All pastes #268177 Raw Edit

rafszy

public text v1 · immutable
·published 2006-12-05 12:32 UTC
rendered paste body
Skrypt rc.zewip

#!/bin/sh

USECOLOR=yes
. /etc/rc.d/functions
zewip=83.238.XX.XX
wewip=192.168.10.10
zewip1=83.238.XX.XX
wewip1=192.168.10.69
brd=83.238.XX.XX
mask=255.255.255.240
dev=eth0

case "$1" in
    start)
        stat_busy "Start przydzielania zewnetrznego IP"
        ifconfig $dev:1 $zewip broadcast $brd netmask $mask up
        /usr/sbin/iptables -t nat -I PREROUTING -s 0/0 -d $zewip -j DNAT --to $w
        /usr/sbin/iptables -t nat -I POSTROUTING -s $wewip -d 0/0 -j SNAT --to $
        /usr/sbin/iptables -I FORWARD -d $zewip -j ACCEPT
        /usr/sbin/iptables -I FORWARD -s $wewip -j ACCEPT
        /usr/sbin/iptables -I FORWARD -d $wewip -j ACCEPT
        /usr/sbin/iptables -I INPUT -d $zewip -j ACCEPT

ifconfig $dev:2 $zewip1 broadcast $brd netmask $mask up
        /usr/sbin/iptables -t nat -I PREROUTING -s 0/0 -d $zewip1 -j DNAT --to $
        /usr/sbin/iptables -t nat -I POSTROUTING -s $wewip1 -d 0/0 -j SNAT --to
        /usr/sbin/iptables -I FORWARD -d $zewip1 -j ACCEPT
        /usr/sbin/iptables -I FORWARD -s $wewip1 -j ACCEPT
        /usr/sbin/iptables -I FORWARD -d $wewip1 -j ACCEPT
        /usr/sbin/iptables -I INPUT -d $zewip1 -j ACCEPT

        stat_done
        ;;

    stop)
        stat_busy "Zatrzymanie przydzielania zewnetrznego IP"
        ifconfig $dev:1 down
        /usr/sbin/iptables -t nat -D PREROUTING -s 0/0 -d $zewip -j DNAT --to $w
        /usr/sbin/iptables -t nat -D POSTROUTING -s $wewip -d 0/0 -j SNAT --to $
        /usr/sbin/iptables -D FORWARD -d $zewip -j ACCEPT
        /usr/sbin/iptables -D FORWARD -s $wewip -j ACCEPT
        /usr/sbin/iptables -D FORWARD -d $wewip -j ACCEPT
        /usr/sbin/iptables -D INPUT -d $zewip -j ACCEPT

        ifconfig $dev:2 down
	/usr/sbin/iptables -t nat -D PREROUTING -s 0/0 -d $zewip1 -j DNAT --to $
        /usr/sbin/iptables -t nat -D POSTROUTING -s $wewip1 -d 0/0 -j SNAT --to
        /usr/sbin/iptables -D FORWARD -d $zewip1 -j ACCEPT
        /usr/sbin/iptables -D FORWARD -s $wewip1 -j ACCEPT
        /usr/sbin/iptables -D FORWARD -d $wewip1 -j ACCEPT
        /usr/sbin/iptables -D INPUT -d $zewip1 -j ACCEPT

        stat_done
        ;;
    restart)
        $0 stop
        sleep 1
        $0 start
        ;;
    *)
        echo "usage $0 (start|stop|restart)"
esac
exit 0

ifconfig

eth0      Link encap:Ethernet  HWaddr 00:04:76:19:84:25
          inet addr:83.238.XX.XX  Bcast:83.238.XX.XX  Mask:255.255.255.240
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1054976390 errors:5 dropped:0 overruns:1 frame:5
          TX packets:1149905464 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3533556791 (3369.8 Mb)  TX bytes:3022228924 (2882.2 Mb)
          Interrupt:17 Base address:0xbc00

eth0:1    Link encap:Ethernet  HWaddr 00:04:76:19:84:25
          inet addr:83.238.XX.XX  Bcast:83.238.XX.XX  Mask:255.255.255.240
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 Base address:0xbc00

eth0:2    Link encap:Ethernet  HWaddr 00:04:76:19:84:25
          inet addr:83.238.XX.XX  Bcast:83.238.XX.XX  Mask:255.255.255.240
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:17 Base address:0xbc00

eth1      Link encap:Ethernet  HWaddr 00:30:4F:28:C3:9C
          inet addr:192.168.10.253  Bcast:192.168.10.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1142517546 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1046778544 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1092837817 (1042.2 Mb)  TX bytes:1223368218 (1166.6 Mb)
          Interrupt:19 Base address:0xee00

imq0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP RUNNING NOARP  MTU:1500  Metric:1
          RX packets:1052084615 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1049577389 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:30
          RX bytes:709012674 (676.1 Mb)  TX bytes:2799067857 (2669.3 Mb)

imq1      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP RUNNING NOARP  MTU:1500  Metric:1
          RX packets:280726235 errors:0 dropped:0 overruns:0 frame:0
          TX packets:280388506 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:30
          RX bytes:3267823887 (3116.4 Mb)  TX bytes:3080348198 (2937.6 Mb)

imq2      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP RUNNING NOARP  MTU:1500  Metric:1
          RX packets:785623145 errors:0 dropped:0 overruns:0 frame:0
          TX packets:784601115 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:30
          RX bytes:2193450044 (2091.8 Mb)  TX bytes:1479980422 (1411.4 Mb)

imq3      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          UP RUNNING NOARP  MTU:1500  Metric:1
          RX packets:669358049 errors:0 dropped:0 overruns:0 frame:0
          TX packets:667117615 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:30
          RX bytes:606987546 (578.8 Mb)  TX bytes:3250439189 (3099.8 Mb)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:27472200 errors:0 dropped:0 overruns:0 frame:0
          TX packets:27472200 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:2533067529 (2415.7 Mb)  TX bytes:2533067529 (2415.7 Mb)

tap0      Link encap:Ethernet  HWaddr 00:FF:30:03:28:98
          inet addr:192.168.150.1  Bcast:192.168.150.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:197214 errors:0 dropped:0 overruns:0 frame:0
          TX packets:186389 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:18709226 (17.8 Mb)  TX bytes:59353512 (56.6 Mb)


iptables

Chain PREROUTING (policy ACCEPT 8673 packets, 702K bytes)
 pkts bytes target     prot opt in     out     source               destination 
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.1         0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.2         0.0.0.0/0           tcp dpt:80 redir ports 3128
   32  1536 REDIRECT   tcp  --  eth1   *       192.168.10.3         0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.4         0.0.0.0/0           tcp dpt:80 redir ports 3128
  107  5136 REDIRECT   tcp  --  eth1   *       192.168.10.5         0.0.0.0/0           tcp dpt:80 redir ports 3128
   34  1632 REDIRECT   tcp  --  eth1   *       192.168.10.6         0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.7         0.0.0.0/0           tcp dpt:80 redir ports 3128
    3   144 REDIRECT   tcp  --  eth1   *       192.168.10.8         0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.9         0.0.0.0/0           tcp dpt:80 redir ports 3128
   45  2160 REDIRECT   tcp  --  eth1   *       192.168.10.11        0.0.0.0/0           tcp dpt:80 redir ports 3128
  124  5952 REDIRECT   tcp  --  eth1   *       192.168.10.12        0.0.0.0/0           tcp dpt:80 redir ports 3128
  216 10368 REDIRECT   tcp  --  eth1   *       192.168.10.13        0.0.0.0/0           tcp dpt:80 redir ports 3128
    2    96 REDIRECT   tcp  --  eth1   *       192.168.10.14        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.15        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.16        0.0.0.0/0           tcp dpt:80 redir ports 3128
    4   192 REDIRECT   tcp  --  eth1   *       192.168.10.17        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.18        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.19        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.20        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.21        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.22        0.0.0.0/0           tcp dpt:80 redir ports 3128
    8   384 REDIRECT   tcp  --  eth1   *       192.168.10.23        0.0.0.0/0           tcp dpt:80 redir ports 3128
   42  2016 REDIRECT   tcp  --  eth1   *       192.168.10.24        0.0.0.0/0           tcp dpt:80 redir ports 3128
   42  2016 REDIRECT   tcp  --  eth1   *       192.168.10.25        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.26        0.0.0.0/0           tcp dpt:80 redir ports 3128
   51  2448 REDIRECT   tcp  --  eth1   *       192.168.10.27        0.0.0.0/0           tcp dpt:80 redir ports 3128
    2    96 REDIRECT   tcp  --  eth1   *       192.168.10.28        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.29        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.30        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.31        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.32        0.0.0.0/0           tcp dpt:80 redir ports 3128
   51  2448 REDIRECT   tcp  --  eth1   *       192.168.10.33        0.0.0.0/0           tcp dpt:80 redir ports 3128
   39  1872 REDIRECT   tcp  --  eth1   *       192.168.10.34        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.35        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.36        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.37        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.38        0.0.0.0/0           tcp dpt:80 redir ports 3128
   20   960 REDIRECT   tcp  --  eth1   *       192.168.10.39        0.0.0.0/0           tcp dpt:80 redir ports 3128
   41  1968 REDIRECT   tcp  --  eth1   *       192.168.10.40        0.0.0.0/0           tcp dpt:80 redir ports 3128
  143  6864 REDIRECT   tcp  --  eth1   *       192.168.10.41        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.42        0.0.0.0/0           tcp dpt:80 redir ports 3128
  122  5856 REDIRECT   tcp  --  eth1   *       192.168.10.43        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.44        0.0.0.0/0           tcp dpt:80 redir ports 3128
    2    96 REDIRECT   tcp  --  eth1   *       192.168.10.45        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.46        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.47        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.48        0.0.0.0/0           tcp dpt:80 redir ports 3128
    6   288 REDIRECT   tcp  --  eth1   *       192.168.10.49        0.0.0.0/0           tcp dpt:80 redir ports 3128
  219  9960 REDIRECT   tcp  --  eth1   *       192.168.10.50        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.51        0.0.0.0/0           tcp dpt:80 redir ports 3128
  188  9024 REDIRECT   tcp  --  eth1   *       192.168.10.52        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.53        0.0.0.0/0           tcp dpt:80 redir ports 3128
   13   624 REDIRECT   tcp  --  eth1   *       192.168.10.54        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.55        0.0.0.0/0           tcp dpt:80 redir ports 3128
   15   720 REDIRECT   tcp  --  eth1   *       192.168.10.56        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.57        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.58        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.59        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.60        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.61        0.0.0.0/0           tcp dpt:80 redir ports 3128
    1    48 REDIRECT   tcp  --  eth1   *       192.168.10.62        0.0.0.0/0           tcp dpt:80 redir ports 3128
  159  7632 REDIRECT   tcp  --  eth1   *       192.168.10.63        0.0.0.0/0           tcp dpt:80 redir ports 3128
  130  6240 REDIRECT   tcp  --  eth1   *       192.168.10.64        0.0.0.0/0           tcp dpt:80 redir ports 3128
   34  1632 REDIRECT   tcp  --  eth1   *       192.168.10.65        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.66        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.67        0.0.0.0/0           tcp dpt:80 redir ports 3128
    0     0 REDIRECT   tcp  --  eth1   *       192.168.10.68        0.0.0.0/0           tcp dpt:80 redir ports 3128
   21  1008 REDIRECT   tcp  --  eth1   *       192.168.10.70        0.0.0.0/0           tcp dpt:80 redir ports 3128
  354 20184 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:4662 to:192.168.10.8:4662
 8142  516K DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:4672 to:192.168.10.8:4672
 1124 58276 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:6999 to:192.168.10.6:6999
    0     0 DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:6999 to:192.168.10.6:6999
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:6886 to:192.168.10.6:6886
    0     0 DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:6886 to:192.168.10.6:6886
 6150  558K DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:7000 to:192.168.10.6:7000
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:4899 to:192.168.10.5:4899
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:23 to:192.168.10.5:23
    0     0 DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:23 to:192.168.10.5:23
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:6000 to:192.168.10.3:6000
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:3306 to:192.168.10.253:3306
    0     0 DNAT       tcp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 to:192.168.10.69:443
    0     0 DNAT       udp  --  eth0   *       0.0.0.0/0            0.0.0.0/0           udp dpt:443 to:192.168.10.69:443