mirror of
https://github.com/sshuttle/sshuttle.git
synced 2025-01-30 09:48:55 +01:00
iptables: add a PREROUTING rule so we can proxy for other machines too.
If you run sshuttle on a router, it can handle vpn'ing for all the boxes on your network.
This commit is contained in:
parent
10069f99e2
commit
a244b325cb
@ -44,6 +44,7 @@ def main(port, subnets):
|
|||||||
# basic cleanup/setup of chains
|
# basic cleanup/setup of chains
|
||||||
if chain_exists(chain):
|
if chain_exists(chain):
|
||||||
ipt('-D', 'OUTPUT', '-j', chain)
|
ipt('-D', 'OUTPUT', '-j', chain)
|
||||||
|
ipt('-D', 'PREROUTING', '-j', chain)
|
||||||
ipt('-F', chain)
|
ipt('-F', chain)
|
||||||
ipt('-X', chain)
|
ipt('-X', chain)
|
||||||
|
|
||||||
@ -51,6 +52,7 @@ def main(port, subnets):
|
|||||||
ipt('-N', chain)
|
ipt('-N', chain)
|
||||||
ipt('-F', chain)
|
ipt('-F', chain)
|
||||||
ipt('-I', 'OUTPUT', '1', '-j', chain)
|
ipt('-I', 'OUTPUT', '1', '-j', chain)
|
||||||
|
ipt('-I', 'PREROUTING', '1', '-j', chain)
|
||||||
|
|
||||||
# create new subnet entries
|
# create new subnet entries
|
||||||
for snet,swidth in subnets:
|
for snet,swidth in subnets:
|
||||||
|
Loading…
Reference in New Issue
Block a user