albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Test UDP

Browse source
This commit is contained in:
iFargle 2023-12-06 18:49:44 +09:00
parent 8b62e39d1b
commit aaa0bfede2
2 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nixos/hosts/osaka-linode-01/firewall.nix
View file

@ -23,6 +23,7 @@
networking.firewall.extraCommands = '' networking.firewall.extraCommands = ''
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
# TCP PORTS ################################################################################################## # TCP PORTS ##################################################################################################
# PORT 80 # PORT 80

9
nixos/hosts/osaka-linode-01/xinetd.nix
View file

@ -23,6 +23,15 @@
networking.firewall.extraCommands = '' networking.firewall.extraCommands = ''
iptables -t nat -A PREROUTING -d 172.234.84.222 -j DNAT --to-destination 10.100.0.2 iptables -t nat -A PREROUTING -d 172.234.84.222 -j DNAT --to-destination 10.100.0.2
iptables -t nat -A POSTROUTING -s 10.100.0.2 -j SNAT --to-source 172.234.84.222 iptables -t nat -A POSTROUTING -s 10.100.0.2 -j SNAT --to-source 172.234.84.222
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
# PORT 10000
iptables -t nat -A PREROUTING -p udp --dport 10000 -j DNAT --to-destination 10.100.0.2
iptables -t nat -A POSTROUTING -p udp --dport 10000 -j MASQUERADE
# PORT 3478
iptables -t nat -A PREROUTING -p udp --dport 3478 -j DNAT --to-destination 10.100.0.2
iptables -t nat -A POSTROUTING -p udp --dport 3478 -j MASQUERADE
''; '';
services.xinetd = { services.xinetd = {