X-Git-Url: https://iankelling.org/git/?p=distro-setup;a=blobdiff_plain;f=vpn-mail-forward;h=7965263cebae29eb071eca2ba417faff935c9c31;hp=30159a130f604d32c7b2026ce1913724ad160871;hb=6459d4698ef983f7b1540589b87013c76913393d;hpb=b1c29177fe76f8f2a557f7f36c987df3ef2a6cb4

diff --git a/vpn-mail-forward b/vpn-mail-forward
index 30159a1..7965263 100755
--- a/vpn-mail-forward
+++ b/vpn-mail-forward
@@ -2,12 +2,16 @@
 
 set -eE -o pipefail
 trap 'echo "$0:$LINENO:error: \"$BASH_COMMAND\" returned $?" >&2' ERR
-
+m() { printf "%s\n" "$*";  "$@"; }
+gw=$(/usr/sbin/ip route | sed -rn 's/^default via .* dev (\S+).*/\1/p')
 do-forward() {
     cmd=$1; shift
     for port; do
-        /sbin/iptables -t nat $cmd PREROUTING -i eth0 -p tcp -m tcp --dport $port -j DNAT --to-destination 10.8.0.4:$port
+        m /sbin/iptables -t nat $cmd PREROUTING -i $gw -p tcp -m tcp --dport $port -j DNAT --to-destination 10.8.0.4:$port
+        # we could leave these on all the time but its convenient to do it here
     done
+    m /sbin/iptables $cmd FORWARD -i tun+ -o $gw -j ACCEPT
+    m /sbin/iptables $cmd FORWARD -i $gw -o tun+ -j ACCEPT
 }
 
 ports=(25 143 587)