I am currently using COS7 and want to do a port forward. For example, I want to forward an external request 1.2.3.4:1234 to an internal IP 5.6.7.8:1234. Is it possible to achieve this all through the CLI. I have it working with the gui using the port forwarding app but not through CLI.
I am writing a script and would like to achieve this all through the command line without using the COS gui. Any pointers?
I am writing a script and would like to achieve this all through the command line without using the COS gui. Any pointers?
In Firewall
Share this post:
Accepted Answer
First of all you have to find the rules. I'd do a dump of the firewall before and after adding a port forward with something like:
Things to watch out for is that if the firewall ever restarts, it wipes all rules and starts again with rules in /etc/clearos/firewall.conf and the files in /etc/clearos/firewall.d/. Always use the -w switch with any of your iptables commands, or, better in the /etc/clearos/firewall.d/ folder use $IPTABLES instead of "iptables -w". If using /etc/clearos/firewall.d/ also be wary of ipv4 and ipv6 and see how it is done in, for example, /etc/clearos/firewall.d/custom.
What are you trying to do?
iptables -nvL > before-filter
iptables -nvL -t nat > before-nat
iptables -nvL -t mangle > before-mangleThings to watch out for is that if the firewall ever restarts, it wipes all rules and starts again with rules in /etc/clearos/firewall.conf and the files in /etc/clearos/firewall.d/. Always use the -w switch with any of your iptables commands, or, better in the /etc/clearos/firewall.d/ folder use $IPTABLES instead of "iptables -w". If using /etc/clearos/firewall.d/ also be wary of ipv4 and ipv6 and see how it is done in, for example, /etc/clearos/firewall.d/custom.
What are you trying to do?
Responses (2)
-
Accepted Answer
-
Accepted Answer
Thanks Nick. I managed to do the comparison before and after and crafted out the iptables rules. I just did a test and its working. Quick question, to make this stick after a reboot on COS7, I have to use iptables-w for the commands in cli correct?
What I was trying to do was automate firewall rules via php script we have on a another server with various logic. The server then sends the port forward command via ssh ( I have a vpn from the server so no need to open ssh port to the world ).
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »