From a2b1278038b7a710bd66f98cbe51e0e37ca2ea6e Mon Sep 17 00:00:00 2001 From: CallMeR <9463297+callmer@user.noreply.gitee.com> Date: Tue, 28 Nov 2023 21:52:29 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=E5=A4=87=E6=B3=A8?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/debian/debian_ts_99_sysctl.conf | 2 +- src/debian/debian_ts_dnsmasq.conf | 2 +- src/debian/debian_ts_lo_network.conf | 2 +- src/debian/debian_ts_nftables.conf | 16 ++++++++-------- src/debian/debian_ts_resolv.conf | 2 +- 5 files changed, 12 insertions(+), 12 deletions(-) diff --git a/src/debian/debian_ts_99_sysctl.conf b/src/debian/debian_ts_99_sysctl.conf index 347700a..4956966 100644 --- a/src/debian/debian_ts_99_sysctl.conf +++ b/src/debian/debian_ts_99_sysctl.conf @@ -1,5 +1,5 @@ # This configuration file is customized by fox, -# Optimize sysctl parameters for Linux Router. +# Optimize sysctl parameters for local TS server. kernel.panic = 20 kernel.panic_on_oops = 1 diff --git a/src/debian/debian_ts_dnsmasq.conf b/src/debian/debian_ts_dnsmasq.conf index 1c58c5d..40db8ca 100644 --- a/src/debian/debian_ts_dnsmasq.conf +++ b/src/debian/debian_ts_dnsmasq.conf @@ -1,5 +1,5 @@ # This configuration file is customized by fox, -# Optimize dnsmasq parameters for local DNS server. +# Optimize dnsmasq parameters for local TS server. # Main Config diff --git a/src/debian/debian_ts_lo_network.conf b/src/debian/debian_ts_lo_network.conf index 32e6dbe..cb33d83 100644 --- a/src/debian/debian_ts_lo_network.conf +++ b/src/debian/debian_ts_lo_network.conf @@ -1,5 +1,5 @@ # This configuration file is customized by fox, -# Optimize for lo network. +# Optimize lo network for local TS server. [Match] Name=lo diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf index ebadb0b..5ea0cde 100644 --- a/src/debian/debian_ts_nftables.conf +++ b/src/debian/debian_ts_nftables.conf @@ -1,7 +1,7 @@ #!/usr/sbin/nft -f # This configuration file is customized by fox, -# Optimize nftables rules for Linux Router. +# Optimize nftables rules for local TS server. table inet router flush table inet router @@ -29,7 +29,7 @@ table inet router { ct state invalid counter drop comment "defconf: drop input flows with invalid conntrack state" tcp flags & (fin | syn | rst | ack) == syn counter jump syn_flood comment "defconf: rate limit TCP-SYN packets" iifname "eth0" jump input_lan comment "defconf: handle LAN IPv4 / IPv6 input traffic" - iifname "tailscale0" jump input_tailscale comment "defconf: handle Tailscale IPv4 / IPv6 input traffic" + iifname "tailscale0" jump input_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 input traffic" } chain forward { @@ -38,7 +38,7 @@ table inet router { ct state established,related accept comment "defconf: allow forwarded established and related flows" ct state invalid counter drop comment "defconf: drop forward flows with invalid conntrack state" iifname "eth0" jump forward_lan comment "defconf: handle LAN IPv4 / IPv6 forward traffic" - iifname "tailscale0" jump forward_tailscale comment "defconf: handle Tailscale IPv4 / IPv6 forward traffic" + iifname "tailscale0" jump forward_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 forward traffic" } chain output { @@ -47,7 +47,7 @@ table inet router { ct state established,related accept comment "defconf: allow outbound established and related flows" ct state invalid counter drop comment "defconf: drop output flows with invalid conntrack state" oifname "eth0" jump output_lan comment "defconf: handle LAN IPv4 / IPv6 output traffic" - oifname "tailscale0" jump output_tailscale comment "defconf: handle Tailscale IPv4 / IPv6 output traffic" + oifname "tailscale0" jump output_tailscale comment "tsconf: handle Tailscale IPv4 / IPv6 output traffic" } chain prerouting { @@ -66,7 +66,7 @@ table inet router { } chain forward_lan { - jump accept_to_tailscale comment "lanconf: accept Tailscale forward" + jump accept_to_tailscale comment "tsconf: accept Tailscale forward" ct status dnat counter accept comment "lanconf: accept port forward" jump accept_to_lan } @@ -96,16 +96,16 @@ table inet router { } chain forward_tailscale { - jump accept_to_lan comment "defconf: accept Tailscale to LAN forward" + jump accept_to_lan comment "tsconf: accept Tailscale to LAN forward" jump accept_to_tailscale } chain accept_from_tailscale { - iifname "tailscale0" counter accept comment "defconf: accept Tailscale IPv4 / IPv6 traffic" + iifname "tailscale0" counter accept comment "tsconf: accept Tailscale IPv4 / IPv6 traffic" } chain accept_to_tailscale { - oifname "tailscale0" counter accept comment "defconf: accept Tailscale IPv4 / IPv6 traffic" + oifname "tailscale0" counter accept comment "tsconf: accept Tailscale IPv4 / IPv6 traffic" } diff --git a/src/debian/debian_ts_resolv.conf b/src/debian/debian_ts_resolv.conf index e0ad0ac..f021e7d 100644 --- a/src/debian/debian_ts_resolv.conf +++ b/src/debian/debian_ts_resolv.conf @@ -1,5 +1,5 @@ # This configuration file is customized by fox, -# Optimize system resolve parameters for Linux Router. +# Optimize system resolve parameters for local TS server. # # For use local domain, # please modify 'search' parameter according to