fnux/ungleich-staticcms
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

-!

Browse source
This commit is contained in:
Nico Schottelius 2019-11-07 19:08:36 +01:00
parent 5db90a952e
commit 939387a970
1 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
content/u/blog/nftables-magic-redirect-all-ports-to-one-port/contents.lr
View file

@ -1,4 +1,4 @@
title: Firewall magic with nftables: how to redirect all ports to one port title: How to redirect all ports to one port with nftables
--- ---
pub_date: 2019-11-07 pub_date: 2019-11-07
--- ---
@ -23,10 +23,14 @@ outgoing traffic and thus prevent you to connect to where you want to
connect to. connect to.
Here at [ungleich](https://ungleich.ch) we are travelling quite a lot, Here at [ungleich](https://ungleich.ch) we are travelling quite a lot,
but we always want to be able to access the servers of but we always want to be able to access the servers of
[Data Center Light](https://datacenterlight.ch), so that we can [Data Center Light](https://datacenterlight.ch).
maintain them from everywhere in the world, so we needed a way to
To be able to do so from anywhere in the world, we needed to
ensure that we have some way of connecting to them, even if the ensure that we have some way of connecting to them, even if the
network disallows traffic to the ssh port (tcp/22). network filters traffic to the ssh port (tcp/22).
While our main motivation was to enable ssh, the example below can be
adjusted to any service, including http, https, smtp, ...
## A solution based on nftables ## A solution based on nftables