All pastes #975966 Raw Edit

Tobsan

public text v1 · immutable
·published 2008-04-07 21:16 UTC
rendered paste body
# Delete all old stuff
iptables --flush
iptables --table nat --flush
iptables --delete-chain
iptables --table nat --delete-chain

# Add routing
iptables --table nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth1 -j ACCEPT
echo 1 > /proc/sys/net/ipv4/ip_forward

# Add port forwarding
iptables -t nat -A PREROUTING -p tcp -i eth0 -d 193.11.222.88 --dport 25000 -j DNAT --to 192.168.0.2:25000
iptables -A FORWARD -p tcp -i eth0 -d 192.168.0.2 --dport 25000 -j ACCEPT

# Add allowed ports
iptables -A INPUT -i eth0 --dport 22 -j ACCEPT
iptables -A INPUT -i eth0 --dport 573 -j ACCEPT

#Drop anything else
iptables -A FORWARD -j DROP
iptables -A INPUT -i eth0 -j DROP