overthebox: Accept all packets from our tunnel

Signed-off-by: Adrien Gallouët <[email protected]>

Author: angt

overthebox/files/bin/otb-action-configure

@@ -51,9 +51,18 @@ _setup_glorytun_mud() {
 	set network.\(.dev).type=tunnel
 	set network.\(.dev).multipath=off
 	set network.\(.dev).generatedby='"$ME"'
+
 	del_list firewall.tun.network=\(.dev)
 	add_list firewall.tun.network=\(.dev)
 
+	set firewall.accept_glorytun_wan=rule
+	set firewall.accept_glorytun_wan.name=accept_glorytun_wan
+	set firewall.accept_glorytun_wan.target=ACCEPT
+	set firewall.accept_glorytun_wan.src=wan
+	set firewall.accept_glorytun_wan.proto=udp
+	set firewall.accept_glorytun_wan.src_ip=\(.server)
+	set firewall.accept_glorytun_wan.src_port=\(.port)
+
 	set network.\(.dev)_rule=rule
 	set network.\(.dev)_rule.lookup=\(.table)
 	set network.\(.dev)_rule.priority=30000

overthebox/files/bin/otb-configure-glorytun

@@ -45,9 +45,18 @@ set network.tun0.txqueuelen=1000
 set network.tun0.type=tunnel
 set network.tun0.multipath=off
 set network.tun0.generatedby=$ME
+
 del_list firewall.tun.network=tun0
 add_list firewall.tun.network=tun0
 
+set firewall.accept_glorytun_wan=rule
+set firewall.accept_glorytun_wan.name=accept_glorytun_wan
+set firewall.accept_glorytun_wan.target=ACCEPT
+set firewall.accept_glorytun_wan.src=wan
+set firewall.accept_glorytun_wan.proto=udp
+set firewall.accept_glorytun_wan.src_ip=$SERVER
+set firewall.accept_glorytun_wan.src_port=${PORT:-$_PORT}
+
 set network.tun0_rule=rule
 set network.tun0_rule.lookup=100
 set network.tun0_rule.priority=30000