From 9d148800eb4c5eb94c776818426abb36a02fcb7d Mon Sep 17 00:00:00 2001 From: lassulus Date: Mon, 14 Oct 2019 15:15:58 +0200 Subject: l: accept port 22 from wiregrill --- lass/2configs/default.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix index 469c81f1..5775c168 100644 --- a/lass/2configs/default.nix +++ b/lass/2configs/default.nix @@ -186,7 +186,9 @@ with import ; enable = true; tables = { nat.PREROUTING.rules = [ - { predicate = "! -i retiolum -p tcp -m tcp --dport 22"; target = "REDIRECT --to-ports 0"; precedence = 100; } + { predicate = "-i retiolum -p tcp -m tcp --dport 22"; target = "ACCEPT"; precedence = 101; } + { predicate = "-i wiregrill -p tcp -m tcp --dport 22"; target = "ACCEPT"; precedence = 101; } + { predicate = "-p tcp -m tcp --dport 22"; target = "REDIRECT --to-ports 0"; precedence = 100; } { predicate = "-p tcp -m tcp --dport 45621"; target = "REDIRECT --to-ports 22"; precedence = 99; } ]; nat.OUTPUT.rules = [ -- cgit v1.2.3