Public feed
#528478
echo 1 > /proc/sys/net/ipv4/ip_forward
#Borra todo
iptables -F
iptables -X
iptables -Z
iptables -t nat -F
#iptables -t nat -A POSTROUTING -s 0.0.0.0/0 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.1 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.2 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.4 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.7 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.19 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.20 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.21 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.22 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.35 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.45 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.47 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.49 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.51 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.59 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.84 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.90 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.93 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.106 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.112 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.114 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.115 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.117 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.118 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.119 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.120 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.175 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.176 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.177 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.190 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.192 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.194 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.200 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.201 -d 0.0.0.0/0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 222.0.0.237 -d 0.0.0.0/0 -j MASQUERADE
iptables -A INPUT -i ppp0 -p ICMP -j ACCEPT
iptables -A INPUT -p TCP -m state --state RELATED -j ACCEPT
iptables -A INPUT -p UDP -m state --state RELATED -j ACCEPT
iptables -A INPUT -i ppp0 -m state --state NEW,INVALID -j ACCEPT
iptables -A FORWARD -i ppp0 -m state --state NEW,INVALID -j ACCEPT
#MARIANO - Apertura de Puertos
#www80 && redir servidor web
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT \
--to 222.0.0.2:80
iptables -A INPUT -p UDP --dport 80 -j ACCEPT
#https
iptables -A INPUT -p TCP --dport 443 -j ACCEPT
iptables -A INPUT -p UDP --dport 443 -j ACCEPT
#UNIX
iptables -A INPUT -p TCP --dport 20 -j ACCEPT
iptables -A INPUT -p TCP --dport 20 -j ACCEPT
#ftp
iptables -A INPUT -p TCP --dport 21 -j ACCEPT
iptables -A INPUT -p UDP --dport 21 -j ACCEPT
#ssh
iptables -A INPUT -p TCP --dport 22 -j ACCEPT
iptables -A INPUT -p UDP --dport 22 -j ACCEPT
#vnc
iptables -A INPUT -p TCP --dport 5900 -j ACCEPT
#Redireccion de Puerto 5900 VNC
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 5900 -j DNAT \
--to 222.0.0.20:5900
#Redireccion de Puerto Unix Server
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 20 -j DNAT \
--to 222.0.0.3:20
#MARIANO Cerrado de puertos altos menos MSN
iptables -A INPUT -p tcp --syn --dport 1485:6890 -j DROP
iptables -A INPUT -p tcp --syn --dport 6991:65535 -j DROP
echo "Iptables Iniciadas... Use iptables -L"