diff options
| author | Robert "ar" Gerus <ar@bash.org.pl> | 2013-05-03 10:01:21 +0200 |
|---|---|---|
| committer | Robert "ar" Gerus <ar@bash.org.pl> | 2013-05-03 10:01:21 +0200 |
| commit | 3bb4b351bb015c56c57bd9256c700a107dd67297 (patch) | |
| tree | ee68b4b3f4ca301fb7a8a1fab5942bca056fdf4b | |
| parent | 3d4e1927648f59ef3125da4f95c0ad47d9542ce9 (diff) | |
| download | old-firewall-3bb4b351bb015c56c57bd9256c700a107dd67297.tar.gz old-firewall-3bb4b351bb015c56c57bd9256c700a107dd67297.tar.bz2 old-firewall-3bb4b351bb015c56c57bd9256c700a107dd67297.tar.xz old-firewall-3bb4b351bb015c56c57bd9256c700a107dd67297.zip | |
amanojaku is gone
| -rw-r--r-- | rules/10-ar-amanojaku | 24 | ||||
| -rwxr-xr-x | tests/01-ssh_test_via_NAS.sh | 3 |
2 files changed, 16 insertions, 11 deletions
diff --git a/rules/10-ar-amanojaku b/rules/10-ar-amanojaku index f36b584..e8a3030 100644 --- a/rules/10-ar-amanojaku +++ b/rules/10-ar-amanojaku @@ -1,14 +1,16 @@ #!/bin/bash rules() { - # tcp - for port in 22 80 443 14528:14530 20000; do - iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN} -p tcp --dport ${port} -j DNAT --to-destination ${HOST_AMANOJAKU} - iptables -t filter $flag FORWARD -i ${IF_WAN} -d ${HOST_AMANOJAKU} -p tcp --dport ${port} -j ACCEPT - done - - # udp - for port in 60000:60100; do - iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN} -m udp -p udp --dport ${port} -j DNAT --to-destination ${HOST_AMANOJAKU} - iptables -t filter $flag FORWARD -i ${IF_WAN} -d ${HOST_AMANOJAKU} -m udp -p udp --dport ${port} -j ACCEPT - done + : + # nope, the host is not here. +# # tcp +# for port in 22 80 443 14528:14530 20000; do +# iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN} -p tcp --dport ${port} -j DNAT --to-destination ${HOST_AMANOJAKU} +# iptables -t filter $flag FORWARD -i ${IF_WAN} -d ${HOST_AMANOJAKU} -p tcp --dport ${port} -j ACCEPT +# done +# +# # udp +# for port in 60000:60100; do +# iptables -t nat $flag PREROUTING -i ${IF_WAN} -d ${HOST_KASHA_WAN} -m udp -p udp --dport ${port} -j DNAT --to-destination ${HOST_AMANOJAKU} +# iptables -t filter $flag FORWARD -i ${IF_WAN} -d ${HOST_AMANOJAKU} -m udp -p udp --dport ${port} -j ACCEPT +# done } diff --git a/tests/01-ssh_test_via_NAS.sh b/tests/01-ssh_test_via_NAS.sh index 2dc871c..cb6dd4b 100755 --- a/tests/01-ssh_test_via_NAS.sh +++ b/tests/01-ssh_test_via_NAS.sh @@ -1,5 +1,8 @@ #!/bin/sh +# the host is not here +exit 0 + set -o errexit set -o pipefail set -o nounset |