diff --git a/cookbooks/firewall/templates/host-reverseproxy/iptables-filter.erb b/cookbooks/firewall/templates/host-reverseproxy/iptables-filter.erb index 269f4f7..f5f2451 100644 --- a/cookbooks/firewall/templates/host-reverseproxy/iptables-filter.erb +++ b/cookbooks/firewall/templates/host-reverseproxy/iptables-filter.erb @@ -7,3 +7,7 @@ # Real SSH connection -A INPUT -s <%= node['peers']['integration'] %> -p tcp -m state --state NEW --dport <%= node['config']['alt_ssh_port'] %> -j ACCEPT + +# Allow forwarding to integration on port 22 +-A FORWARD -p tcp -d <%= node['peers']['integration'] %> --dport 22 -j ACCEPT +-A FORWARD -s <%= node['peers']['integration'] %> -p tcp --sport 22 -j ACCEPT -- libgit2 0.21.2