2015-05-20 16:01:36 +02:00
|
|
|
#!/bin/bash
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
|
# Rules for SSH git clone
|
|
|
|
|
#
|
|
|
|
|
%if %%getVar('mode_conteneur_actif','non') == 'oui'
|
2016-03-02 14:21:05 +01:00
|
|
|
/sbin/iptables -A eth0-cont -d %%adresse_ip_forge/32 -p tcp -m tcp --dport 22 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT
|
2015-05-26 15:50:46 +02:00
|
|
|
/sbin/iptables -t nat -A PREROUTING -i eth0 -s 0/0 -p tcp --syn --dport %%git_ssh_port -j DNAT --to-destination %%container_ip_forge:22
|
2015-05-20 16:01:36 +02:00
|
|
|
%end if
|
