diff --git a/nixos/hosts/osaka-linode-01/firewall.nix b/nixos/hosts/osaka-linode-01/firewall.nix index 50a2925d..67f09f10 100644 --- a/nixos/hosts/osaka-linode-01/firewall.nix +++ b/nixos/hosts/osaka-linode-01/firewall.nix @@ -23,6 +23,7 @@ networking.firewall.extraCommands = '' iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT + iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT # TCP PORTS ################################################################################################## # PORT 80 diff --git a/nixos/hosts/osaka-linode-01/xinetd.nix b/nixos/hosts/osaka-linode-01/xinetd.nix index 3fbc7d23..7d020559 100644 --- a/nixos/hosts/osaka-linode-01/xinetd.nix +++ b/nixos/hosts/osaka-linode-01/xinetd.nix @@ -23,6 +23,15 @@ networking.firewall.extraCommands = '' iptables -t nat -A PREROUTING -d 172.234.84.222 -j DNAT --to-destination 10.100.0.2 iptables -t nat -A POSTROUTING -s 10.100.0.2 -j SNAT --to-source 172.234.84.222 + iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT + + # PORT 10000 + iptables -t nat -A PREROUTING -p udp --dport 10000 -j DNAT --to-destination 10.100.0.2 + iptables -t nat -A POSTROUTING -p udp --dport 10000 -j MASQUERADE + + # PORT 3478 + iptables -t nat -A PREROUTING -p udp --dport 3478 -j DNAT --to-destination 10.100.0.2 + iptables -t nat -A POSTROUTING -p udp --dport 3478 -j MASQUERADE ''; services.xinetd = {