def clear_rules():
# type: () -> None
"""Clear all rules."""
execute_commands([
"iptables -F", "iptables -X", "iptables -t nat -F",
"iptables -t nat -X"
])
def clear_rules():
# type: () -> None
"""Clear all rules."""
execute_commands([
"iptables -F", "iptables -X", "iptables -t nat -F",
"iptables -t nat -X"
])
def nat(internal_interface, external_interface):
# type: (str, str) -> None
"""Do NAT."""
execute_commands([
"iptables -t nat -A POSTROUTING -o {} -j MASQUERADE".format(
external_interface),
"iptables -A FORWARD -i {} -o {} -j ACCEPT".format(
internal_interface, external_interface)
])
def nat(internal_interface, external_interface):
# type: (str, str) -> None
"""Do NAT."""
execute_commands([
"iptables -t nat -A POSTROUTING -o {} -j MASQUERADE".format(
external_interface),
"iptables -A FORWARD -i {} -o {} -j ACCEPT".format(
internal_interface, external_interface)
])
def redirect_requests_localhost():
# type: () -> None
"""Redirect HTTP, HTTPS & DNS requests to localhost.
Redirect the following requests to localhost:
* HTTP (Port 80)
* HTTPS (Port 443)
* DNS (Port 53)
"""
execute_commands([
"iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, PORT),
"iptables -t nat -A PREROUTING -p udp --dport 53 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, 53),
"iptables -t nat -A PREROUTING -p tcp --dport 53 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, 53),
"iptables -t nat -A PREROUTING -p tcp --dport 443 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, SSL_PORT)
])
def redirect_requests_localhost():
# type: () -> None
"""Redirect HTTP, HTTPS & DNS requests to localhost.
Redirect the following requests to localhost:
* HTTP (Port 80)
* HTTPS (Port 443)
* DNS (Port 53)
"""
execute_commands([
"iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, PORT),
"iptables -t nat -A PREROUTING -p udp --dport 53 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, 53),
"iptables -t nat -A PREROUTING -p tcp --dport 53 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, 53),
"iptables -t nat -A PREROUTING -p tcp --dport 443 -j DNAT "
"--to-destination {}:{}".format(NETWORK_GW_IP, SSL_PORT)
])