nixos/nat: use nixos-nat-out instead of OUTPUT
This commit is contained in:
parent
9605addd32
commit
6abba2294d
@ -68,7 +68,7 @@ let
|
|||||||
destinationPorts = if (m == null) then throw "bad ip:ports `${fwd.destination}'" else elemAt m 1;
|
destinationPorts = if (m == null) then throw "bad ip:ports `${fwd.destination}'" else elemAt m 1;
|
||||||
in ''
|
in ''
|
||||||
# Allow connections to ${loopbackip}:${toString fwd.sourcePort} from the host itself
|
# Allow connections to ${loopbackip}:${toString fwd.sourcePort} from the host itself
|
||||||
iptables -w -t nat -A OUTPUT \
|
iptables -w -t nat -A nixos-nat-out \
|
||||||
-d ${loopbackip} -p ${fwd.proto} \
|
-d ${loopbackip} -p ${fwd.proto} \
|
||||||
--dport ${builtins.toString fwd.sourcePort} \
|
--dport ${builtins.toString fwd.sourcePort} \
|
||||||
-j DNAT --to-destination ${fwd.destination}
|
-j DNAT --to-destination ${fwd.destination}
|
||||||
|
Loading…
Reference in New Issue
Block a user