kpt.pejsek

$ ip a1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo    inet 127.0.0.2/8 brd 127.255.255.255 scope host secondary lo2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000    link/ether 00:12:3f:fb:25:dc brd ff:ff:ff:ff:ff:ff    inet 192.168.60.84/24 scope global eth03: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000    link/ether 00:0c:f1:22:a6:49 brd ff:ff:ff:ff:ff:ff    inet 10.0.0.1/24 brd 10.0.0.255 scope global eth1$ ip r l10.0.0.0/24 dev eth1  proto kernel  scope link  src 10.0.0.1 192.168.60.0/24 dev eth0  proto kernel  scope link  src 192.168.60.84 127.0.0.0/8 dev lo  scope link default via 10.0.0.138 dev eth1  proto static $ cat /media/disk/tmp/.backup/shara/config/myFW_template#!/bin/bashecho "starting myFW script"echosleep 1#Definujeme si rozhraniINET_IP="10.0.0.1/24"INET_IFACE="ath1"LAN_IP="192.168.60.84/24"LAN_SRC="192.168.60.0/24"LAN_BCAST="192.168.0.255"LAN_IFACE="eth0"LO_IP="127.0.0.1"LO_IFACE="lo"#Zavedme modulymodprobe ip_tablesmodprobe ipt_REJECTmodprobe ipt_LOGmodprobe ipt_MASQUERADEmodprobe ip_nat_ftpmodprobe ip_nat_ircmodprobe ip_conntrack_ftpmodprobe ip_conntrack_irc#Povolime forwardingecho "1" >/proc/sys/net/ipv4/ip_forward#Maly uklid..iptables -Fiptables -t nat -Fiptables -X#Zakladni chovani na nasi krizovatceiptables -P INPUT DROPiptables -P OUTPUT DROPiptables -P FORWARD DROP#Maskarada..iptables -t nat -A POSTROUTING -o $INET_IFACE -s $LAN_SRC -j MASQUERADE#Input/Output/Forward rulesiptables -A INPUT -j ACCEPTiptables -A OUTPUT -j ACCEPTiptables -A FORWARD -j ACCEPT