1
0
mirror of https://github.com/juliengk/csf-post-docker.git synced 2023-10-10 11:37:41 +00:00
This commit is contained in:
paieer
2022-08-21 22:46:18 +02:00
committed by GitHub

View File

@@ -103,10 +103,12 @@ if [ `echo ${containers} | wc -c` -gt "1" ]; then
iptables -t nat -A POSTROUTING -s ${ipaddr}/32 -d ${ipaddr}/32 -p ${dst_proto} -m ${dst_proto} --dport ${dst_port} -j MASQUERADE iptables -t nat -A POSTROUTING -s ${ipaddr}/32 -d ${ipaddr}/32 -p ${dst_proto} -m ${dst_proto} --dport ${dst_port} -j MASQUERADE
iptables_opt_src="" iptables_opt_src=""
if [ ${src_ip} != "0.0.0.0" ]; then if [ "$src_ip" != "0.0.0.0" ]; then
iptables_opt_src="-d ${src_ip}/32 " iptables_opt_src="-d ${src_ip}/32 "
fi fi
if [ -n "$src_ip" ]; then
iptables -t nat -A DOCKER ${iptables_opt_src}! -i ${DOCKER_NET_INT} -p ${dst_proto} -m ${dst_proto} --dport ${src_port} -j DNAT --to-destination ${ipaddr}:${dst_port} iptables -t nat -A DOCKER ${iptables_opt_src}! -i ${DOCKER_NET_INT} -p ${dst_proto} -m ${dst_proto} --dport ${src_port} -j DNAT --to-destination ${ipaddr}:${dst_port}
fi
done done
fi fi
done done