Browse Source

Fix port forwarding with FORWARD set to DROP by default

tags/v2.01a1
bbruns 7 years ago
parent
commit
fe07e06ad0
1 changed files with 2 additions and 1 deletions
  1. +2
    -1
      lib/iptables.inc

+ 2
- 1
lib/iptables.inc View File

@@ -593,6 +593,7 @@ function enable_portfw {
[[ ${protocol} != "-" ]] && protocol="-p ${protocol}"
[[ ${intip} != "-" ]] && intdest="--to-destination ${intip}:${intport}"
[[ ${interface} != "-" ]] && interface="-i ${interface}"
[[ ${intip} != "-" ]] && intip="-d ${intip}"
[[ ${address} != "-" ]] && address="-d ${address}"
[[ ${srcaddress} != "-" ]] && srcaddress="-s ${srcaddress}"
@@ -604,7 +605,7 @@ function enable_portfw {
[[ ${srcaddress} == "-" ]] && srcaddress=""
${VER_IPTABLES} -A ${PortForward} -t nat ${protocol} ${service} ${interface} ${address} ${srcaddress} -j DNAT ${intdest}
${VER_IPTABLES} -A ${InFilter} ${protocol} ${service} ${interface} ${address} ${srcaddress} ${conntrack_state} -j ACCEPT
${VER_IPTABLES} -A ${FwdFilter} ${protocol} ${service} ${interface} ${intip} ${srcaddress} ${conntrack_state} -j ACCEPT
done < "${FWCONFIGDIR}/ipv${IPVER}/portfw.conf"
${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} done"


Loading…
Cancel
Save