X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-web.git/blobdiff_plain/5d1a3461d8061e9eabd8aae77ddbbe8f28d27579..b6ab442e1c72b5b2dc256b032a178cd4e65c00c0:/files/etc/invirt-iptables/rules.d/50-invirt-web.mako?ds=sidebyside diff --git a/files/etc/invirt-iptables/rules.d/50-invirt-web.mako b/files/etc/invirt-iptables/rules.d/50-invirt-web.mako index ad5c923..7082c13 100644 --- a/files/etc/invirt-iptables/rules.d/50-invirt-web.mako +++ b/files/etc/invirt-iptables/rules.d/50-invirt-web.mako @@ -10,7 +10,7 @@ server_port = host_port :POSTROUTING ACCEPT [8:674] :OUTPUT ACCEPT [8:674] % for h in cfg.hosts: --A PREROUTING -s ! ${h.ip} -i eth0 -p tcp -m tcp --dport ${server_port} -j DNAT --to-destination ${h.ip}:${host_port} +-A PREROUTING ! -s ${h.ip} -i eth0 -p tcp -m tcp --dport ${server_port} -j DNAT --to-destination ${h.ip}:${host_port} -A POSTROUTING -d ${h.ip} -o eth0 -p tcp -m tcp --dport ${host_port} -j SNAT --to-source ${cfg.vnc.proxy_ip} <% server_port += 1 %>\ % endfor