diff options
| author | lassulus <lass@lassul.us> | 2016-12-27 01:20:57 +0100 |
|---|---|---|
| committer | lassulus <lass@lassul.us> | 2016-12-27 01:20:57 +0100 |
| commit | 568e9e523a70f51886d9850213ee41af27da881b (patch) | |
| tree | 6c5cf63687c05587c5368249102c08f5a5bc0e06 /lass/2configs/hfos.nix | |
| parent | 65ae1909259f30150d30ae0618461b7245e33120 (diff) | |
l 2 hfos: redirect port 80 to 1080
Diffstat (limited to 'lass/2configs/hfos.nix')
| -rw-r--r-- | lass/2configs/hfos.nix | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lass/2configs/hfos.nix b/lass/2configs/hfos.nix index 05dd3ce2a..f6f09e226 100644 --- a/lass/2configs/hfos.nix +++ b/lass/2configs/hfos.nix @@ -21,13 +21,13 @@ with import <stockholm/lib>; krebs.iptables.tables.nat.PREROUTING.rules = [ { v6 = false; precedence = 1000; predicate = "-d 213.239.205.246 -p tcp --dport 22"; target = "DNAT --to-destination 192.168.122.208:22"; } - { v6 = false; precedence = 1000; predicate = "-d 213.239.205.246 -p tcp --dport 80"; target = "DNAT --to-destination 192.168.122.208:80"; } + { v6 = false; precedence = 1000; predicate = "-d 213.239.205.246 -p tcp --dport 80"; target = "DNAT --to-destination 192.168.122.208:1080"; } { v6 = false; precedence = 1000; predicate = "-d 213.239.205.246 -p tcp --dport 443"; target = "DNAT --to-destination 192.168.122.208:1443"; } ]; krebs.iptables.tables.filter.FORWARD.rules = [ { v6 = false; precedence = 1000; predicate = "-d 192.168.122.208 -p tcp --dport 22 -m state --state NEW,ESTABLISHED,RELATED"; target = "ACCEPT"; } - { v6 = false; precedence = 1000; predicate = "-d 192.168.122.208 -p tcp --dport 80 -m state --state NEW,ESTABLISHED,RELATED"; target = "ACCEPT"; } + { v6 = false; precedence = 1000; predicate = "-d 192.168.122.208 -p tcp --dport 1080 -m state --state NEW,ESTABLISHED,RELATED"; target = "ACCEPT"; } { v6 = false; precedence = 1000; predicate = "-d 192.168.122.208 -p tcp --dport 1443 -m state --state NEW,ESTABLISHED,RELATED"; target = "ACCEPT"; } ]; } |