Perguntas & Respostas

Boa tarde

estou tendo problemas com um script para iptables, eu cheguei a testa-lo no Fedora 6 em casa, mas aki no serviço estao ocorrendo alguns problemas, vou postar o codigo do script e os erros que ocorrem

ERROS (exatamente como aparecem na tela)

command not found2:
arquivo ou diretorio não encontradod/funciotions
arquivo ou diretorio não encontradonetwork
command not found5
command not found6
command not found8
command not found11
command not found1
/firewall: line 22: syntax error near unexpected token `in
/firewall: line 22: `case "$1" in


SCRIPT

###
##
# IPTABLES ATUALIZADO EM 25/06/2007
# SUPNET
# Tecnico Luiz Flavio
#
#!/bin/sh
# description: Script para regras de firewall (iptables)
#
# chkconfig: 2345 08 30
# processname: Firewall
# pidfile /var/run/firewall.pid

. /etc/rc.d/init.d/functions
. /etc/sysconfig/network


# Definindo os utilitarios

# Executavel do IPTABLES

IPTABLES=/sbin/iptables

case "$1" in

   start)
      echo -n "Iniciando Firewall"

#Liga o roteamento de pacotes

   echo 1 > /proc/sys/net/ipv4/ip_forward

#Limpa regras antigas

   $IPTABLES -F
   $IPTABLES -t nat -F
   
#Regras IPTABLES

   iptables -A POSTROUTING -t nat -s 192.168.2.0/24 -o eth1 -j MASQUERADE

#Regras da conexão (Conexões estabelecidas)

   iptables -A Foward -m state --state ESTABILISHED -j ACCEPT
   iptables -A Foward -m state --state RELATED -j ACCEPT
   #printf "."
   iptables -A Foward -p Tcp -i $IF --dport 1023:65535 -j ACCEPT
   iptables -A Foward -p udp -i $IF --dport 1023:65535 -j ACCEPT

#Libera HTTP   

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 80 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 80 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

#Libera FTP

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 21 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 21 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 20 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 20 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

#Libera POP

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 110 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 110 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

#Libera SMTP

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 25 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 25 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT


#Libera HTTPS   
   
   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 443 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 443 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

#Libera DNS

   iptables -A FORWARD -p udp -s 192.168.2.0/24 --sport 1024:65355 --dport 53 -j ACCEPT
   iptables -A FORWARD -p udp --sport 53 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

#Libera o MSN MESSENGER

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 1863 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 1863 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT

#Libera Jabber (Embras)

   iptables -A FORWARD -p tcp -s 192.168.2.0/24 --sport 1024:65355 --dport 5222 -j ACCEPT
   iptables -A FORWARD -p tcp --sport 5222 -d 192.168.2.0/24 --dport 1024:65355 -j ACCEPT
         
#LOG   
   
   iptables -j LOG --log-level 3 --log-prefix "DROP"
   iptables -j LOG --log-level 3 --log-prefix "ACCEPT"
   
   

#FIM da Regras

   $IPTABLES -P INPUT DROP
   $IPTABLES -P OUTPUT DROP
   $IPTABLES -P FORWARD DROP
   success
   echo
   exit 0
;;

   stop)
      echo -n "Parando Firewall (open):"

#Da Flush em TODAS as regras

   cat /proc/net/ip_tables_names | while read table; do
      $IPTABLES -t $table -L -n | while read c chain rest; do
         if test "X$c" = "XChain" ; then
            $IPTABLES -t $table -F $chain
         fi
      done
      $IPTABLES -t $table -X
   done
   $IPTABLES -F
   $IPTABLES -P INPUT ACCEPT
   $IPTABLES -P OUTPUT ACCEPT
   $IPTABLES -P FORWARD ACCEPT



   exit 0
;;

   status)
      $IPTABLES -t nat -L -n
;;

   install)
      $IPTABLES -F
      $IPTABLES -X
      $IPTABLES -t nat -F
      $IPTABLES -P INPUT DROP
      $IPTABLES -P OUTPUT DROP
      $IPTABLES -P FORWARD DROP
;;

   restart)
      /etc/init.d/firewall stop
      /etc/init.d/firewall start
      echo
;;

   sl)
      /etc/init.d/firewall start
      tail -f /var/log/messages
;;

   *)
      echo "Use: Firewall (start|stop|restart)"
      echo
;;

esac

exit 0