Miscellany

# Definindo as variaveisIPTABLES="/sbin/iptables"REDEINT="192.168.1.0/24"IPDNSPROVEDOR="200.225.197.37"ENT="eth1"PORTS="1863:1864 6891:6900 6901 1863 5190 6901"IPLIBERADO="192.168.1.10/24 192.168.1.167/24 192.168.1.235/24            192.168.1.17/24 192.168.1.129/24 192.168.1.179/24"MSN="loginnet.passport.com webmessenger.msn.com meebo.com passport.com msn.com.br msn.com sc.msn.com www.msn.be 207.46.110.11 messenger.msn.com.br     http.msg.yahoo.com nickname.msn.com.br chat.msn.com chat.msn.com.br gateway.messenger.hotmail.com     http1.msgr.hotmail.com http2.msgr.hotmail.com http3.msgr.hotmail.com http4.msgr.hotmail.com     http5.msgr.hotmail.com http6.msgr.hotmail.com http7.msgr.hotmail.com http8.msgr.hotmail.com     http9.msgr.hotmail.com http10.msgr.hotmail.com http11.msgr.hotmail.com http12.msgr.hotmail.com     http13.msgr.hotmail.com http14.msgr.hotmail.com http15.msgr.hotmail.com http16.msgr.hotmail.com     http17.msgr.hotmail.com http18.msgr.hotmail.com http19.msgr.hotmail.com http20.msgr.hotmail.com     "# carregando os modulosmodprobe ip_tablesmodprobe iptable_natmodprobe ip_conntrackmodprobe ip_conntrack_ftp# limpando as tabelas$IPTABLES -F$IPTABLES -t nat -F$IPTABLES -t nat -X$IPTABLES -X$IPTABLES -F -t filter$IPTABLES -X -t filterecho 1 > /proc/sys/net/ipv4/ip_forwardecho "compartilha a web na rede interna"$IPTABLES -t nat -A POSTROUTING -s $REDEINT -o $ENT -j MASQUERADEecho "Liberando msn para algumas maquinas"echo "Aguarde..."for IP in $IPLIBERADO; do  for PORT in $PORTS; do    for ENDERECO in $MSN; do       $IPTABLES -A FORWARD -i eth+ -s $IP -p tcp --dport $PORT  -j ACCEPT       $IPTABLES -A FORWARD -i eth+ -s $IP -d $ENDERECO -j ACCEPT    done  doneecho "IP: $IP - Liberado"doneecho "Bloqueando portas msn na rede interna"for PORT in $PORTS; do   $IPTABLES -A FORWARD -i eth+ -s $REDEINT -p tcp --dport $PORT -j DROP   echo "Bloqueando porta: $PORT"donefor ENDERECO in $MSN; do   $IPTABLES -A FORWARD -i eth+ -s $REDEINT -d $ENDERECO -j DROP   echo "Bloqueando endereco: $ENDERECO"done