···

       
50
       
50
       
 
       
    # NAT from external ports to internal ports.

     

       
51
       
51
       
 
       
    ${concatMapStrings (fwd: ''

     

       
52
       
52
       
 
       
      iptables -w -t nat -A nixos-nat-pre \

     

       
53
       
53
       
-
       
        -i ${cfg.externalInterface} -p ${fwd.proto} \

     

       
53
       
53
       
+
       
        -i ${toString cfg.externalInterface} -p ${fwd.proto} \

     

       
54
       
54
       
 
       
        --dport ${builtins.toString fwd.sourcePort} \

     

       
55
       
55
       
 
       
        -j DNAT --to-destination ${fwd.destination}

     

       
56
       
56
       
 
       


     
···

       
81
       
81
       
 
       


     

       
82
       
82
       
 
       
    ${optionalString (cfg.dmzHost != null) ''

     

       
83
       
83
       
 
       
      iptables -w -t nat -A nixos-nat-pre \

     

       
84
       
84
       
-
       
        -i ${cfg.externalInterface} -j DNAT \

     

       
84
       
84
       
+
       
        -i ${toString cfg.externalInterface} -j DNAT \

     

       
85
       
85
       
 
       
        --to-destination ${cfg.dmzHost}

     

       
86
       
86
       
 
       
    ''}

     

       
87
       
87