|
@@ -11,10 +11,10 @@ then
|
|
|
cleanup()
|
|
|
{
|
|
|
ip addr del ${ip}/24 dev ${dev}:ovpn
|
|
|
- iptables -D FORWARD -m state --state NEW -s 10.10.20.0/24 -d ${net}/24 -j DROP
|
|
|
+ iptables -D FORWARD -m state --state NEW -s 10.10.20.0/24 -o external -j DROP
|
|
|
}
|
|
|
ip addr add ${ip}/24 brd + dev ${dev} label ${dev}:ovpn
|
|
|
- iptables -I FORWARD 1 -m state --state NEW -s 10.10.20.0/24 -d ${net}/24 -j DROP
|
|
|
+ iptables -I FORWARD 1 -m state --state NEW -s 10.10.20.0/24 -o external -j DROP
|
|
|
echo "push \"route ${net} 255.255.255.0\"" >> /etc/openvpn/ovpn.conf
|
|
|
exec "/usr/sbin/openvpn" "--config" "/etc/openvpn/ovpn.conf" "$@" &
|
|
|
wait
|