17 commits

Author	SHA1	Message	Date
Joachim F	0906a0f197	Merge pull request #18491 from groxxda/network-interfaces ... Replace Network-interfaces.target	2016-10-02 16:34:37 +02:00
Alexander Ried	8524df1259	networking.nat: replace network-interfaces.target ... We can replace this safely with network-pre because iptables does not care whether the interfaces exist or not.	2016-09-13 11:19:22 +02:00
Eric Sagnes	c3bdee3c39	nat module: optionSet -> submodule	2016-09-13 12:53:10 +09:00
Domen Kožar	25e3c091a0	Revert "nixos/nat: Allow nat without an externalInterface" ... This reverts commit 431a98b12b. Breaks nixos tests: http://hydra.nixos.org/build/35538207	2016-05-12 11:04:06 +01:00
Franz Pletz	431a98b12b	nixos/nat: Allow nat without an externalInterface	2016-05-12 01:52:13 +02:00
William A. Kennington III	ba53392bce	nixos/nat: Fix override so that sysctls are properly preserved	2014-10-31 16:50:25 -07:00
William A. Kennington III	ae195727b7	nixos/nat: Don't flush tables, create subchains for autogenerated rules	2014-09-18 11:28:58 -07:00
William A. Kennington III	1321fd175d	nixos/nat: Leverage firewall module	2014-09-15 21:31:27 -07:00
Luca Bruno	2ba523df24	nixos nat: add description to forwardPorts	2014-09-04 11:33:08 +02:00
Luca Bruno	e6ab680cbf	nixos nat: add type for sourcePort and destination of forwardPorts	2014-09-04 10:26:33 +02:00
Luca Bruno	b21ac60290	nixos/nat: add forwardPorts for external->internal DNAT	2014-09-01 22:31:56 +02:00
Eelco Dolstra	29027fd1e1	Rewrite ‘with pkgs.lib’ -> ‘with lib’ ... Using pkgs.lib on the spine of module evaluation is problematic because the pkgs argument depends on the result of module evaluation. To prevent an infinite recursion, pkgs and some of the modules are evaluated twice, which is inefficient. Using ‘with lib’ prevents this problem.	2014-04-14 16:26:48 +02:00
Eelco Dolstra	017408e048	Use iptables' ‘-w’ flag ... This prevents errors like "Another app is currently holding the xtables lock" if the firewall and NAT services are starting in parallel. (Longer term, we should probably move to a single service for managing the iptables rules.)	2014-04-11 17:16:44 +02:00
Eelco Dolstra	b9281e6a2d	Fix NAT module	2014-04-11 17:16:44 +02:00
Eelco Dolstra	a34bfbab4c	Add option networking.nat.internalInterfaces ... This allows applying NAT to an interface, rather than an IP range.	2014-04-10 15:07:29 +02:00
Eelco Dolstra	408b8b5725	Add lots of missing option types	2013-10-30 18:47:43 +01:00
Eelco Dolstra	5c1f8cbc70	Move all of NixOS to nixos/ in preparation of the repository merge	2013-10-10 13:28:20 +02:00

Renamed from modules/services/networking/nat.nix (Browse further)