Skip to content

Edit network rules script #6086

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 2 commits into
base: develop
Choose a base branch
from
+22 −0
Draft

Edit network rules script #6086

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a43a4f1
Edit network rules script
benedettadavico Oct 3, 2025
f6ad6e9
Update network_tunnel_manager.sh
benedettadavico Oct 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions scripts/network_tunnel_manager.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -223,6 +223,24 @@ configure_dns_and_icmp_wg() {
echo "dns and icmp configuration completed."
}

enable_bandwidth_metadata_endpoint() {
echo "allowing inbound TCP on port 51830 on interface nymwg (IPv4 and IPv6)..."

# IPv4
sudo iptables -A INPUT -i "$wg_tunnel_interface" -p tcp --dport 51830 -j ACCEPT
sudo iptables -A OUTPUT -o "$wg_tunnel_interface" -p tcp --dport 51830 -j ACCEPT

# IPv6
sudo ip6tables -A INPUT -i "$wg_tunnel_interface" -p tcp --dport 51830 -j ACCEPT
sudo ip6tables -A OUTPUT -o "$wg_tunnel_interface" -p tcp --dport 51830 -j ACCEPT

echo "saving iptables rules..."
sudo iptables-save | sudo tee /etc/iptables/rules.v4
sudo ip6tables-save | sudo tee /etc/iptables/rules.v6

echo "allow rule for TCP/51830 on nymwg applied."
}

case "$1" in
fetch_ipv6_address_nym_tun)
fetch_ipv6_address "$tunnel_interface"
Expand Down Expand Up @@ -260,6 +278,9 @@ joke_through_wg_tunnel)
configure_dns_and_icmp_wg)
configure_dns_and_icmp_wg
;;
enable_bandwidth_metadata_endpoint)
enable_bandwidth_metadata_endpoint
;;
adjust_ip_forwarding)
adjust_ip_forwarding
;;
Expand All @@ -281,6 +302,7 @@ remove_duplicate_rules)
echo " joke_through_the_mixnet - Fetch a joke via nymtun0."
echo " joke_through_wg_tunnel - Fetch a joke via nymwg."
echo " configure_dns_and_icmp_wg - Allows icmp ping tests for probes alongside configuring dns"
echo " enable_bandwidth_metadata_endpoint - Allow port to enable wireguard metadata endpoint"
echo " adjust_ip_forwarding - Enable IPV6 and IPV4 forwarding"
echo " remove_duplicate_rules <interface> - Remove duplicate iptables rules. Valid interfaces: nymwg, nymtun0"
exit 1
Expand Down
Loading