#!/bin/bash modprobe nf_conntrack_ftp 2> /dev/null modprobe nf_nat_ftp 2> /dev/null iptables -F iptables -X MOJ 2> /dev/null iptables -N MOJ iptables -A MOJ -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A MOJ -p tcp -m tcp --dport 443 -m state --state NEW -j ACCEPT iptables -A MOJ -p tcp -m tcp --dport 21 -m state --state NEW -j ACCEPT iptables -A MOJ -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT iptables -A INPUT -i lo iptables -A INPUT -j MOJ iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 80 -m state --state NEW -j ACCEPT iptables -A INPUT -p tcp -m tcp --dport 8080 -m state --state NEW -j ACCEPT iptables -P INPUT DROP iptables -A FORWARD -j MOJ iptables -A FORWARD -p udp -m udp --dport 53 -m state --state NEW -j ACCEPT iptables -A FORWARD -p tcp -m tcp --dport 53 -m state --state NEW -j ACCEPT iptables -P FORWARD DROP iptables -t nat -F #iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j SNAT --to 10.0.4.14 iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o wlan0 -j MASQUERADE iptables -t nat -A PREROUTING -p tcp --dport 7002 -i wlan0 -j DNAT --to 192.168.1.102:22 iptables -t nat -A PREROUTING -p tcp --dport 7003 -i wlan0 -j DNAT --to 192.168.1.103:22 iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0 ! -d 192.168.1.1 -j REDIRECT --to 8080
#!/bin/bash iptables -F iptables -P INPUT DROP iptables -P FORWARD DROP iptables -X MOJFW 2> /dev/null iptables -N MOJFW iptables -A MOJFW -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A MOJFW -m state --state NEW -p tcp --dport 80 -j ACCEPT iptables -A MOJFW -m state --state NEW -p tcp --dport 443 -j ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -j MOJFW iptables -A INPUT -m state --state NEW -p tcp --dport 22 -j ACCEPT iptables -A INPUT -m state --state NEW -m limit --limit 10/s -p tcp --dport 21 -j LOG --log-prefix "ABC: " iptables -A INPUT -m state --state NEW -p tcp --dport 21 -j ACCEPT iptables -A FORWARD -j MOJFW iptables -A FORWARD -m state --state NEW -p udp --dport 53 -j ACCEPT iptables -A FORWARD -m state --state NEW -p icmp --icmp-type echo-request -j ACCEPT iptables -A FORWARD -m state --state NEW -p tcp --dport 8080 -j ACCEPT iptables -A FORWARD -m state --state NEW -p tcp --dport 22 -d 192.168.56.0/24 -j ACCEPT iptables -t nat -F iptables -t nat -A POSTROUTING -s 192.168.56.0/24 -o eth0 -j SNAT --to 10.0.13.50 iptables -t nat -A PREROUTING -p tcp --dport 2222 -i eth0 -j DNAT --to 192.168.56.2:22 iptables -t mangle -F #iptables -t mangle -A FORWARD -j TTL --ttl-set 200
