# Modified by hwdsl2 VPN script

#本機的設定已經可以讀取192.168.9.0/24的區域網路
#本機的所有vpn網段都改成192.168.9.0
#xl2tp
#ipsec
#pptp
#僅openvpn 仍維持舊設定

# Generated by iptables-save v1.6.1 on Wed Mar 31 19:29:04 2021
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]


#2022-06-03
-A POSTROUTING -s 192.168.9.0/24 -o ppp0 -m policy --dir out --pol none -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/24 -o ppp0 -j MASQUERADE



COMMIT
# Completed on Wed Mar 31 19:29:04 2021
# Generated by iptables-save v1.6.1 on Wed Mar 31 19:29:04 2021
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p udp -m udp --dport 1701 -m policy --dir in --pol none -j DROP
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT
-A INPUT -p udp -m udp --dport 1701 -m policy --dir in --pol ipsec -j ACCEPT
-A INPUT -p udp -m udp --dport 1701 -j DROP
-A INPUT -p udp -m udp --dport 1194 -j ACCEPT
-A FORWARD -m conntrack --ctstate INVALID -j DROP
-A FORWARD -i ppp0 -o ppp+ -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ppp+ -o ppp0 -j ACCEPT
-A FORWARD -s 192.168.42.0/24 -d 192.168.42.0/24 -i ppp+ -o ppp+ -j ACCEPT

###2022-06-02
-A FORWARD -d 192.168.9.0/24 -i eth1 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

-A FORWARD -s 192.168.9.0/24 -o eth1 -j ACCEPT

-A FORWARD -j DROP



COMMIT
# Completed on Wed Mar 31 19:29:04 2021
# Generated by iptables-save v1.6.1 on Wed Mar 31 19:29:04 2021
*mangle
:PREROUTING ACCEPT [801624:517175406]
:INPUT ACCEPT [801624:517175406]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [482911:1526567773]
:POSTROUTING ACCEPT [482911:1526567773]
-A FORWARD -o ppp0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:65495 -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Wed Mar 31 19:29:04 2021