Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

network: forward TCP DNS queries

Browse Source 
Fixes QubesOS/qubes-issues#1325
This commit is contained in:
Marek Marczykowski-Górecki 2015-10-12 01:28:05 +02:00
parent d3bf3e0978
commit ce443b2e18
No known key found for this signature in database
GPG Key ID: 063938BA42CFA724
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
network/qubes-setup-dnat-to-ns
View File

@ -3,9 +3,11 @@ addrule()
{ {
if [ $FIRSTONE = yes ] ; then if [ $FIRSTONE = yes ] ; then
FIRSTONE=no FIRSTONE=no
RULE1="-A PR-QBS -d $NS1 -p udp --dport 53 -j DNAT --to $1" RULE1="-A PR-QBS -d $NS1 -p udp --dport 53 -j DNAT --to $1
-A PR-QBS -d $NS1 -p tcp --dport 53 -j DNAT --to $1"
else else
RULE2="-A PR-QBS -d $NS2 -p udp --dport 53 -j DNAT --to $1" RULE2="-A PR-QBS -d $NS2 -p udp --dport 53 -j DNAT --to $1
-A PR-QBS -d $NS2 -p tcp --dport 53 -j DNAT --to $1"
NS=$NS2 NS=$NS2
fi fi
} }
@ -19,6 +21,6 @@ grep ^nameserver /etc/resolv.conf | grep -v ":.*:" | head -2 |
while read x y z ; do while read x y z ; do
addrule "$y" addrule "$y"
done done
(echo "*nat"; echo $RULE1; echo $RULE2; echo COMMIT) | iptables-restore -n (echo "*nat"; echo "$RULE1"; echo "$RULE2"; echo COMMIT) | iptables-restore -n
) )