feat(roles/security): added destination filter to DNAT

2026-07-25 18:55:19 +03:00
parent a72a7f92d3
commit 18f24898fb
1 changed files with 3 additions and 0 deletions
@@ -248,6 +248,9 @@ table ip ansible_nat {
 {% if rule.source is defined %}
 {% set _ = dnat_match.append('ip saddr ' + rule.source) %}
 {% endif %}
+{% if rule.destination is defined %}
+{% set _ = dnat_match.append('ip daddr ' + rule.destination) %}
+{% endif %}
 {% set _ = dnat_match.append(proto + ' dport ' + rule.port | string) %}
 {% if rule.redirect is defined %}
        {{ dnat_match | join(' ') }} redirect to :{{ rule.redirect }}{{ comment }}