safebox/firewall_containers
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Introduced SOURCE_IFACE variable

Browse Source
This commit is contained in:
Gyorgy Berenyi
2023-04-27 11:59:15 +00:00
parent fa8de49a28
commit c57549e032
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
firewall/firewall-add
View File

@@ -151,7 +151,8 @@ if [[ -z "$SOURCE_IP" ]]; then
if [[ -z "$SOURCE" ]]; then if [[ -z "$SOURCE" ]]; then
#SOURCE_IP="0.0.0.0/0"; #SOURCE_IP="0.0.0.0/0";
echo "No source IP added"; echo "No source IP added";
elif [ "$SOURCE" == "SOURCE_IFACE" ]; then elif [ "$(set | grep -w SOURCE_IFACE)" != "" ]; then
SOURCE=$SOURCE_IFACE;
echo "VPN interface added instead of IP or domain name"; echo "VPN interface added instead of IP or domain name";
else else
IDX=0 IDX=0
@@ -246,7 +247,7 @@ fi
prerouting() { prerouting() {
if [ "$SOURCE" == "SOURCE_IFACE" ]; then if [ "$(set |grep -w SOURCE_IFACE)" != "" ]; then
debug "$IPTABLES -I PREROUTING -i $SOURCE_IFACE -p $PROTOCOL --dport $SOURCE_PORT -m comment --comment $COMMENT -j DNAT --to $TARGET_IP:$TARGET_PORT" debug "$IPTABLES -I PREROUTING -i $SOURCE_IFACE -p $PROTOCOL --dport $SOURCE_PORT -m comment --comment $COMMENT -j DNAT --to $TARGET_IP:$TARGET_PORT"
$IPTABLES -w -I PREROUTING -i $SOURCE_IFACE -p $PROTOCOL --dport $SOURCE_PORT -m comment --comment "$COMMENT" -j DNAT --to $TARGET_IP:$TARGET_PORT $IPTABLES -w -I PREROUTING -i $SOURCE_IFACE -p $PROTOCOL --dport $SOURCE_PORT -m comment --comment "$COMMENT" -j DNAT --to $TARGET_IP:$TARGET_PORT