readme: update rules for routing

This commit is contained in:
Vladimir Avtsenov 2024-08-24 20:17:19 +03:00
parent 854593d879
commit b43791a978

View File

@ -34,12 +34,27 @@ iptables -t nat -D PREROUTING -j ${KVAS2_NAME}_PREROUTING
[2] Example
```bash
KVAS2_NAME=KVAS2
IPSET_TABLE=kvas2
MARK=1
TABLE=100
INTERFACE=ovpn_br0
iptables -t mangle -A PREROUTING -m set --match-set $IPSET_TABLE dst -j MARK --set-mark $MARK
ip rule add fwmark $MARK table $TABLE
ip route add default dev $INTERFACE table $TABLE
iptables -t nat -A POSTROUTING -o $INTERFACE -j MASQUERADE
# Создание правил
iptables -t mangle -N ${KVAS2_NAME}_PREROUTING
iptables -t nat -N ${KVAS2_NAME}_POSTROUTING
iptables -t mangle -A ${KVAS2_NAME}_PREROUTING -m set --match-set ${IPSET_TABLE} dst -j MARK --set-mark ${MARK}
iptables -t nat -A ${KVAS2_NAME}_POSTROUTING -o ${INTERFACE} -j MASQUERADE
# Применение правил
ip rule add fwmark ${MARK} table ${TABLE}
ip route add default dev ${INTERFACE} table ${TABLE}
iptables -t mangle -A PREROUTING -j ${KVAS2_NAME}_PREROUTING
iptables -t nat -A POSTROUTING -j ${KVAS2_NAME}_POSTROUTING
# Удаление правил
ip rule del fwmark ${MARK} table ${TABLE}
ip route del default dev ${INTERFACE} table ${TABLE}
iptables -t mangle -D PREROUTING -j ${KVAS2_NAME}_PREROUTING
iptables -t nat -D POSTROUTING -j ${KVAS2_NAME}_POSTROUTING
```