Iptables scratchpad

From thelinuxwiki
Revision as of 19:23, 6 August 2013 by Nighthawk (Talk | contribs)

Jump to: navigation, search

dynamically create iptables commands which allow gentoo emerge sync and fetch

on firewall to forward for gentoo servers

nslookup rsync.gentoo.org | grep -v "#" | grep Address |awk '{ printf "iptables -I FORWARD -p tcp -d " $2 " --dport 873 -j ACCEPT\n"}'
nslookup distfiles.gentoo.org | grep -v "#" | grep Address |awk '{ printf "iptables -I FORWARD -p tcp -d " $2 " --dport 80 -j ACCEPT\n"}'

on firewalls, to update / sync the firewalls themselves

nslookup rsync.gentoo.org | grep -v "#" | grep Address |awk '{ printf "iptables -I OUTPUT -p tcp -d " $2 " --dport 873 -j ACCEPT\n"}'
nslookup distfiles.gentoo.org | grep -v "#" | grep Address |awk '{ printf "iptables -I OUTPUT -p tcp -d " $2 " --dport 80 -j ACCEPT\n"}'


on fedora, run flush, run iptables script and save...

# iptables -F; /root/iptables.scr; iptables-save > /etc/sysconfig/iptables;