From 02720e2dfff4dd831ddf6e03c59b7c37b8e2395a Mon Sep 17 00:00:00 2001
From: nutcas3 <mauricee423@gmail.com>
Date: Tue, 14 Apr 2026 02:58:24 +0300
Subject: [PATCH] feat: Add iptables configuration script for free5GC UPF

- Add shell script to configure UPF (User Plane Function) iptables rules
- Flush existing filter, nat, and mangle tables
- Configure NAT masquerading on eth0 interface
- Set up forwarding rules for uesimtun0 tunnel interface
- Enable bidirectional traffic flow between UE tunnel and external network
---
 deployments/free5gc/upf-iptables.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100755 deployments/free5gc/upf-iptables.sh

diff --git a/deployments/free5gc/upf-iptables.sh b/deployments/free5gc/upf-iptables.sh
new file mode 100755
index 0000000..94c763f
--- /dev/null
+++ b/deployments/free5gc/upf-iptables.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+iptables -t filter -F
+iptables -t nat -F
+iptables -t mangle -F
+
+iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
+
+iptables -A FORWARD -i uesimtun0 -o eth0 -j ACCEPT
+iptables -A FORWARD -i eth0 -o uesimtun0 -m state --state RELATED,ESTABLISHED -j ACCEPT
+
+echo "UPF iptables rules configured"