Commit 635ed54c3bdc6a6f9b0a7ff8d112391c641519d4

Authored by Athos
1 parent 1ea699c9

Add forwarding rules for external ssh connection

cookbooks/firewall/templates/host-reverseproxy/iptables-filter.erb
... ... @@ -7,3 +7,7 @@
7 7  
8 8 # Real SSH connection
9 9 -A INPUT -s <%= node['peers']['integration'] %> -p tcp -m state --state NEW --dport <%= node['config']['alt_ssh_port'] %> -j ACCEPT
  10 +
  11 +# Allow forwarding to integration on port 22
  12 +-A FORWARD -p tcp -d <%= node['peers']['integration'] %> --dport 22 -j ACCEPT
  13 +-A FORWARD -s <%= node['peers']['integration'] %> -p tcp --sport 22 -j ACCEPT
... ...