Download as
Browse Code »

Commit 8a871d18d97183a08312027cd9179035fb3a6bf6

Authored by Sergio Oliveira
1 parent 1562ab87
Exists in master and in 66 other branches 3.x, add_you_are_here_breadcrumbs_label, api_for_colab, backup_not_prod, button_suspension_points_remove, cdtc_configuration, create_institution_bootstrap_modal, design_validation, dev-lappis, dev_env_minimal, disable_email_dev, docs, fix_edit_institution, fix_edit_software_with_another_license, fix_list_style_inside_article, fix_members_pagination, fix_models_translations, fix_no_license, fix_software_api, fix_software_block_migration, fix_validations_and_tests, focus_search_field_theme, gov-user-refactoring, gov-user-refactoring-rails4, header_fix, institution_modal_on_rating, kalibro-conf-refactoring, kalibro-processor-package, lxc, mailinglist_page_title, margin_fix, mezuro_cookbook, organization_rating_style_changes, performance, prezento, r3, refactor_software_communities, refactor_software_for_sisp, register_page, release-process, release-process-v2, remove-unused-images, remove_backup_emails, remove_secondary_email_from_user, removing_super_archives_email, review_message, scope2method, signals_user_noosfero, sisp_colab_config, sisp_dev, sisp_dev_master, sisp_simple_version, software_as_organization, software_catalog_style_fix, software_catalog_style_fixes, spb_minimal_env, spec_refactor, stable-4.x, stable-devel, support_docs, syslog, temp_soft_comm_refactoring, thread_dropdown, thread_page, update_software_api, update_softwares_boxes

Setup iptables forward on bootstrap script

Showing 2 changed files with 8 additions and 1 deletions   Show diff stats
Rakefile
  Diff comments   View file @8a871d1
... ... @@ -91,7 +91,7 @@ task :preconfig => ssh_config_file do
91 91 puts "I: delete #{preconfig_file} to force running again"
92 92 else
93 93 sh 'scp', '-F', ssh_config_file, 'utils/reverseproxy_ssh_setup', 'reverseproxy.unconfigured:/tmp'
94   - sh 'ssh', '-F', ssh_config_file, 'reverseproxy.unconfigured', 'sudo', '/tmp/reverseproxy_ssh_setup', $ALT_SSH_PORT.to_s
  94 + sh 'ssh', '-F', ssh_config_file, 'reverseproxy.unconfigured', 'sudo', '/tmp/reverseproxy_ssh_setup', $ALT_SSH_PORT.to_s, ips['reverseproxy'], ips['integration']
95 95  
96 96 File.open(preconfig_file, 'w') do |f|
97 97 f.puts($ALT_SSH_PORT)
... ...
utils/reverseproxy_ssh_setup
  Diff comments   View file @8a871d1
... ... @@ -3,6 +3,8 @@
3 3 set -e
4 4  
5 5 port="$1"
  6 +reverseproxy_ip="$2"
  7 +integration_ip="$3"
6 8  
7 9 # switch SSH to port $port
8 10 sed -i -e 's/^#\?\s*Port\s*[0-9]\+\s*$/Port '$port'/g' /etc/ssh/sshd_config
... ... @@ -15,3 +17,8 @@ semanage port -a -t ssh_port_t -p tcp "$port"
15 17  
16 18 # Restart SSH
17 19 systemctl restart sshd
  20 +
  21 +# Setup port redirect
  22 +iptables -A PREROUTING -d $reverseproxy_ip/32 -p tcp -m tcp --dport 22 -j DNAT --to-destination $integration_ip:22
  23 +iptables -A POSTROUTING -d $integration_ip/32 -p tcp -m tcp --dport 22 -j SNAT --to-source $reverseproxy_ip
  24 +sysctl -w net.ipv4.ip_forward=1
... ...