From 8fb59e844f4430ed6900389be546fb854aa550af Mon Sep 17 00:00:00 2001 From: Mengdi Gao Date: Fri, 23 Sep 2016 21:19:14 +0800 Subject: [PATCH] Fix incorrect IPv6 private address, fix #25 --- bin/start-vpn | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bin/start-vpn b/bin/start-vpn index 4bfca83..87b79e4 100755 --- a/bin/start-vpn +++ b/bin/start-vpn @@ -29,8 +29,8 @@ sysctl net.ipv6.conf.all.forwarding=1 sysctl net.ipv6.conf.eth0.proxy_ndp=1 iptables -t nat -A POSTROUTING -s 10.8.0.0/16 -o eth0 -m policy --dir out --pol ipsec -j ACCEPT iptables -t nat -A POSTROUTING -s 10.8.0.0/16 -o eth0 -j MASQUERADE -ip6tables -t nat -A POSTROUTING -s 2a00:1450:400c:c05::/64 -o eth0 -m policy --dir out --pol ipsec -j ACCEPT -ip6tables -t nat -A POSTROUTING -s 2a00:1450:400c:c05::/64 -o eth0 -j MASQUERADE +ip6tables -t nat -A POSTROUTING -s fd6a:6ce3:c8d8:7caa::/64 -o eth0 -m policy --dir out --pol ipsec -j ACCEPT +ip6tables -t nat -A POSTROUTING -s fd6a:6ce3:c8d8:7caa::/64 -o eth0 -j MASQUERADE # hotfix for openssl `unable to write 'random state'` stderr SHARED_SECRET="123$(openssl rand -base64 32 2>/dev/null)"