summaryrefslogtreecommitdiffstats
path: root/tv/3modules/iptables.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2020-10-23 21:02:02 +0200
committermakefu <github@syntax-fehler.de>2020-10-23 21:02:02 +0200
commite8b6cc0587929a7ebd0d00f83d298640b20b055f (patch)
treee0f813b8264119a84d6b8c32fa68041c8541ab59 /tv/3modules/iptables.nix
parentfd41a76d4cab2765f9ef95ce5322b7bffe52b8a7 (diff)
parent242530680d5dcb37a5a023d0b8f6155ab441cead (diff)
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'tv/3modules/iptables.nix')
-rw-r--r--tv/3modules/iptables.nix9
1 files changed, 1 insertions, 8 deletions
diff --git a/tv/3modules/iptables.nix b/tv/3modules/iptables.nix
index 3974760d..9cf0bd5a 100644
--- a/tv/3modules/iptables.nix
+++ b/tv/3modules/iptables.nix
@@ -135,15 +135,8 @@ let {
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
- ${concatMapStringsSep "\n" (rule: "-A PREROUTING ${rule}") [
- "! -i retiolum -p tcp -m tcp --dport 22 -j REDIRECT --to-ports 0"
- "-p tcp -m tcp --dport 11423 -j REDIRECT --to-ports 22"
- ]}
- ${concatMapStringsSep "\n" (rule: "-A OUTPUT ${rule}") [
- "-o lo -p tcp -m tcp --dport 11423 -j REDIRECT --to-ports 22"
- ]}
- ${formatTable cfg.extra.nat}
${formatTable cfg."extra${toString iptables-version}".nat}
+ ${formatTable cfg.extra.nat}
COMMIT
*filter
:INPUT DROP [0:0]