All pastes #205231 Raw Edit

Stuff

public shellscript v1 · immutable
#205231 ·published 2006-10-16 17:28 UTC
rendered paste body
### Enable Packet Forwardingecho 1 > /proc/sys/net/ipv4/ip_forward### Remove all previous rules, and delete any user defined chainsiptables -Fiptables -Xiptables -t nat -Fiptables -t nat -X### Set the default policiesiptables -P INPUT   DROPiptables -P OUTPUT  ACCEPTiptables -P FORWARD DROP### Loopback device OKiptables -A INPUT  -i lo -j ACCEPTiptables -A OUTPUT -o lo -j ACCEPT### Mascuarade home lan packets#iptables -t nat -A POSTROUTING -o ppp0 -s 10.103.0.62/255.255.255.255 -j MASQUERADEiptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE### Input rulesiptables -A INPUT -i ppp0 -j ACCEPTiptables -A INPUT -i eth0 -s 0/0 -d 0.0.0.0/0 -j DROPiptables -A INPUT -i eth0 -s 10.103.0.62/255.255.255.255 -d 0.0.0.0/0 -j ACCEPTiptables -A INPUT -i eth0 -s 0/0  -d 10.0.0.0/8 -j ACCEPT