Modif de la partie 5 qui était la 6 et Ajout de la partie 7
This commit is contained in:
@@ -11,6 +11,7 @@ define dmz-ntw = 172.17.0.1-172.17.0.254
|
||||
|
||||
define internal-dns-ip = 172.16.0.2
|
||||
define dns-forwarder-ip = 10.121.38.7
|
||||
define srv-web-ip = 172.17.0.1
|
||||
|
||||
table ip ipfilter {
|
||||
chain prerouting {
|
||||
@@ -92,7 +93,9 @@ table ip ipfilter {
|
||||
}
|
||||
chain nat_prerouting {
|
||||
type nat hook prerouting priority filter; policy accept;
|
||||
|
||||
|
||||
ip daddr $netif tcp dport {80,443} dnat to $srv-web-ip
|
||||
ip daddr $netif tcp dport 2222 dnat to $srv-web-ip:22
|
||||
}
|
||||
chain nat_postrouting {
|
||||
type nat hook postrouting priority filter; policy accept;
|
||||
|
Reference in New Issue
Block a user