Also support ports on regular netmasks (not excluding)

Hasimir · Nov 12, 2013 · 574feb9 · 574feb9
1 parent 4ee0516
commit 574feb9
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/firewall.py b/firewall.py
@@ -107,7 +107,15 @@ def do_iptables(port, dnsport, subnets):
                         '--dest', '%s/%s' % (snet,swidth),
                         '-p', 'tcp')
             else:
-                ipt_ttl('-A', chain, '-j', 'REDIRECT',
+                if sport > 0:
+                    ipt_ttl('-A', chain, '-j', 'REDIRECT',
+                        '--dest', '%s/%s' % (snet,swidth),
+                        '-m', 'tcp',
+                        '--dport', '%d' % sport,
+                        '-p', 'tcp',
+                        '--to-ports', str(port))
+                else:
+                    ipt_ttl('-A', chain, '-j', 'REDIRECT',
                         '--dest', '%s/%s' % (snet,swidth),
                         '-p', 'tcp',
                         '--to-ports', str(port))