Administrace komentářů

iptables -F
iptables -t nat -F
iptables -t mangle -F
iptables -X

iptables -P INPUT DROP #Ak pre to neexistuje pravidlo, DROP(zahod to)
iptables -P FORWARD ACCEPT #Povol forward
iptables -P OUTPUT ACCEPT
iptables -F


#Pravidla pre VirtualBox remote
iptables -I INPUT -p tcp --destination-port 3390:3390 -j ACCEPT
iptables -I INPUT -p tcp --destination-port 3391:3391 -j ACCEPT
#iptables -I INPUT -p tcp --destination-port 5600:5600 -j ACCEPT

#PRAVIDLA pre OPENVPN, to je routing a nat

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -o eth0 -j MASQUERADE
#iptables -A FORWARD -i tap0 -o eth0 -j ACCEPT
#iptables -A FORWARD -i eth0 -o tap0 -j ACCEPT
#iptables -t nat -A POSTROUTING -o tap0 -j SNAT --to-source 192.168.1.2
#iptables -A INPUT -i eth0 -p udp -s ip_addr_of_the_other_router --sport 1194 $
#iptables -A OUTPUT -o eth0 -p udp -d ip_addr_of_the_other_router --dport 1194$
iptables -A INPUT -i tap0 -j ACCEPT
iptables -A OUTPUT -o tap0 -j ACCEPT
iptables -A FORWARD -i tap0 -j ACCEPT

#Pravidla Firewallu
iptables -A INPUT -s 127.0.0.1 -i lo -m state --state NEW -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
# DOPLNENE PRAVIDLA
#iptables -A INPUT -s 10.1.1.145 -j DROP
iptables -A INPUT -p tcp --dport 80 -m state --state NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 993 -j ACCEPT
iptables -A INPUT -p tcp --dport 995 -j ACCEPT
iptables -A INPUT -p tcp --dport 110 -j ACCEPT
iptables -A INPUT -p tcp --dport 143 -j ACCEPT
iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 139 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 20 -j ACCEPT
iptables -A INPUT -p tcp --dport 445 -j ACCEPT
iptables -A INPUT -p tcp --dport 1149 -j ACCEPT
iptables -A INPUT -p udp --dport 137 -j ACCEPT
iptables -A INPUT -p udp --dport 138 -j ACCEPT
iptables -A INPUT -p udp --sport 137 -j ACCEPT

echo "Pravidla firewallu zavedene.."
echo "Pravidla NAT pre VPN zavedene.."

# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 tap0
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0