FIREWALL COM IPTABLES - PARA INTERNET DISCADA E ADSL
Publicado por Perfil removido 18/09/2003
[ Hits: 11.150 ]
E AI GALERA, ESTOU DISPONIBILIZANDO PARA VCS UM NOVO SCRIPT DE FIREWALL ESSE É UM SCRIPT 2 EM 1, TANTO FAZ VOCÊ USAR PARA INTERNET DISCADA OU ADSL. BASTA APENAS VCS CUSTOMIZARAM CONFORME A NECESSIDADE DE CADA UM.
ABRAÇOS
######################################## FIREWALL 2 em 1 #############################################
################################ APLICAÇÃO DE FIREWALL PARA ADSL OU DISCADA ##########################
######################################################################################################
######################################################################################################
#!/bin/sh
#
echo -e "\n\nCarregando firewall...\n"
EXTIF="ppp0"
INTIF="eth1"
echo " Interface Externa: $EXTIF"
echo " Interface Interna: $INTIF"
echo " habilitando forwarding..."
echo "1" > /proc/sys/net/ipv4/ip_forward
echo " habilitando enderecamento dinamico.."
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
echo " apagando regras existentes e atualizando as regras padrao.."
IPTABLES -P INPUT ACCEPT
IPTABLES -F INPUT
IPTABLES -P OUTPUT ACCEPT
IPTABLES -F OUTPUT
IPTABLES -P FORWARD DROP
IPTABLES -F FORWARD
IPTABLES -t nat -F
echo " FWD: Permitir conexoes para fora e apenas existentes para dentro"
IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT
IPTABLES -A FORWARD -j LOG
echo " Habilitando SNAT (MASQUERADE) em $EXTIF"
$IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE
###########################################################################################################
PROXIMO ITEN: Se voce não tem uma conexao discada pode usar o seguinte script de firewall para compartilhar sua conexão.
###########################################################################################################
#!/bin/sh
#
echo -e "\n\nCarregando firewall...\n"
EXTIF="eth0" {{{{{{{{OU A ETH QUE VC USA PRA EXTERNA (retire esse comentario)}}}}}}}}
INTIF="eth1"
echo " Interface Externa: $EXTIF"
echo " Interface Interna: $INTIF"
echo " habilitando forwarding..."
echo "1" > /proc/sys/net/ipv4/ip_forward
echo " apagando regras existentes e atualizando as regras padrao.."
IPTABLES -P INPUT ACCEPT
IPTABLES -F INPUT
IPTABLES -P OUTPUT ACCEPT
IPTABLES -F OUTPUT
IPTABLES -P FORWARD DROP
IPTABLES -F FORWARD
IPTABLES -t nat -F
echo " FWD: Permitir conexoes para fora e apenas existentes para dentro"
IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT
IPTABLES -A FORWARD -j LOG
echo " Habilitando SNAT (MASQUERADE) em $EXTIF"
#IPTABLES -t nat -A POSTROUTING -s sua_faixa_de_ip_interno -o eth0 -j SNAT --to seu_ip_externo
IPTABLES -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j SNAT --to 200.20X.XXX.XXX
#########################################################################################################
################################# FIM DA MÁGICA #########################################################
Backup Automatizado (atualizado)
Cadastro automatizado para DHCP, Sarg, ethers e hosts
Bloquear Facebook no Linux Educacional 3
COMPACTANDO DIRETORIO CRIADO PELO SARG
Nenhum comentário foi encontrado.
Instalação e Configuração do Void com Cinnamon
Porque Gentoo semi-binário atualmente (desabafo)
A combinação de WMs com compositores feitos por fora
Audacious, VLC e QMMP - que saudades do XMMS
SUNO OpenSource: Crie um servidor de gerador de música com IA
Guia de instalação do Gentoo Linux com Cinnamon (UEFI, LUKS2, Btrfs)
Aparecer o Chuck Norris no seu terminal
Da pra formatar um netbook MGB e usar algum linux nele? É possível usa... (2)
Alguns aplificativos em Flatpak não rodam no Debian (4)
CachyOS vs Arch [RESOLVIDO] (11)
Um filme, uma banda, um jogo, um livro, um anime (ou mangá) (13)









