Commit 4ea6839a authored by Kaarle Ritvanen's avatar Kaarle Ritvanen

support for ACCEPT rules in NAT chains

parent ad677b62
......@@ -45,6 +45,7 @@ function NATRule:table() return 'nat' end
function NATRule:chain() return self.params.chain end
function NATRule:target()
if self.action then return end
if not self['ip-range'] then error('IP range not defined for NAT rule') end
local target =' --to-'..self.params.subject..' '..self['ip-range']
if self['port-range'] then target = target..':'..self['port-range'] end
......@@ -70,7 +71,7 @@ function SNATRule:init(context)
function SNATRule:target()
if self['ip-range'] then return end
if self.action or self['ip-range'] then return end
return 'MASQUERADE'..(self['port-range'] and ' --to-ports '..self['port-range'] or '')
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment