mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Select masquerade by outgoing interface rather than by destination subnet
Docker-DCO-1.1-Signed-off-by: Jérôme Petazzoni <jerome@docker.com> (github: jpetazzo)
This commit is contained in:
parent
c99ee556d4
commit
a084f4bc61
1 changed files with 1 additions and 1 deletions
|
@ -175,7 +175,7 @@ func InitDriver(job *engine.Job) engine.Status {
|
||||||
|
|
||||||
func setupIPTables(addr net.Addr, icc bool) error {
|
func setupIPTables(addr net.Addr, icc bool) error {
|
||||||
// Enable NAT
|
// Enable NAT
|
||||||
natArgs := []string{"POSTROUTING", "-t", "nat", "-s", addr.String(), "!", "-d", addr.String(), "-j", "MASQUERADE"}
|
natArgs := []string{"POSTROUTING", "-t", "nat", "-s", addr.String(), "!", "-o", bridgeIface, "-j", "MASQUERADE"}
|
||||||
|
|
||||||
if !iptables.Exists(natArgs...) {
|
if !iptables.Exists(natArgs...) {
|
||||||
if output, err := iptables.Raw(append([]string{"-I"}, natArgs...)...); err != nil {
|
if output, err := iptables.Raw(append([]string{"-I"}, natArgs...)...); err != nil {
|
||||||
|
|
Loading…
Reference in a new issue