FreeSource - AeliyaGrevnyov

2005-09-13 20:23:24

�� /Aeliya Grevnyov �� 2005-09-13 20:23:24 � 2008-06-19 06:07:26

��:

Aeliya Grevnyov aka Gray_graff
**�� (� �� , �� ) �� NAT'�(��).
� �� (ppp0) �� (eth0)**

#! /bin/sh
# clear tables
iptables           -P INPUT   DROP
iptables           -P FORWARD DROP
iptables           -P OUTPUT  ACCEPT
iptables           -F
iptables -t nat    -F
iptables -t mangle -F
# accept localhost connections
iptables           -A INPUT -m state --state NEW -i lo                             -j ACCEPT
# accept connections from internal network
iptables           -A INPUT -m state --state NEW -i eth0                           -j ACCEPT
# enable masquerading
iptables -t nat    -A POSTROUTING -o ppp0                                          -j MASQUERADE
iptables           -A FORWARD -i eth0 -o ppp0                                      -j ACCEPT
iptables           -A INPUT -m state --state ESTABLISHED,RELATED                   -j ACCEPT
iptables           -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
# accept ICMP
iptables           -A INPUT -p icmp                                                -j ACCEPT
# enable ip forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

2005-05-16 13:46:21

�� /Aeliya Grevnyov �� 2005-05-16 13:46:21 � 2005-09-13 20:23:24

��:

**�� (� �� , �� ) �� NAT'�(��).
� �� (ppp0) �� (eth0)**

#! /bin/sh
# clear tables
iptables           -P INPUT   DROP
iptables           -P FORWARD DROP
iptables           -P OUTPUT  ACCEPT
iptables           -F
iptables -t nat    -F
iptables -t mangle -F

# accept localhost connections
iptables           -A INPUT -m state --state NEW -i lo                             -j ACCEPT

# accept connections from internal network
iptables           -A INPUT -m state --state NEW -i eth0                           -j ACCEPT

# enable masquerading
iptables -t nat    -A POSTROUTING -o ppp0                                          -j MASQUERADE
iptables           -A FORWARD -i eth0 -o ppp0                                      -j ACCEPT
iptables           -A INPUT -m state --state ESTABLISHED,RELATED                   -j ACCEPT
iptables           -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT

# accept ICMP
iptables           -A INPUT -p icmp                                                -j ACCEPT

# enable ip forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward