kamilosxd678

[SEM05][ASK-LAB2] iptables config script

Oct 15th, 2013
171
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 1.07 KB | None | 0 0
  1. #!/bin/bash
  2. #CZYSZCZENIE REGUL
  3. iptables -F
  4. iptables -F -t nat
  5. iptables -X -t nat
  6. iptables -F -t filter
  7. iptables -X -t filter
  8.  
  9. iptables -P FORWARD DROP
  10. iptables -P INPUT DROP
  11. iptables -P OUTPUT ACCEPT
  12.  
  13. iptables -A INPUT -i lo -j ACCEPT
  14. iptables -A INPUT -i eth1 -j ACCEPT
  15. iptables -A INPUT -i eth0 -s 192.168.56.101 -j DROP
  16. iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  17. #OTWARCIE PORTU oraz PRZEKIEROWANIE GO
  18. iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 1234 -j ACCEPT
  19. echo "1">/proc/sys/net/ipv4/ip_forward
  20. iptables -A FORWARD -i eth1 -o eth0 -s 192.168.1.0/255.255.255.0 -d 0/0 -j ACCEPT
  21. iptables -A FORWARD -i eth0 -o eth1 -s 0/0 -d 192.168.1.0/255.255.255.0 -j ACCEPT
  22. iptables -t nat -A POSTROUTING -s 192.168.1.0/255.255.255.0 -d 0/0 -j MASQUERADE
  23.  
  24. iptables -A PREROUTING -t nat -i eth0 -p tcp -d 192.168.56.101 --dport 1234 -j DNAT --to-destination 192.168.1.3:22
  25. iptables -A PREROUTING -t nat -i eth1 -p tcp -d 192.168.56.101 --dport 1234 -j DNAT --to-destination 192.168.1.3:22
  26.  
  27. iptables -A FORWARD -i eth1 -o eth1 -j ACCEPT
Advertisement
Add Comment
Please, Sign In to add comment