safebox/firewall_containers
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Minor changes at NSENTER section.

Browse Source
This commit is contained in:
Gyorgy Berenyi
2021-08-04 07:34:57 +00:00
parent 4fdc90ad35
commit 9a748efe8c
1 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
firewall/firewall-add
View File

@@ -4,6 +4,8 @@ NAME=$NAME-$COMMENT
CHAIN=$CHAIN CHAIN=$CHAIN
COMMENT=$COMMENT COMMENT=$COMMENT
PROTOCOL=$TYPE PROTOCOL=$TYPE
VPN_IP=$VPN_IP
VPN_NETWORK=$VPN_NETWORK
############################## ##############################
@@ -41,11 +43,18 @@ if [[ "$NSENTER" == "true" ]] ; then
iptables="nsenter -t $(docker inspect --format {{.State.Pid}} $NAME) -n -- $IPTABLES -t nat"; iptables="nsenter -t $(docker inspect --format {{.State.Pid}} $NAME) -n -- $IPTABLES -t nat";
if $iptables --list POSTROUTING |grep ESTABLISHED |grep RELATED|grep ACCEPT ; then # DELETE UNECESSARY LINES FROM PREVIOUS RULES
echo "nothing to do"; LINES=$($iptables --line-number -n | grep $VPN_NETWORK | awk '{print $1}'| tac)
else $iptables -I POSTROUTING -m state --state established,related -j ACCEPT;
if [ -n "$LINES" ] ; then
for i in $LINES; do
$iptables -D $CHAIN $i
sleep 0.1
done
fi fi
$iptables -I POSTROUTING -m state --state established,related -j ACCEPT;
$iptables -I PREROUTING -d $SOURCE_IP -p $PROTOCOL --dport $SOURCE_PORT -m comment --comment "$COMMENT" -j DNAT --to $TARGET_IP:$TARGET_PORT $iptables -I PREROUTING -d $SOURCE_IP -p $PROTOCOL --dport $SOURCE_PORT -m comment --comment "$COMMENT" -j DNAT --to $TARGET_IP:$TARGET_PORT
else else