add-vpn-mangle.rsc
· 996 B · Text
Raw
:do {
:local vpnCidr "192.168.99.0/24"
:local vpnAddressListExists [:len [/ip firewall address-list find where list="VPN" and address="$vpnCidr"]]
:if ($vpnAddressListExists = 0) do={
/ip firewall address-list add address="$vpnCidr" disabled=no dynamic=no list=VPN
}
} on-error={
:log warning "Errror creating VPN address list"
}
:do {
:local vpnAcceptExists [:len [/ip/firewall/mangle/find where action="accept" and chain="prerouting" and dst-address-list="VPN" ]]
:local vpnAcceptDisabled [:len [/ip/firewall/mangle/find where action="accept" and chain="prerouting" and dst-address-list="VPN" and disabled=yes ]]
:if ($vpnAcceptExists = 0 ) do={
/ip firewall mangle print
/ip firewall mangle add action=accept chain=prerouting dst-address-list=VPN place-before=0
}
:if ($vpnAcceptDisabled > 0) do={
/ip firewall mangle set [find where action=accept and chain=prerouting and dst-address-list=VPN ] disabled=no
}
} on-error={
:log warning "Errror creating VPN mangle rule"
}
| 1 | :do { |
| 2 | :local vpnCidr "192.168.99.0/24" |
| 3 | :local vpnAddressListExists [:len [/ip firewall address-list find where list="VPN" and address="$vpnCidr"]] |
| 4 | :if ($vpnAddressListExists = 0) do={ |
| 5 | /ip firewall address-list add address="$vpnCidr" disabled=no dynamic=no list=VPN |
| 6 | } |
| 7 | } on-error={ |
| 8 | :log warning "Errror creating VPN address list" |
| 9 | } |
| 10 | |
| 11 | :do { |
| 12 | :local vpnAcceptExists [:len [/ip/firewall/mangle/find where action="accept" and chain="prerouting" and dst-address-list="VPN" ]] |
| 13 | :local vpnAcceptDisabled [:len [/ip/firewall/mangle/find where action="accept" and chain="prerouting" and dst-address-list="VPN" and disabled=yes ]] |
| 14 | :if ($vpnAcceptExists = 0 ) do={ |
| 15 | /ip firewall mangle print |
| 16 | /ip firewall mangle add action=accept chain=prerouting dst-address-list=VPN place-before=0 |
| 17 | } |
| 18 | :if ($vpnAcceptDisabled > 0) do={ |
| 19 | /ip firewall mangle set [find where action=accept and chain=prerouting and dst-address-list=VPN ] disabled=no |
| 20 | } |
| 21 | } on-error={ |
| 22 | :log warning "Errror creating VPN mangle rule" |
| 23 | } |
| 24 |