iptable

# Monitoring
iptables -A INPUT -i eth0 -s 88.190.254.0/24 -p tcp --dport 161 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -i eth0 -s 88.190.254.0/24 -p udp --dport 161 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -o eth0 -d 88.190.254.0/24 -p tcp --sport 161 -m state --state ESTABLISHED -j ACCEPT
echo - Monitoring Dedibox : [Ok]

# Accept all localhost traffic
iptables -A INPUT -j ACCEPT -i lo

# Regles de base
iptables -t nat -F
iptables -A FORWARD -i vif1.0 -j ACCEPT
iptables -A FORWARD -o vif1.0 -j ACCEPT
iptables -A FORWARD -i vif3.0 -j ACCEPT
iptables -A FORWARD -o vif3.0 -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -p igmp -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

# Autoriser les requetes DNS, FTP, HTTP
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 80 -j DNAT --to 10.0.0.3:80
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 20 -j DNAT --to 10.0.0.3:20
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 21 -j DNAT --to 10.0.0.3:21
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 49152:65534 -j DNAT --to 10.0.0.3
iptables -A PREROUTING -t nat -p udp -i eth0 --dport 49300 -j DNAT --to 10.0.0.3:49300

echo - Autoriser la redirection pour les serveurs virtuels [OK]
###### Fin Regles ######

echo Firewall mis a jour avec succes !