Code: › logfile="/var/log/iptables"

/sbin/iptables --flush
/sbin/iptables --flush -t nat

/sbin/modprobe ip_tables
/sbin/modprobe iptable_nat
/sbin/modprobe ipt_MASQUERADE
/sbin/modprobe ipt_LOG

iptables -F
iptables -t nat -F
iptables -t mangle -F

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP

###########################################################################

echo "1" > /proc/sys/net/ipv4/ip_forward

echo "Zavadzam pravidla pre INPUT..."

#povolim input na lo
iptables -A INPUT -p ALL -i lo -j ACCEPT

#povolim input na LAN
iptables -A INPUT -p ALL -i eth0 -s 192.168.1.0/24 -j ACCEPT
iptables -A INPUT -p ALL -i eth0 -d 192.168.1.255 -j ACCEPT

#povolim input pre uz nadviazane spojenia
iptables -A INPUT -p ALL -i eth1 -m state --state ESTABLISHED,RELATED \
    -j ACCEPT

#otvorenie portu 80 z INTERNETU
iptables -A INPUT -p tcp --dport 80 \
-m state --state NEW -j ACCEPT

#otvorenie portu 80 z INTERNETU
iptables -A INPUT -p udp --dport 80 \
-m state --state NEW -j ACCEPT

#otvorenie portu 22 (TCP) z INTERNETU
iptables -A INPUT -p tcp --dport 22 \
-m state --state NEW -j ACCEPT

#otvorenie portu 22 (UDP) z INTERNETU
iptables -A INPUT -p udp --dport 22 \
-m state --state NEW -j ACCEPT

##########################################################################

echo "Zavadzam pravidla pre FORWARD..."

#povolime vsetok forward z nasej LAN
iptables -A FORWARD -s 192.168.1.1 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.1 -j ACCEPT
iptables -A FORWARD -s 192.168.1.2 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.2 -j ACCEPT
iptables -A FORWARD -s 192.168.1.3 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.3 -j ACCEPT
iptables -A FORWARD -s 192.168.1.4 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.4 -j ACCEPT
iptables -A FORWARD -s 192.168.1.5 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.5 -j ACCEPT
iptables -A FORWARD -s 192.168.1.6 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.6 -j ACCEPT
iptables -A FORWARD -s 192.168.1.7 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.7 -j ACCEPT
iptables -A FORWARD -s 192.168.1.8 -i eth0 -j ACCEPT
iptables -A FORWARD -d 192.168.1.8 -j ACCEPT

#NAT pre moj stroj 192.168.1.101 port 8081 zvonka a 80 zvnutra
iptables -t nat -A PREROUTING -p tcp --dport 8081 -i eth1 -j DNAT --to 192.168.1.101:80

#povolime uz naviazane spojenia cez forward
iptables -A FORWARD -i eth1 -m state --state ESTABLISHED,RELATED \
         -j ACCEPT
   
##########################################################################

echo "Zavadzam pravidla pre OUTPUT..."

#povolenie outputu pre lo
iptables -A OUTPUT -p ALL -s 127.0.0.1 -j ACCEPT
iptables -A OUTPUT -p ALL -o lo -j ACCEPT

#povolenie outputu pre LAN
iptables -A OUTPUT -p ALL -s 192.168.1.0/24 -j ACCEPT
iptables -A OUTPUT -p ALL -o eth0 -j ACCEPT

#povolenie outputu pre pristup na NET
iptables -A OUTPUT -p ALL -o eth1 -j ACCEPT

##########################################################################

echo "Zavadzam pravidla pre NAT..."

#povolenie NATu pre eth1 aby sa maskoval za IP aDSL routra
iptables -t nat -A POSTROUTING -o eth1 -s 192.168.1.0/24 -j MASQUERADE

##########################################################################

echo "Pravidla Firewallu kompletne zavedene..."

Code: › iptables -t nat -A PREROUTING -d 10.0.0.1 -p tcp --dport 8081 -j DNAT --to 192.168.1.3:7777
iptables -t nat -A POSTROUTING -o eth1 -s 192.168.1.3 -j SNAT --to 10.0.0.1

Code: › <?php
 header('Expires: Mon, 26 Jul 1997 05:00:00 GMT');
 header('Cache-Control: no-store, no-cache, must-revalidate');
 header('Cache-Control: post-check=0, pre-check=0', FALSE);
 header('Pragma: no-cache');
?>