All pastes #958456 Raw Edit

Untitled

public text v1 · immutable
#958456 ·published 2008-03-26 19:06 UTC
rendered paste body
249   echo "+ Autorise le port forwarding de $WAN_IP:$PF_PORT -> $PF_IP:$PF_PORT    "
250   iptables -t filter -A FORWARD -i $WAN_INTERFACE -o $LAN_INTERFACE -s $WAN_    NETWORK -d $LAN_NETWORK -p $PF_PROTO --dport $PF_PORT -m state --state ! INV    ALID           -j ACCEPT
251   iptables -t filter -A FORWARD -i $LAN_INTERFACE -o $WAN_INTERFACE -s $LAN_    NETWORK -d $WAN_NETWORK -p $PF_PROTO --sport $PF_PORT -m state --state ESTAB    LISHED,RELATED -j ACCEPT
252 
253   iptables -t nat    -A PREROUTING                -i $WAN_INTERFACE -s $WAN_    NETWORK -d $WAN_IP      -p $PF_PROTO --dport $PF_PORT -j DNAT --to-destinati    on $PF_IP
254   iptables -t nat    -A POSTROUTING               -o $LAN_INTERFACE -s $WAN_    NETWORK -d $PF_IP       -p $PF_PROTO --dport $PF_PORT -j SNAT --to-source $L    AN_IP
255 
256   echo 1 > /proc/sys/net/ipv4/ip_forward
257