puppetlabs/firewall nat policy issue

Asked Aug 11 '14 at 16:12

Active Aug 11 '14 at 16:19

Viewed 1,108 times

I'm using puppetlabs/firewall.

I need to create following iptable rules:

iptables -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443

My manifests is

firewall { '001 default redirection policy' :
  table => 'nat',
  chain => 'PREROUTING',
  proto => 'tcp',
  dport => '443',
  jump => 'REDIRECT',
  toports => '8443'
}

But, puppetlabs/firewall creates following iptable rules:

iptables -A PREROUTING -p tcp -m multiport --dports 443 -m comment --comment "001 default

edited Aug 11 '14 at 16:19

HBruijn

72,524
21
127
192

asked Aug 11 '14 at 16:12

Suresh Jackson

That rule looks truncated. Can you update with the full output? – Felix Frank Aug 11 '14 at 17:22
iptables -A PREROUTING -p tcp -m multiport --dports 443 -m comment --comment "001 default redirection policy" -j REDIRECT --to-ports 8443 – Suresh Jackson Aug 13 '14 at 05:11
So this is basically correct. Try using `toport` instead of `toports` if you take issue with the loading of the `multiport` module. – Felix Frank Aug 13 '14 at 11:38

puppetlabs/firewall nat policy issue

0 Answers0