this is a snapshot from my gcp google cloudshell. And you can use docker inside your gcp;-)
So, google put at your disposal a free software « gnu linux debian » but you paid this…
Exemple de routage de port depuis eth0 port 8081 vers 172.17.0.3
IF_IN=eth0
PORT_IN=8081
IP_OUT=172.17.0.3
PORT_OUT=8081
echo « 1 » > /proc/sys/net/ipv4/ip_forward
$IPTBL -A PREROUTING -t nat -i $IF_IN -p tcp –dport $PORT_IN -j DNAT –to-destination ${IP_OUT}:${PORT_OUT}
$IPTBL -A FORWARD -p tcp -d $IP_OUT –dport $PORT_OUT -j ACCEPT
$IPTBL -A POSTROUTING -t nat -j MASQUERADE
Problème de livraison de courriel postfix…
Problème de livraison de courriel
Problème de:
1) /*========*/
Oct 24 12:17:18 monserveur postfix/smtpd[8489]: NOQUEUE: reject: CONNECT from mondomain[X.X.X.X]: 554 5.7.1 <mondomain51.15.16
7.80]>: Client host rejected: Access denied; proto=SMTP
Oct 24 12:17:18 monserveur amavis[8140]: (08140-01) (!)y-oL4BVEjfAR FWD from <monuser@mondomain> -> <monuser@mondomain>, 451 4.5.0 Fr
om MTA() during fwd-connect (Negative greeting: 554 5.7.1 <mondomain[X.X.X.X]>: Client host rejected: Access denied): id=08140
Solution:
a)mise à jour du fichier /etc/postfix/master.cf
==>modification de ‘reject’ par ‘reject_unauth_destination’ des deux lignes «smtpd_client_restrictions » et « smtpd_recipient_restrictions »
127.0.0.1:10025 inet n – n – – smtpd
-o content_filter=
-o smtpd_delay_reject=no
-o smtpd_client_restrictions=permit_mynetworks,reject_unauth_destination
-o smtpd_recipient_restrictions=permit_mynetworks,reject_unauth_destination
b) redémarrer le service postfix, amavis, spamassassin…
2) /*=========*/
Oct 24 10:10:55 monserveur amavis[1105]: (!)DENIED ACCESS from IP X.X.X.X, policy bank »
Oct 24 10:10:55 monserveur postfix/smtp[7444]: F1DFA442374: to=<monuser@mondomain>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.08, delay
s=0.06/0.01/0/0, dsn=4.4.2, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while receiving the initial server greeting)
Oct 24 10:10:55 monserveur postfix/smtp[7444]: using backwards-compatible default setting relay_domains=$mydestination to update fast-fl
ush logfile for domain « mondomain »
Solution:
a)modifier le contenu du fichier » /etc/amavis/conf.d/50-user » :
use strict
@inet_acl = qw( 127.0.0.1 [::1] X.X.X.X Y.Y.Y.Y Z.Z.Z.Z);
$inet_socket_bind = undef;
1;
b) redémarrer le service postfix, amavis, spamassassin…
Forwarding route port on linux debian
1) set a value 1 in /proc/sys/net/ipv4/ip_forward
2) update your routing iptables
For this sample, we route the port 8080(SRC) to(=>) 8080(DST):
#iptables -t nat -A PREROUTING -p tcp -s 0/0 -d (IP_SRC) –dport 8080 -j DNAT –to (IP_DST):8080
#iptables -t nat -A POSTROUTING -o (INTERFACE_ETH_SRC) -d (IP-DST) -j SNAT –to-source (IP_SRC)
