#NAT-POOL
${FwCMD} nat 1 config log ip *.*.*.67 deny_in reset same_ports
${FwCMD} nat 2 config log ip *.*.*.68 deny_in reset same_ports
${FwCMD} nat 3 config log ip *.*.*.69 deny_in reset same_ports
${FwCMD} nat 4 config log ip *.*.*.70 deny_in reset same_ports
${FwCMD} nat 5 config log ip *.*.*.71 deny_in reset same_ports
${FwCMD} nat 6 config log ip *.*.*.72 deny_in reset same_ports
${FwCMD} nat 7 config log ip *.*.*.73 deny_in reset same_ports
${FwCMD} nat 8 config log ip *.*.*.74 deny_in reset same_ports
${FwCMD} nat 9 config log ip *.*.*.75 deny_in reset same_ports
${FwCMD} nat 10 config log ip *.*.*.76 deny_in reset same_ports
${FwCMD} nat 11 config log ip *.*.*.77 deny_in reset same_ports
${FwCMD} nat 12 config log ip *.*.*.78 deny_in reset same_ports
${FwCMD} nat 13 config log ip *.*.*.79 deny_in reset same_ports
${FwCMD} nat 14 config log ip *.*.*.80 deny_in reset same_ports
${FwCMD} nat 15 config log ip *.*.*.81 deny_in reset same_ports
${FwCMD} nat 16 config log ip *.*.*.82 deny_in reset same_ports
${FwCMD} nat 17 config log ip *.*.*.83 deny_in reset same_ports
${FwCMD} nat 18 config log ip *.*.*.84 deny_in reset same_ports
${FwCMD} nat 19 config log ip *.*.*.85 deny_in reset same_ports
${FwCMD} nat 20 config log ip *.*.*.86 deny_in reset same_ports
${FwCMD} nat 21 config log ip *.*.*.87 deny_in reset same_ports
${FwCMD} nat 22 config log ip *.*.*.88 deny_in reset same_ports
${FwCMD} nat 23 config log ip *.*.*.89 deny_in reset same_ports
${FwCMD} nat 24 config log ip *.*.*.90 deny_in reset same_ports
${FwCMD} nat 25 config log ip *.*.*.91 deny_in reset same_ports
${FwCMD} nat 26 config log ip *.*.*.92 deny_in reset same_ports
${FwCMD} nat 27 config log ip *.*.*.93 deny_in reset same_ports
${FwCMD} nat 28 config log ip *.*.*.94 deny_in reset same_ports
${FwCMD} nat 29 config log ip *.*.*.95 deny_in reset same_ports
${FwCMD} nat 30 config log ip *.*.*.96 deny_in reset same_ports
${FwCMD} nat 31 config log ip *.*.*.97 deny_in reset same_ports
${FwCMD} nat 32 config log ip *.*.*.98 deny_in reset same_ports


${FwCMD} add 6000 nat tablearg ip from table\(66\) to any via ${WAN_IF}
${FwCMD} add 6001 nat tablearg ip from any to table\(67\) via ${WAN_IF}

#######Abons address#############  Which number nat
${FwCMD} table 66 add 10.0.1.0/27 1
${FwCMD} table 66 add 10.0.1.32/27 2
${FwCMD} table 66 add 10.0.1.64/27 3
${FwCMD} table 66 add 10.0.1.96/27 4
${FwCMD} table 66 add 10.0.1.128/27 5
${FwCMD} table 66 add 10.0.1.160/27 6
${FwCMD} table 66 add 10.0.1.192/27 7
${FwCMD} table 66 add 10.0.1.224/27 8
${FwCMD} table 66 add 10.0.2.0/27 9
${FwCMD} table 66 add 10.0.2.32/27 10
${FwCMD} table 66 add 10.0.2.64/27 11
${FwCMD} table 66 add 10.0.2.96/27 12
${FwCMD} table 66 add 10.0.2.128/27 13
${FwCMD} table 66 add 10.0.2.160/27 14
${FwCMD} table 66 add 10.0.2.192/27 15
${FwCMD} table 66 add 10.0.2.224/27 16
${FwCMD} table 66 add 10.0.3.0/27 17
${FwCMD} table 66 add 10.0.3.32/27 18
${FwCMD} table 66 add 10.0.3.64/27 19
${FwCMD} table 66 add 10.0.3.96/27 20
${FwCMD} table 66 add 10.0.3.128/27 21
${FwCMD} table 66 add 10.0.3.160/27 22
${FwCMD} table 66 add 10.0.3.192/27 23
${FwCMD} table 66 add 10.0.3.224/27 24
${FwCMD} table 66 add 10.0.4.0/27 25
${FwCMD} table 66 add 10.0.4.32/27 26
${FwCMD} table 66 add 10.0.4.64/27 27
${FwCMD} table 66 add 10.0.4.96/27 28
${FwCMD} table 66 add 10.0.4.128/27 29
${FwCMD} table 66 add 10.0.4.160/27 30
${FwCMD} table 66 add 10.0.4.192/27 31
${FwCMD} table 66 add 10.0.4.224/27 32



####################   EXTERNAL IP#  NAT NUMBER
${FwCMD} table 67 add *.*.*.67 1
${FwCMD} table 67 add *.*.*.68 2
${FwCMD} table 67 add *.*.*.69 3
${FwCMD} table 67 add *.*.*.70 4
${FwCMD} table 67 add *.*.*.71 5
${FwCMD} table 67 add *.*.*.72 6
${FwCMD} table 67 add *.*.*.73 7
${FwCMD} table 67 add *.*.*.74 8
${FwCMD} table 67 add *.*.*.75 9
${FwCMD} table 67 add *.*.*.76 10
${FwCMD} table 67 add *.*.*.77 11
${FwCMD} table 67 add *.*.*.78 12
${FwCMD} table 67 add *.*.*.79 13
${FwCMD} table 67 add *.*.*.80 14
${FwCMD} table 67 add *.*.*.81 15
${FwCMD} table 67 add *.*.*.82 16
${FwCMD} table 67 add *.*.*.83 17
${FwCMD} table 67 add *.*.*.84 18
${FwCMD} table 67 add *.*.*.85 19
${FwCMD} table 67 add *.*.*.86 20
${FwCMD} table 67 add *.*.*.87 21
${FwCMD} table 67 add *.*.*.88 22
${FwCMD} table 67 add *.*.*.89 23
${FwCMD} table 67 add *.*.*.90 24
${FwCMD} table 67 add *.*.*.91 25
${FwCMD} table 67 add *.*.*.92 26
${FwCMD} table 67 add *.*.*.93 27
${FwCMD} table 67 add *.*.*.94 28
${FwCMD} table 67 add *.*.*.95 29
${FwCMD} table 67 add *.*.*.96 30
${FwCMD} table 67 add *.*.*.97 31
${FwCMD} table 67 add *.*.*.98 32



#Shaper - table 4 download speed, table 3 - upload speed
${FwCMD} add 12001 pipe tablearg ip from any to table\(4\) via ${USER_INTERFACE}                                                                                                                                                                                                                                              out
${FwCMD} add 12000 pipe tablearg ip from table\(3\) to any via ${USER_INTERFACE}                                                                                                                                                                                                                                              in

#
#${FwCMD} add 21000 pipe 7 ip from table\(3\) to table\(6\) via ${USER_INTERFACE                                                                                                                                                                                                                                             } in
#${FwCMD} add 21001 pipe 6 ip from table\(6\) to table\(4\) via ${USER_INTERFACE                                                                                                                                                                                                                                             } out
                                                                                                                                                                                                                                             CE}

# default block policy
${FwCMD} add 65533 deny all from table\(2\) to any via ${USER_INTERFACE}
${FwCMD} add 65534 deny all from any to table\(2\) via ${USER_INTERFACE}
${FwCMD} add 65535 allow all from any to any