#!/bin/bash
echo "Iniciando Firewall..."
iptables=/sbin/iptables
modprobe=/sbin/modprobe
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts
echo "Carregando Modulos"
$modprobe ip_tables
$modprobe iptable_filter
$modprobe iptable_nat
$modprobe ip_nat_ftp
$modprobe ip_conntrack
$modprobe ip_conntrack_ftp

$iptables -t filter -P INPUT ACCEPT
$iptables -t filter -P OUTPUT ACCEPT
$iptables -t filter -P FORWARD ACCEPT
$iptables -F INPUT
$iptables -F OUTPUT
$iptables -F FORWARD

echo "Iniciando Navegacao"
$iptables -A OUTPUT -o eth0 -j ACCEPT
$iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
$iptables -A FORWARD -i eth0 -j ACCEPT
$iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

echo "Iniciando Anti-Spoofing"
$iptables -A INPUT -s 172.16.0.0/16 -i eth1 -j DROP
$iptables -A INPUT -s 10.0.0.0/8 -i eth1 -j DROP
$iptables -A INPUT -s 192.168.0.0/24 -i eth1 -j DROP

echo "Iniciando Redirecionamento de Portas"
echo "Redirecionamento de Portas"
$iptables -t nat -A PREROUTING -p tcp -s 0/0 -d IP_da_internet --dport
1024 -j DNAT --to IP_microsiga


Assinantes em 27/12/2002: 2259
Mensagens recebidas desde 07/01/1999: 195029
Historico e [des]cadastramento: http://linux-br.conectiva.com.br
Assuntos administrativos e problemas com a lista: 
            mailto:[EMAIL PROTECTED]

Responder a