diff --git a/etc/rc.local b/etc/rc.local index db9bb24..bc2ad9f 100755 --- a/etc/rc.local +++ b/etc/rc.local @@ -70,10 +70,14 @@ ip6tables -A OUTPUT -d $clearnet -j ACCEPT ip6tables -A INPUT -p ipv6-icmp -j ACCEPT ip6tables -A OUTPUT -p ipv6-icmp -j ACCEPT #allow querriying ntp servers (must mach /etc/systemd/timesyncd.conf -for clearnet in 88.191.68.178 51.15.142.60 51.255.197.148 91.121.181.58; do( +for clearnet in 164.68.124.74 185.244.195.159 78.46.53.2 88.99.86.9; do( iptables -t nat -A OUTPUT -p udp --dport 123 -d $clearnet -j RETURN iptables -A OUTPUT -p udp --dport 123 -d $clearnet -j ACCEPT )done +for clearnet in 2a02:c207:3004:9819::1 2a03:4000:27:602:d4cf:50ff:fedb:b65a 2a01:4f8:110:12d5::2 2a01:4f8:c17:b041::1; do( +ip6tables -t nat -A OUTPUT -p udp --dport 123 -d $clearnet -j RETURN +ip6tables -A OUTPUT -p udp --dport 123 -d $clearnet -j ACCEPT +)done #redirect all outgoing DNS querries to our dns server iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 53 ip6tables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 53 diff --git a/etc/systemd/timesyncd.conf b/etc/systemd/timesyncd.conf index af7bf6d..a831917 100644 --- a/etc/systemd/timesyncd.conf +++ b/etc/systemd/timesyncd.conf @@ -12,6 +12,6 @@ # See timesyncd.conf(5) for details. [Time] -Servers=88.191.68.178 51.15.142.60 51.255.197.148 91.121.181.58 +Servers=164.68.124.74 185.244.195.159 78.46.53.2 88.99.86.9 2a02:c207:3004:9819::1 2a03:4000:27:602:d4cf:50ff:fedb:b65a 2a01:4f8:110:12d5::2 2a01:4f8:c17:b041::1 #NTP= #FallbackNTP=0.debian.pool.ntp.org 1.debian.pool.ntp.org 2.debian.pool.ntp.org 3.debian.pool.ntp.org