用zola可以快速开发静态website.
Todo list
- github repo for this website
- app upload
- AD video
- EduX 使用教程
- Google ADS fix issue
- Code highlight issue
- Costomers managment (QR, email, IM)
- blockquote format issue
- WireGuard ipv6支持
Some resource used
Use these tools to developt this website quickly.
- text-to-svg
- zola
- markdown
- chatgpt
- rsync
Some achievement
- How to use local images and internet images?
- How to use local video and internet video? (use shortcode to resolve it)
WG 不能回包问题分析
问题描述: peer1 (client) ping 8.8.8.8, peer2(server)能收到8.8.8.8的回报, 但是没有转发到 wg0 上.
#!/bin/bash
# peer2 minimal WG gateway config
WG_IF=wg0
WG_NET=10.99.0.0/24
ETH_IF=eth0 # 出网接口
# 1️⃣ 启用 IPv4 转发
echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward
# 2️⃣ 确认路由表
# 添加 wg0 子网路由（如果没自动添加）
ip route add $WG_NET dev $WG_IF
# 3️⃣ 设置 NAT（Masquerade，让回包匹配 conntrack）
iptables -t nat -A POSTROUTING -o $ETH_IF -j MASQUERADE
# 4️⃣ 设置 FORWARD 规则
# - wg0 → eth0：允许所有包
iptables -A FORWARD -i $WG_IF -o $ETH_IF -j ACCEPT
# - eth0 → wg0：只允许已建立和相关连接的回包
iptables -A FORWARD -i $ETH_IF -o $WG_IF -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
# 5️⃣ 确认默认策略
iptables -P FORWARD ACCEPT
