From 5b9d103668a99911e4c11adbe677097186280fb4 Mon Sep 17 00:00:00 2001 From: ngharo Date: Mon, 28 Nov 2016 16:41:27 -0600 Subject: Updates to make weird stuff optional --- README.md | 22 +++++++--------------- 1 file changed, 7 insertions(+), 15 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index c6f2292..791d5b5 100644 --- a/README.md +++ b/README.md @@ -2,23 +2,15 @@ Dual stack capable iptables firewall script ``` +supports two interfaces/addresses plus NAT support for VPN servers + +Terminology used in the script: +"Public" an address where services are available +"Private" (optional) another address where services are available + +Example: public and private are both public facing interfaces but have different ports allowed. e.g. private (1.1.1.2) IP allows SSH and VPN access while public (1.1.1.1) allows HTTP. - -+----------+ +-------------+ -| | "public" | 1.1.1.1 | -| <-----------------> 2001::1 | -| internet | | eth0 | -| <-----------------> 1.1.1.2 | -| | "private" | 2001::2 | -+----------+ +-------------+ - - -+-----------+ +-------------+ -| | 172.16.23.0/24 | | -| VPN <----------------> tun0 | -| | | 172.16.23.1 | -+-----------+ +-------------+ ``` -- cgit v1.2.3