AZEN-SGG/amnezia-client
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge 924fda7c80 into 979ab42c5a

Browse source
This commit is contained in:
Peter Galonza 2025-06-30 02:39:37 +00:00 • committed by GitHub
commit 1d17b81ded
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 35 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
client/server_scripts/awg/start.sh
View file

@ -11,6 +11,11 @@ wg-quick down /opt/amnezia/awg/wg0.conf
# start daemons if configured # start daemons if configured
if [ -f /opt/amnezia/awg/wg0.conf ]; then (wg-quick up /opt/amnezia/awg/wg0.conf); fi if [ -f /opt/amnezia/awg/wg0.conf ]; then (wg-quick up /opt/amnezia/awg/wg0.conf); fi
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
ln -sf /sbin/xtables-nft-multi /sbin/iptables
fi
# Allow traffic on the TUN interface. # Allow traffic on the TUN interface.
iptables -A INPUT -i wg0 -j ACCEPT iptables -A INPUT -i wg0 -j ACCEPT
iptables -A FORWARD -i wg0 -j ACCEPT iptables -A FORWARD -i wg0 -j ACCEPT

5
client/server_scripts/openvpn/start.sh
View file

@ -7,6 +7,11 @@ ifconfig eth0:0 $SERVER_IP_ADDRESS netmask 255.255.255.255 up
if [ ! -c /dev/net/tun ]; then mkdir -p /dev/net; mknod /dev/net/tun c 10 200; fi if [ ! -c /dev/net/tun ]; then mkdir -p /dev/net; mknod /dev/net/tun c 10 200; fi
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
ln -sf /sbin/xtables-nft-multi /sbin/iptables
fi
# Allow traffic on the TUN interface. # Allow traffic on the TUN interface.
iptables -A INPUT -i tun0 -j ACCEPT iptables -A INPUT -i tun0 -j ACCEPT
iptables -A FORWARD -i tun0 -j ACCEPT iptables -A FORWARD -i tun0 -j ACCEPT

5
client/server_scripts/openvpn_cloak/start.sh
View file

@ -7,6 +7,11 @@ ifconfig eth0:0 $SERVER_IP_ADDRESS netmask 255.255.255.255 up
if [ ! -c /dev/net/tun ]; then mkdir -p /dev/net; mknod /dev/net/tun c 10 200; fi if [ ! -c /dev/net/tun ]; then mkdir -p /dev/net; mknod /dev/net/tun c 10 200; fi
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
ln -sf /sbin/xtables-nft-multi /sbin/iptables
fi
# Allow traffic on the TUN interface. # Allow traffic on the TUN interface.
iptables -A INPUT -i tun0 -j ACCEPT iptables -A INPUT -i tun0 -j ACCEPT
iptables -A FORWARD -i tun0 -j ACCEPT iptables -A FORWARD -i tun0 -j ACCEPT

5
client/server_scripts/openvpn_shadowsocks/start.sh
View file

@ -7,6 +7,11 @@ ifconfig eth0:0 $SERVER_IP_ADDRESS netmask 255.255.255.255 up
if [ ! -c /dev/net/tun ]; then mkdir -p /dev/net; mknod /dev/net/tun c 10 200; fi if [ ! -c /dev/net/tun ]; then mkdir -p /dev/net; mknod /dev/net/tun c 10 200; fi
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
ln -sf /sbin/xtables-nft-multi /sbin/iptables
fi
# Allow traffic on the TUN interface. # Allow traffic on the TUN interface.
iptables -A INPUT -i tun0 -j ACCEPT iptables -A INPUT -i tun0 -j ACCEPT
iptables -A FORWARD -i tun0 -j ACCEPT iptables -A FORWARD -i tun0 -j ACCEPT

5
client/server_scripts/prepare_host.sh
View file

@ -7,3 +7,8 @@ if ! sudo docker network ls | grep -q amnezia-dns-net; then sudo docker network
--opt com.docker.network.bridge.name=amn0 \ --opt com.docker.network.bridge.name=amn0 \
amnezia-dns-net;\ amnezia-dns-net;\
fi fi
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
sudo update-alternatives --set iptables /usr/sbin/iptables-nft
fi

5
client/server_scripts/wireguard/start.sh
View file

@ -11,6 +11,11 @@ wg-quick down /opt/amnezia/wireguard/wg0.conf
# start daemons if configured # start daemons if configured
if [ -f /opt/amnezia/wireguard/wg0.conf ]; then (wg-quick up /opt/amnezia/wireguard/wg0.conf); fi if [ -f /opt/amnezia/wireguard/wg0.conf ]; then (wg-quick up /opt/amnezia/wireguard/wg0.conf); fi
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
ln -sf /sbin/xtables-nft-multi /sbin/iptables
fi
# Allow traffic on the TUN interface. # Allow traffic on the TUN interface.
iptables -A INPUT -i wg0 -j ACCEPT iptables -A INPUT -i wg0 -j ACCEPT
iptables -A FORWARD -i wg0 -j ACCEPT iptables -A FORWARD -i wg0 -j ACCEPT

5
client/server_scripts/xray/start.sh
View file

@ -5,6 +5,11 @@
echo "Container startup" echo "Container startup"
#ifconfig eth0:0 $SERVER_IP_ADDRESS netmask 255.255.255.255 up #ifconfig eth0:0 $SERVER_IP_ADDRESS netmask 255.255.255.255 up
# check if nf_tables is loaded
if lsmod | grep -qw nf_tables; then
ln -sf /sbin/xtables-nft-multi /sbin/iptables
fi
iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT iptables -A INPUT -p icmp -j ACCEPT