2015-03-29 11:13:01 +00:00
|
|
|
@def $git_ip4 = @resolve(git, A);
|
|
|
|
|
@def $git_ip6 = @resolve(git, AAAA);
|
|
|
|
|
@def $web_ip4 = @resolve(web, A);
|
|
|
|
|
@def $web_ip6 = @resolve(web, AAAA);
|
|
|
|
|
# git.higgsboson.tk points to web
|
|
|
|
|
# therefore DNAT port ssh back to git
|
|
|
|
|
domain (ip ip6) table nat chain PREROUTING daddr @ipfilter(($web_ip4 $web_ip6)) proto tcp dport ssh DNAT to @ipfilter(($git_ip4 $git_ip6));
|
|
|
|
|
|
2014-12-19 19:50:19 +00:00
|
|
|
&def_service(git, git, tcp, 9000);
|
|
|
|
|
&allow_service_for(git, web);
|
|
|
|
|
&allow_service_for(postgres, git);
|
|
|
|
|
&allow_service_for(ldap, git);
|
|
|
|
|
|
|
|
|
|
&def_service(git-ssh, git, tcp, 22);
|
|
|
|
|
&forward_to_service(git-ssh, tcp, 22);
|
