mirror of
https://github.com/pirate/wireguard-docs.git
synced 2025-04-19 08:55:09 +00:00
e0b8b44652
- On all docs missing value on proxy ARP (1 – enabled, 0 – disabled). - Line 11 'sudo ' not required as all script written for root user.
18 lines
650 B
Bash
18 lines
650 B
Bash
#!/bin/bash
|
|
|
|
# install wireguard
|
|
add-apt-repository ppa:wireguard/wireguard
|
|
apt update
|
|
apt install wireguard
|
|
|
|
# to enable kernel relaying/forwarding ability on bounce servers
|
|
echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf
|
|
echo "net.ipv4.conf.all.proxy_arp = 1" >> /etc/sysctl.conf
|
|
sysctl -p /etc/sysctl.conf
|
|
|
|
# to add iptables forwarding rules on bounce servers
|
|
iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
iptables -A FORWARD -i wg0 -o wg0 -m conntrack --ctstate NEW -j ACCEPT
|
|
iptables -t nat -A POSTROUTING -s 10.0.44.0/24 -o eth0 -j MASQUERADE
|