#!/bin/sh
# This script must be run as root after connection to the VPN has been made
# so that "tun0" adaptator is up and configured

# Disable default in/out - block all connections
ufw default deny outgoing
ufw default deny incoming

# Allow tun0
ufw allow out on tun0 from any to any
ufw allow in on tun0 from any to any

# Allow VPN IPs
#ufw allow out from any to 136.0.0.90
# ch 16
#ufw allow out from any to 84.39.112.123
# es 14
#ufw allow out from any to 185.183.106.227
# fr 100
#ufw allow out from any to 185.128.25.59
# nl 105
#ufw allow out from any to 109.236.81.71
# uk
ufw allow out from any to 81.92.203.109

# allow local net -WARNING TODO ALLOW ALL LOCAL NET PROBABLY WITH 192.168.1.*
ufw allow out from any to 192.168.1.2

# virtual box windows
####ufw allow out from any to 192.168.0.20

# Printer
####ufw allow out from any to 192.168.0.17

# Enable
ufw enable

# Status
ufw status
echo press enter.
read k