1
2
mirror of https://github.com/vimagick/dockerfiles synced 2024-06-16 11:58:47 +00:00
This commit is contained in:
kev 2015-06-29 03:57:52 +08:00
parent 378ee1dd8f
commit 5ca78aa507
2 changed files with 19 additions and 4 deletions

@ -16,7 +16,5 @@ COPY pptpd-options /etc/ppp/
EXPOSE 1723
CMD iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE \
&& syslogd \
&& pptpd \
&& sleep 0.1 \
&& tail -f /var/log/messages
&& syslogd -n -O /dev/stdout

@ -18,5 +18,22 @@ RUN sed -i -e '/^listen-address/s/127.0.0.1/0.0.0.0/' \
VOLUME /etc/privoxy
EXPOSE 8118
CMD iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner ! --uid-owner privoxy -j REDIRECT --to-ports 8118 \
CMD iptables -t filter -P OUTPUT DROP \
&& iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT \
&& iptables -t filter -A OUTPUT -p tcp \
-m multiport --dports 53,80,443,8118 \
-j ACCEPT \
&& iptables -t filter -A OUTPUT -p tcp \
-m state --state ESTABLISHED,RELATED \
-j ACCEPT \
&& iptables -t filter -A OUTPUT -p udp \
-m state --state ESTABLISHED,RELATED \
-j ACCEPT \
&& iptables -t filter -A OUTPUT -p tcp \
-m owner --uid-owner privoxy \
-j ACCEPT \
&& iptables -t nat -A OUTPUT -p tcp \
-m multiport --dports 80,443 \
-m owner ! --uid-owner privoxy \
-j REDIRECT --to-ports 8118 \
&& gosu privoxy privoxy --no-daemon /etc/privoxy/config