root

#!/bin/bashcase "$1" in        start|restart)                echo -n 'Starting netfilter rules: firewall'                for i in /proc/sys/net/ipv4/conf/*/rp_filter; do                    echo 1 >$i                done                echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts                echo 1 > /proc/sys/net/ipv4/tcp_syncookies                iptables -F                iptables -P INPUT DROP                iptables -P FORWARD DROP                iptables -P OUTPUT ACCEPT		iptables -A INPUT -p icmp -j ACCEPT                iptables -A INPUT -i lo -j ACCEPT                iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT		#tor                iptables -A INPUT -p tcp --syn --dport 9001  -j ACCEPT		#vpn                iptables -A INPUT -p tcp --syn --dport 1200  -j ACCEPT                iptables -A INPUT -p tcp --syn --dport 80  -j ACCEPT		#ssh                iptables -A INPUT -p tcp --syn --dport 22  -j ACCEPT		#dns tunnel                iptables -A INPUT -p udp --dport 53  -j ACCEPT		#tun0 -- vpn                iptables -A INPUT -i tun0 -j ACCEPT                iptables -A FORWARD -i tun0 -j ACCEPT#		iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 443 -j DNAT --to 69.93.127.69:65356#		iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 5024 -j DNAT --to 127.0.0.1:5000#		iptables -A INPUT -p tcp -s 81.171.111.117 -m state --syn --state NEW --dport 25 -m limit --limit 1/minute --limit-burst 1 -j ACCEPT#               iptables -A INPUT -j LOG --log-prefix 'Firewall: ' -m limit --limit 10/s --limit-burst 10                echo '.'        ;;        stop)                echo -n 'Stopping netfilter rules: firewall'                iptables -P INPUT ACCEPT                iptables -F                echo '.'        ;;        *)                echo "Sintaxe: $0 [ start | restart | stop ]"        ;;esac