Commit 9461723adb6a8e1bf725a8466a11c9508ec2e6a8
1 parent
80ff0274
Exists in
master
and in
90 other branches
Removed unnecessary lines from iptables config
Showing
1 changed file
with
3 additions
and
13 deletions
Show diff stats
cookbooks/reverse_proxy/templates/iptables.erb
1 | -# Generated by iptables-save v1.4.21 on Thu Apr 16 20:28:15 2015 | ||
2 | *nat | 1 | *nat |
3 | -:PREROUTING ACCEPT [5:493] | ||
4 | -:INPUT ACCEPT [5:493] | ||
5 | -:OUTPUT ACCEPT [2:138] | ||
6 | -:POSTROUTING ACCEPT [2:138] | 2 | + |
3 | +# Forward reverseproxy:22 to integration:22. Required to enable git pushes over SSH | ||
7 | -A PREROUTING -d <%= node['peers']['reverseproxy'] %>/32 -p tcp -m tcp --dport 22 -j DNAT --to-destination <%= node['peers']['integration'] %>:22 | 4 | -A PREROUTING -d <%= node['peers']['reverseproxy'] %>/32 -p tcp -m tcp --dport 22 -j DNAT --to-destination <%= node['peers']['integration'] %>:22 |
8 | -A POSTROUTING -d <%= node['peers']['integration'] %>/32 -p tcp -m tcp --dport 22 -j SNAT --to-source <%= node['peers']['reverseproxy'] %> | 5 | -A POSTROUTING -d <%= node['peers']['integration'] %>/32 -p tcp -m tcp --dport 22 -j SNAT --to-source <%= node['peers']['reverseproxy'] %> |
6 | + | ||
9 | COMMIT | 7 | COMMIT |
10 | -# Completed on Thu Apr 16 20:28:15 2015 | ||
11 | -# Generated by iptables-save v1.4.21 on Thu Apr 16 20:28:15 2015 | ||
12 | -*filter | ||
13 | -:INPUT ACCEPT [5675:7406907] | ||
14 | -:FORWARD ACCEPT [66:13348] | ||
15 | -:OUTPUT ACCEPT [3901:279969] | ||
16 | -COMMIT | ||
17 | -# Completed on Thu Apr 16 20:28:15 2015 |