Commit Graph

63 Commits

Author SHA1 Message Date
Callan Bryant
45b61f8a63
support ExternalHostname which has precedence over IPs 2020-11-29 18:34:05 +00:00
Andre Kelpe
e782db30e9 Implements PostUp and PostDown commands using /bin/sh
This introduces PostUp and PostDown in dsnet. PostUp and PostDown allow
the user to run arbitrary commands after the device is up or down. These
are typically used to change the firewall rules via iptables. A working
example would be

...
    "PostUp" : "iptables -A FORWARD -i dsnet -j ACCEPT; iptables -A FORWARD -o dsnet -j ACCEPT; iptables -t nat -A POSTROUTING -o ens2 -j MASQUERADE ",
    "PostDown" : "iptables -D FORWARD -i dsnet -j ACCEPT; iptables -D FORWARD -o dsnet -j ACCEPT; iptables -t nat -D POSTROUTING -o ens2 -j MASQUERADE ",
...

All commands are executed by `/bin/sh` and no filtering or sandboxing is
applied. Users of this should know what they are doing.

Fixes https://github.com/naggie/dsnet/issues/16
2020-11-19 23:21:11 +01:00
Callan Bryant
d042250c1a
create deterministic wg interface names for vyatta 2020-10-30 13:02:46 +00:00
Callan Bryant
4ad58382f6
go fmt 2020-10-28 00:39:15 +00:00
Callan Bryant
112379c70a
remove redundant allowed IP enumeration 2020-10-27 22:00:21 +00:00
Callan Bryant
0481996116
add allowedIPs conditionally 2020-10-27 21:57:44 +00:00
Callan Bryant
ddb0b4c549
conditional IPv4/6 and fix vyatta 2020-10-27 21:03:45 +00:00
Callan Bryant
63b22e0554
only save peer allowed IP of net version is defined 2020-10-27 00:00:38 +00:00
Callan Bryant
5477a321b2
fix CIDR notation for Peer IPs 2020-10-26 23:37:19 +00:00
Callan Bryant
dfd617273b
add missing bracket 2020-10-26 22:47:48 +00:00
Callan Bryant
34ff77b27a
...also for vyatta 2020-10-26 21:39:55 +00:00
Callan Bryant
5a870dab60
use ExternalIP6 if ExternalIP not available 2020-10-26 18:27:35 +00:00
Callan Bryant
f57fa3473d
fix lookup of v6: do not require 2020-10-26 17:58:15 +00:00
Callan Bryant
7bbe28a145
add CIDR subnet properly 2020-10-26 08:08:39 +00:00
Callan Bryant
e7da49c1a8
don't use string respresentations unnecessarily 2020-10-25 22:59:57 +00:00
Callan Bryant
e7fb9dc5ce
IPv6 config to template 2020-10-25 22:56:49 +00:00
Callan Bryant
f7f06f00fa
check for IP networks before allocating 2020-10-25 22:27:33 +00:00
Callan Bryant
19f25ff847
working psudorandom v6 allocator 2020-10-25 14:57:18 +00:00
Callan Bryant
64a73d18ed
rename getULA to getULAnet 2020-10-25 10:06:25 +00:00
Callan Bryant
af3e1b2ea9
make allocation universal, given a network 2020-10-25 08:23:43 +00:00
Callan Bryant
952cb44110
user InterfaceName for interface description 2020-10-19 18:23:59 +01:00
Callan Bryant
53483ffaee
set interface description 2020-10-19 03:37:21 +01:00
Callan Bryant
0f7ea82d8b
correct preshared-key association 2020-10-19 19:25:56 +01:00
Callan Bryant
ce9091e8bc
add missing pubkey 2020-10-19 03:17:06 +01:00
Callan Bryant
fceddc55dd
choose a valid edgeos interface name 2020-10-19 17:52:54 +01:00
Callan Bryant
d0e8eb74ec
remove [Interfaces] left over from before, re-order 2020-10-19 17:49:36 +01:00
Callan Bryant
b38e0966eb
write correct netmask to conf files 2020-10-19 00:27:39 +01:00
Callan Bryant
a361bffa3c
hardcode in a /22 until fixed correctly 2020-10-19 00:15:42 +01:00
Callan Bryant
d1d0113832
Optionally generate vyatta commands 2020-10-19 00:05:55 +01:00
Callan Bryant
1e046a20a1
record added time 2020-03-19 20:12:42 +00:00
Callan Bryant
3277362e6e
no DNS by default 2020-03-16 19:29:16 +00:00
Callan Bryant
a35ab76c22
exact check for number of args 2020-03-14 14:51:49 +00:00
Callan Bryant
d250f2b23b
support additional networks 2020-03-08 20:48:10 +00:00
Callan Bryant
8fd1114f01
remove comment 2020-03-07 22:10:23 +00:00
Callan Bryant
17b0ad74ae
peer online count in report 2020-03-07 21:57:00 +00:00
Callan Bryant
5f735112f2
use keepalive const in template 2020-03-07 14:36:14 +00:00
Callan Bryant
78b28be231
correct distribution of PSKs 2020-03-05 22:18:21 +00:00
Callan Bryant
b697afc2ee
add: hostname as arg like remove 2020-03-05 22:13:09 +00:00
Callan Bryant
b7ed21f2ec
embed types without alias properly 2020-03-05 20:46:28 +00:00
Callan Bryant
586292a25a
sync on add/remove 2020-03-05 20:43:31 +00:00
Callan Bryant
d81bd72a5f
make networks required for peer 2020-03-04 19:46:39 +00:00
Callan Bryant
020de337ce
check config file early for init/add 2020-03-03 22:33:48 +00:00
Callan Bryant
c2aac62f27
deal with private IP separately 2020-03-03 22:30:36 +00:00
Callan Bryant
125f3c4e26
working config generation 2020-03-03 21:28:06 +00:00
Callan Bryant
06d1642b16
fallback to icanhazip for external IP detection 2020-03-02 22:31:52 +00:00
Callan Bryant
335d232727
correct single host mask 2020-03-02 21:39:45 +00:00
Callan Bryant
1fdf4fe71f
prompts: stderr< + misc 2020-03-02 21:36:41 +00:00
Callan Bryant
c4cb15c45e
separate internal/external IP 2020-03-02 21:02:21 +00:00
Callan Bryant
e02a1552e9
MustChooseIP -> MustAllocateIP 2020-03-02 20:11:33 +00:00
Callan Bryant
19668c0334
start peer conf file, update README 2020-03-02 19:57:52 +00:00