Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- eth0 192.168.15.1
- eth1 124.158.108.140
- /etc/rc.local
- echo 1 > /proc/sys/net/ipv4/ip_forward
- ### INPUT ###
- -A INPUT -i eth1 -j INBOUND
- -A INPUT -i eth0 -d 192.168.15.0/24 -j INBOUND
- -A INPUT -i eth0 -d 192.168.15.255/32 -j INBOUND
- -A INPUT -i eth0 -d 124.158.108.140/32 -j INBOUND
- -A INBOUND -p tcp --dport 80 -j ACCEPT
- -A INBOUND -s 192.168.15.5 -j DROP
- -A INBOUND -j LSI
- -A LSI -j DROP
- ### OUTPUT ###
- -A OUTPUT -o eth1 -j OUTBOUND
- -A OUTPUT -o eth0 -j OUTBOUND
- -A OUTBOUND -p tcp --dport 6881:6889 -j DROP
- -A OUTBOUND -d sex.com -j DROP
- -A OUTBOUND -d 192.168.15.5 -j DROP
- -A OUTBOUND -j ACCEPT
- ### Internet Sharing ###
- -A INPUT -i eth1 -j INBOUND
- -A INPUT -d 192.168.15.0/24 -i eth0 -j INBOUND
- -A INPUT -d 192.168.15.255/32 -i eth0 -j INBOUND
- -A INPUT -d 124.158.108.140/32 -i eth0 -j INBOUND
- -A FORWARD -p tcp -m state -d 192.168.15.0/24 --state RELATED,ESTABLISHED -j ACCEPT
- -A FORWARD -p udp -m state -d 192.168.15.0/24 --state RELATED,ESTABLISHED -j ACCEPT
- -A FORWARD -i eth0 -j OUTBOUND
- -A OUTBOUND -j ACCEPT
- -A POSTROUTING -o eth1 -j MASQUERADE
- ### Mapping Public IP to private IP ###
- -A FORWARD -p tcp -m tcp -d 192.168.15.1/32 -i eth1 --dport 80 -j ACCEPT
- -A PREROUTING -p tcp -m tcp -d 124.158.108.140/32 -i eth1 --dport 80 -j DNAT --to-destination 192.168.15.1:80
- #-A POSTROUTING -o eth1 -s 192.168.15.1/32 -j SNAT --to-source 124.158.108.140
Advertisement
Add Comment
Please, Sign In to add comment
