Commit 059468bd authored by Kaarle Ritvanen's avatar Kaarle Ritvanen

ipset-based masquerading moved to a module of its own

parent e8e6b6bd
--[[
IPSet-based masquerading module for Alpine Wall
Copyright (C) 2012 Kaarle Ritvanen
Licensed under the terms of GPL2
]]--
module(..., package.seeall)
classes = {}
-- TODO configuration of the ipset via JSON config
defrules = {pre={{family='inet', table='nat', chain='POSTROUTING',
opts='-m set --match-set awall-masquerade src -j awall-masquerade'},
{family='inet', table='nat', chain='awall-masquerade',
opts='-m set ! --match-set awall-masquerade dst -j MASQUERADE'}}}
......@@ -78,8 +78,4 @@ end
classes = {{'dnat', DNATRule},
{'snat', SNATRule}}
-- TODO configuration of the ipset via JSON config
defrules = {pre={{family='inet', table='nat', chain='POSTROUTING',
opts='-m set --match-set awall-masquerade src -j awall-masquerade'},
{family='inet', table='nat', chain='awall-masquerade',
opts='-m set ! --match-set awall-masquerade dst -j MASQUERADE'}}}
defrules = {}
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment