All pastes #421431 Raw Edit

Unnamed

public text v1 · immutable
·published 2007-04-02 20:42 UTC
rendered paste body
echo "Carregando Redirecionamento.."

# Definindo as variaveis
IPTABLES="/sbin/iptables"
REDEINT="192.168.1.0/24"
IPDNSPROVEDOR="200.225.197.37"
ENT="eth1"
PORTS="1863:1864 6891:6900 6901 1863 5190 6901"

# carregando os modulos
modprobe ip_tables
modprobe iptable_nat
modprobe ip_conntrack
modprobe ip_conntrack_ftp

# limpando as tabelas
$IPTABLES -F
$IPTABLES -t nat -F
$IPTABLES -t nat -X
$IPTABLES -X
$IPTABLES -F -t filter
$IPTABLES -X -t filter

echo 1 > /proc/sys/net/ipv4/ip_forward

# Redireciona M$Sql

$IPTABLES -A FORWARD -p tcp -i $ENT -d 192.168.1.100 --dport 1433 -j ACCEPT
$IPTABLES -A FORWARD -p tcp -o $ENT -s 192.168.1.100 --sport 1433 -j ACCEPT
$IPTABLES -A FORWARD -p tcp -i $ENT -d 192.168.1.100 --dport 1434 -j ACCEPT
$IPTABLES -A FORWARD -p tcp -o $ENT -s 192.168.1.100 --sport 1434 -j ACCEPT
$IPTABLES -A FORWARD -p udp -i $ENT -d 192.168.1.100 --dport 1433 -j ACCEPT
$IPTABLES -A FORWARD -p udp -i $ENT -d 192.168.1.100 --dport 1434 -j ACCEPT

$IPTABLES -t nat -A PREROUTING -p tcp -i $ENT --dport 1433 -j DNAT --to-destination 192.168.1.100:1433
$IPTABLES -t nat -A PREROUTING -p udp -i $ENT --dport 1433 -j DNAT --to-destination 192.168.1.100:1433
$IPTABLES -t nat -A PREROUTING -p tcp -i $ENT --dport 1434 -j DNAT --to-destination 192.168.1.100:1434
$IPTABLES -t nat -A PREROUTING -p udp -i $ENT --dport 1434 -j DNAT --to-destination 192.168.1.100:1434

# Redireciona Terminal Service
#$IPTABLES -t nat -A PREROUTING -s 200.170.191.25 -m tcp -p tcp -i eth1 --dport 3389 -j DNAT --to-destination 192.168.1.100:3389

echo "Liberando msn para algumas maquinas"
$IPTABLES -A FORWARD -s 192.168.1.10/24 -p tcp --dport 1863 -j ACCEPT
$IPTABLES -A FORWARD -s 192.168.1.10/24 -d loginnet.passport.com -j ACCEPT

echo "Bloqueando msn na rede interna"
$IPTABLES -A FORWARD -s $REDEINT -p tcp --dport 1863 -j REJECT
$IPTABLES -A FORWARD -s $REDEINT -d loginnet.passport.com -j REJECT

echo "compartilha a web na rede interna"
$IPTABLES -t nat -A POSTROUTING -s $REDEINT -o $ENT -j MASQUERADE


echo "Carregado com sucesso"