diff options
| author | tv <tv@krebsco.de> | 2020-10-17 01:00:54 +0200 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2020-10-17 01:00:54 +0200 |
| commit | b034f63f7a2e4361b32c33c0e1a980eecf1a5aa6 (patch) | |
| tree | a14a685952924182f998f0c8e7814bb750d1fac8 /tv/3modules | |
| parent | 4d5c1b6dbed3c07c030e1dfe9f033f707608d84a (diff) | |
tv iptables: move sshd stuff to sshd config
Diffstat (limited to 'tv/3modules')
| -rw-r--r-- | tv/3modules/iptables.nix | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/tv/3modules/iptables.nix b/tv/3modules/iptables.nix index 3974760d..9cf0bd5a 100644 --- a/tv/3modules/iptables.nix +++ b/tv/3modules/iptables.nix @@ -135,15 +135,8 @@ let { :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] - ${concatMapStringsSep "\n" (rule: "-A PREROUTING ${rule}") [ - "! -i retiolum -p tcp -m tcp --dport 22 -j REDIRECT --to-ports 0" - "-p tcp -m tcp --dport 11423 -j REDIRECT --to-ports 22" - ]} - ${concatMapStringsSep "\n" (rule: "-A OUTPUT ${rule}") [ - "-o lo -p tcp -m tcp --dport 11423 -j REDIRECT --to-ports 22" - ]} - ${formatTable cfg.extra.nat} ${formatTable cfg."extra${toString iptables-version}".nat} + ${formatTable cfg.extra.nat} COMMIT *filter :INPUT DROP [0:0] |