Markus 2021-08-03 18:19:26 +02:00
parent ad4b92cc7a
commit 44fc0e626e
3 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
host_vars/gw31.regensburg.freifunk.net
View File

@ -18,3 +18,5 @@ fastd_port: 10030
gateway_id: 31 gateway_id: 31
site_code: ffrgb_tst site_code: ffrgb_tst
nat_pool: 194.156.22.32-194.156.22.33

1
roles/exit_ip/defaults/main.yml
View File

@ -2,3 +2,4 @@
conntrack_max: 131072 conntrack_max: 131072
fastd_instances: 3 fastd_instances: 3
nat_pool: "{{ ansible_default_ipv4.address }}"

2
roles/exit_ip/templates/rules.v4.j2
View File

@ -4,7 +4,7 @@
:INPUT ACCEPT [1:136] :INPUT ACCEPT [1:136]
:OUTPUT ACCEPT [2:472] :OUTPUT ACCEPT [2:472]
:POSTROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o {{ ansible_default_ipv4.interface }} -j MASQUERADE -A POSTROUTING -o {{ ansible_default_ipv4.interface }} -j SNAT --to-source {{ nat_pool }}
COMMIT COMMIT
*filter *filter
:INPUT ACCEPT [1124:131621] :INPUT ACCEPT [1124:131621]