rendered paste body
$IPTABLES -F # arunca tot din baza de date
$IPTABLES -F -t nat
$IPTABLES -P INPUT LOG
$IPTABLES -P OUTPUT LOG
#$IPTABLES -P FORWARD LOG
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -P FORWARD DROP
#################################################################
# SETARI IP-URI #
#################################################################
#################################################################
# SETARI GENERALE RETEA #
#################################################################
$IPTABLES -A INPUT -j ACCEPT -i lo
$IPTABLES -A OUTPUT -j ACCEPT -o lo
$IPTABLES -A INPUT -j ACCEPT -i eth2
$IPTABLES -A OUTPUT -j ACCEPT -o eth2
$IPTABLES -A OUTPUT -j ACCEPT -o eth0
#################################################################
# SETARI LAN #
#################################################################
# NU STERGE, DOAR COMENTEAZA #
$IPTABLES -A INPUT -p tcp -s 213.164.226.154 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -s 213.164.226.154 -j ACCEPT
# softdreams
#$IPTABLES -A INPUT -p tcp -s 86.35.136.8 --dport 22 -j ACCEPT
#$IPTABLES -A OUTPUT -p tcp -s 86.35.136.8 --dport 22 -j ACCEP
# dezibel
$IPTABLES -A INPUT -p tcp -s 82.76.186.62 --dport 22 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -s 82.76.186.62 --sport 22 -j ACCEP
#ACASA LA VALI
$IPTABLES -A INPUT -p tcp -s 89.137.195.37 --dport 22 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -S 89.137.195.37 --sport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 192.168.2.12 --dport 22 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -s 192.168.2.12 --sport 22 -j ACCEPT
# De comentat
$IPTABLES -A INPUT -p tcp -s 141.85.0.69 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -s 141.85.0.69 -j ACCEPT
$IPTABLES -A INPUT -p tcp -s 141.85.0.69 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -s 141.85.0.69 -j ACCEPT
#
$IPTABLES -A INPUT -p tcp -s 0.0.0.0/0 --dport 80 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp -d 0.0.0.0/0 --dport 80 -j ACCEPT
#################################################################
# SETARI GENERALE LOGGER #
#################################################################
#################################################################
# SETARI SERVER DE MAIL #
#################################################################
#smtp
$IPTABLES -A INPUT -p udp --dport 25 -j ACCEPT
$IPTABLES -A OUTPUT -p udp --sport 25 -j ACCEPT
$IPTABLES -A INPUT -p udp --dport 25 -j LOG --log-udp-options
$IPTABLES -A OUTPUT -p udp --sport 25 -j LOG --log-udp-options
#SMTP SECURE
$IPTABLES -A INPUT -p tcp --dport 465 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --sport 465 -j ACCEPT
#$IPTABLES -A INPUT -p udp --dport 465 -j ACCEPT
#$IPTABLES -A OUTPUT -p udp --sport 465 -j ACCEPT
#pop3
$IPTABLES -A INPUT -p tcp --dport 110 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --sport 110 -j ACCEPT
$IPTABLES -A INPUT -j LOG --log-tcp-options
$IPTABLES -A OUTPUT -j LOG --log-tcp-options
#POP SSL
$IPTABLES -A INPUT -p tcp --dport 995 -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --sport 995 -j ACCEPT
#IMAP
$IPTABLES -A INPUT --dport 143 -j ACCEPT
$IPTABLES -A OUTPUT --sport 143 -j ACCEPT
$IPTABLES -A INPUT --dport 143 -j LOG --log-tcp-options
$IPTABLES -A OUTPUT --sport 143 -LOG --log-tcp-options
#################################################################
# LISTA IPURI #
#################################################################
# 192.168.2.11 VALI #
# 192.168.2.12 EXECUTIV () #
# 192.168.2.13 FLORIN (grm3) #
# 192.168.2.14 ANA (grm1) #
# 192.168.2.15 OFFICE () #
# 192.168.2.16 AURELIA (ifs3) #
# 192.168.2.17 KATY (ifs1) #
# 192.168.2.18 COSMIN (ifs2) #
# 192.168.2.19 RARES () #
# 192.168.2.20 DANA () #
#################################################################
# 127.0.0.1 SERVER #
$IPTABLES -A INPUT -s 192.168.1.64 -j LOG --log-tcp-options
$IPTABLES -A OUTPUT -d 192.168.1.64 -j LOG --log-tcp-options
$IPTABLES -A FORWARD -s 192.168.1.64 -j LOG --log-tcp-options
#$IPTABLES -A FORWARD -s 192.168.1.64 -j ACCEPT
#$IPTABLES -A FORWARD -d 192.168.1.64 -j ACCEPT
#$IPTABLES -t nat -A POSTROUTING -s 192.168.1.64 -j MASQUERADE
# 192.168.2.21 SURVEY #
$IPTABLES -A FORWARD -s 192.168.2.21 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.21 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.21 -j MASQUERADE
# 192.168.2.20 DANA #
$IPTABLES -A FORWARD -s 192.168.2.20 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.20 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.20 -j MASQUERADE
# 192.168.2.19 RARES () #
$IPTABLES -A FORWARD -s 192.168.2.19 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.19 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.19 -j MASQUERADE
# 192.168.2.18 COSMIN () #
$IPTABLES -A FORWARD -s 192.168.2.18 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.18 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.18 -j MASQUERADE
# 192.168.2.17 KATY (ifs1) #
$IPTABLES -A FORWARD -s 192.168.2.17 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.17 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.17 -j MASQUERADE
# 192.168.2.16 AURELIA (ifs3) #
$IPTABLES -A FORWARD -s 192.168.2.16 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.16 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.16 -j MASQUERADE
# 192.168.2.15 ALINA (office) #
$IPTABLES -A FORWARD -s 192.168.2.15 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.15 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.15 -j MASQUERADE
# 192.168.2.14 ANA (grm1) #
$IPTABLES -A FORWARD -s 192.168.2.14 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.14 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.14 -j MASQUERADE
# 192.168.2.13 FLORIN (grm3) #
$IPTABLES -A FORWARD -s 192.168.2.13 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.13 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.13 -j MASQUERADE
# 192.168.2.12 EXECUTIV () #
$IPTABLES -A FORWARD -s 192.168.2.12 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.12 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.12 -j MASQUERADE
# 192.168.2.11 VALI #
$IPTABLES -A FORWARD -s 192.168.2.11 -j ACCEPT
$IPTABLES -A FORWARD -d 192.168.2.11 -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -s 192.168.2.11 -j MASQUERADE
#$IPTABLES -nvL
LAN(192.168.2.0) <-> (192.168.2.1) SERVER (192.168.1.64) <-> (192.168.1.1)ADSL_ROUTER <-> external ip
this is the log generated when i ping google.ro (66.249.93.104)
Feb 20 12:37:19 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=0 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=1
Feb 20 12:37:20 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=1 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=2
Feb 20 12:37:21 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=2 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=3
Feb 20 12:37:22 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=3 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=4
Feb 20 12:37:23 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=4 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=5
Feb 20 12:37:24 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=5 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=6
Feb 20 12:37:25 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=6 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=7
Feb 20 12:37:26 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=66.249.93.104 DST=192.168.1.64 LEN=84 TOS=0x00 PREC=0x00 TTL=243 ID=7 DF PROTO=ICMP TYPE=0 CODE=0 ID=60445 SEQ=8
this is my log with my DNS
Feb 20 12:50:23 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=22360 DF PROTO=UDP SPT=53 DPT=32784 LEN=213
Feb 20 12:50:28 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=56444 DF PROTO=UDP SPT=53 DPT=32785 LEN=213
Feb 20 12:50:28 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=34274 DF PROTO=UDP SPT=53 DPT=32786 LEN=213
Feb 20 12:50:33 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=62744 DF PROTO=UDP SPT=53 DPT=32788 LEN=213
Feb 20 12:50:33 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=45692 DF PROTO=UDP SPT=53 DPT=32784 LEN=213
Feb 20 12:50:38 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=3435 DF PROTO=UDP SPT=53 DPT=32785 LEN=213
Feb 20 12:50:38 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=56958 DF PROTO=UDP SPT=53 DPT=32786 LEN=213
Feb 20 12:50:43 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=9309 DF PROTO=UDP SPT=53 DPT=32788 LEN=213
Feb 20 12:53:06 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=61398 DF PROTO=UDP SPT=53 DPT=32788 LEN=213
Feb 20 12:53:11 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=55823 DF PROTO=UDP SPT=53 DPT=32789 LEN=213
Feb 20 12:53:11 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=5625 DF PROTO=UDP SPT=53 DPT=32790 LEN=213
Feb 20 12:53:16 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=17015 DF PROTO=UDP SPT=53 DPT=32788 LEN=213
Feb 20 12:53:16 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=62195 DF PROTO=UDP SPT=53 DPT=32791 LEN=213
Feb 20 12:53:21 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=3219 DF PROTO=UDP SPT=53 DPT=32789 LEN=213
Feb 20 12:53:21 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.2 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=29533 DF PROTO=UDP SPT=53 DPT=32790 LEN=213
Feb 20 12:53:26 localhost kernel: IN=eth0 OUT= MAC=00:01:02:f2:46:32:00:14:7f:32:4e:59:08:00 SRC=193.231.100.3 DST=192.168.1.64 LEN=233 TOS=0x00 PREC=0x00 TTL=59 ID=9519 DF PROTO=UDP SPT=53 DPT=32791 LEN=213