added whitelist for uplinks

6 years ago · 4bfc6f1e29
parent 587d37b5f1
commit 4bfc6f1e29
1 changed files with 5 additions and 1 deletions
--- a/roles/install_babeld/templates/babeld.conf.j2
+++ b/roles/install_babeld/templates/babeld.conf.j2
@ -38,7 +38,11 @@ reflect-kernel-metric true

 # Filtering rules.
 {% if 'uplink' in group_names %}
-in le 0 deny # ignore default routes on uplinks
+in ip 10.222.0.0/16 allow
+in ip 2a03:2260:1016::/48 allow
+in ip 2003:46:e028::/48 allow # finzelberg
+in ip fd62:44e1:da::/48 allow
+in deny # ignore default routes on uplinks
 {% endif %}

 {% if 'mullvad_uplink' in group_names %}