gh_mirrors/1Panel
1
0
Fork 0
mirror of https://github.com/1Panel-dev/1Panel.git synced 2025-03-01 03:24:14 +08:00
Code

fix(iptables): 复杂环境下转发删除端口错误 (#7868)

Browse Source
This commit is contained in:
endymx 2025-02-13 22:56:09 +08:00 committed by GitHub
parent af8eef4a91
commit 0741f60896
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
backend/utils/firewall/client/iptables.go
View File

@ -133,10 +133,10 @@ func (iptables *Iptables) NatAdd(protocol, srcPort, dest, destPort string, save
// 非本机转发, 按公网流程走 // 非本机转发, 按公网流程走
if err := iptables.runf(NatTab, fmt.Sprintf( if err := iptables.runf(NatTab, fmt.Sprintf(
"-A %s -p %s -d %s --dport %s -j MASQUERADE", "-A %s -d %s -p %s --dport %s -j MASQUERADE",
PostRoutingChain, PostRoutingChain,
protocol,
dest, dest,
protocol,
destPort, destPort,
)); err != nil { )); err != nil {
return err return err
@ -192,7 +192,7 @@ func (iptables *Iptables) NatRemove(num string, protocol, srcPort, dest, destPor
// 删除公网转发规则 // 删除公网转发规则
if dest != "" && dest != "127.0.0.1" && dest != "localhost" { if dest != "" && dest != "127.0.0.1" && dest != "localhost" {
if err := iptables.runf(NatTab, fmt.Sprintf( if err := iptables.runf(NatTab, fmt.Sprintf(
"-D %s -p %s -d %s --dport %s -j MASQUERADE", "-D %s -d %s -p %s --dport %s -j MASQUERADE",
PostRoutingChain, PostRoutingChain,
dest, dest,
protocol, protocol,