diff --git a/internal/firewall/iptables.go b/internal/firewall/iptables.go index 80f690f1f..c57ae5e53 100644 --- a/internal/firewall/iptables.go +++ b/internal/firewall/iptables.go @@ -210,9 +210,9 @@ func (c *Config) redirectPort(ctx context.Context, intf string, } err = c.runIptablesInstructions(ctx, []string{ - fmt.Sprintf("-t nat %s PREROUTING %s -d 127.0.0.1 -p tcp --dport %d -j REDIRECT --to-ports %d", + fmt.Sprintf("-t nat %s PREROUTING %s -p tcp --dport %d -j REDIRECT --to-ports %d", appendOrDelete(remove), interfaceFlag, sourcePort, destinationPort), - fmt.Sprintf("-t nat %s PREROUTING %s -d 127.0.0.1 -p udp --dport %d -j REDIRECT --to-ports %d", + fmt.Sprintf("-t nat %s PREROUTING %s -p udp --dport %d -j REDIRECT --to-ports %d", appendOrDelete(remove), interfaceFlag, sourcePort, destinationPort), }) if err != nil { @@ -221,9 +221,9 @@ func (c *Config) redirectPort(ctx context.Context, intf string, } err = c.runIP6tablesInstructions(ctx, []string{ - fmt.Sprintf("-t nat %s PREROUTING %s -d ::1 -p tcp --dport %d -j REDIRECT --to-ports %d", + fmt.Sprintf("-t nat %s PREROUTING %s -p tcp --dport %d -j REDIRECT --to-ports %d", appendOrDelete(remove), interfaceFlag, sourcePort, destinationPort), - fmt.Sprintf("-t nat %s PREROUTING %s -d ::1 -p udp --dport %d -j REDIRECT --to-ports %d", + fmt.Sprintf("-t nat %s PREROUTING %s -p udp --dport %d -j REDIRECT --to-ports %d", appendOrDelete(remove), interfaceFlag, sourcePort, destinationPort), }) if err != nil {