From b034f63f7a2e4361b32c33c0e1a980eecf1a5aa6 Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 17 Oct 2020 01:00:54 +0200
Subject: tv iptables: move sshd stuff to sshd config

---
 tv/3modules/iptables.nix | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

(limited to 'tv/3modules')

diff --git a/tv/3modules/iptables.nix b/tv/3modules/iptables.nix
index 3974760d..9cf0bd5a 100644
--- a/tv/3modules/iptables.nix
+++ b/tv/3modules/iptables.nix
@@ -135,15 +135,8 @@ let {
       :INPUT ACCEPT [0:0]
       :OUTPUT ACCEPT [0:0]
       :POSTROUTING ACCEPT [0:0]
-      ${concatMapStringsSep "\n" (rule: "-A PREROUTING ${rule}") [
-        "! -i retiolum -p tcp -m tcp --dport 22 -j REDIRECT --to-ports 0"
-        "-p tcp -m tcp --dport 11423 -j REDIRECT --to-ports 22"
-      ]}
-      ${concatMapStringsSep "\n" (rule: "-A OUTPUT ${rule}") [
-        "-o lo -p tcp -m tcp --dport 11423 -j REDIRECT --to-ports 22"
-      ]}
-      ${formatTable cfg.extra.nat}
       ${formatTable cfg."extra${toString iptables-version}".nat}
+      ${formatTable cfg.extra.nat}
       COMMIT
       *filter
       :INPUT DROP [0:0]
-- 
cgit v1.2.3