Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- linkxs@routerpi ~ $ cat /etc/firewall.conf
- # Generated by iptables-save v1.4.14 on Tue Mar 26 23:14:22 2013
- *nat
- :PREROUTING ACCEPT [85180:5549146]
- :INPUT ACCEPT [3:192]
- :OUTPUT ACCEPT [73:14168]
- :POSTROUTING ACCEPT [1672:116458]
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 1029 -j DNAT --to-destination 172.16.8.125:22
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 1026 -j DNAT --to-destination 172.16.8.125:1026
- -A PREROUTING -i eth0 -p udp -m udp --dport 1026 -j DNAT --to-destination 172.16.8.125:1026
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 113 -j DNAT --to-destination 172.16.8.125:113
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 32400 -j DNAT --to-destination 172.16.8.126:32400
- -A PREROUTING -i eth0 -p udp -m udp --dport 32400 -j DNAT --to-destination 172.16.8.126:32400
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.16.8.152:80
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 25565 -j DNAT --to-destination 172.16.8.154:25565
- -A PREROUTING -i eth0 -p udp -m udp --dport 9987 -j DNAT --to-destination 172.16.8.155:9987
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 30033 -j DNAT --to-destination 172.16.8.155:30033
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 10011 -j DNAT --to-destination 172.16.8.155:10011
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 1030 -j DNAT --to-destination 172.16.8.163:22
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 1031 -j DNAT --to-destination 172.16.8.164:22
- -A PREROUTING -i eth0 -p tcp -m tcp --dport 1032 -j DNAT --to-destination 172.16.8.165:22
- -A POSTROUTING -o eth0 -j MASQUERADE
- COMMIT
- # Completed on Tue Mar 26 23:14:22 2013
- # Generated by iptables-save v1.4.14 on Tue Mar 26 23:14:22 2013
- *filter
- :INPUT DROP [0:0]
- :FORWARD ACCEPT [60:3790]
- :OUTPUT ACCEPT [92:11264]
- -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
- -A INPUT -s 172.16.8.152 -j ACCEPT
- -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
- -A INPUT -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[FIREWALL-IN]"
- -A FORWARD -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[FIREWALL-FWD]"
- -A OUTPUT -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[FIREWALL-OUT]"
- COMMIT
- # Completed on Tue Mar 26 23:14:22 2013
- linkxs@routerpi ~ $
Advertisement
Add Comment
Please, Sign In to add comment