3.747
Bearbeitungen
Änderungen
→Code-Schnipsel: besser
STOERER="104.63.71.0/28"
STOERER="104.63.71.0/28"
# gute ports definieren
PORT1="21,22,23"
PORT1="21,22,23"
PORT2="80,443,8080"
PORT2="80,443,8080"
PORT4="25,110,143,993,995"
PORT4="25,110,143,993,995"
iptables -I FORWARD -p all -s $STOERER -d $INTERN1 -j ACCEPT
# restlicher Datenverkehr ganz nach unten
iptables -I FORWARD -p all -d $STOERER -j ACCEPT
iptables -I FORWARD -p all -d $STOERER -s $INTERN1 -j ACCEPT
iptables -I FORWARD -p all -s $STOERER -j ACCEPT
# aller traffic vom stoerer zum internet
iptables -I FORWARD -p tcp -s $STOERER -m multiport --dport $PORT1 -j ACCEPT
iptables -I FORWARD -p tcp -s $STOERER -m multiport --dport $PORT1 -j ACCEPT
iptables -I FORWARD -p tcp -s $STOERER -m multiport --dport $PORT2 -j ACCEPT
iptables -I FORWARD -p tcp -s $STOERER -m multiport --dport $PORT2 -j ACCEPT
iptables -I FORWARD -p tcp -s $STOERER -m multiport --dport $PORT4 -j ACCEPT
iptables -I FORWARD -p tcp -s $STOERER -m multiport --dport $PORT4 -j ACCEPT
# aller traffic vom internet zum stoerer
iptables -I FORWARD -p tcp -d $STOERER -m multiport --sport $PORT1 -j ACCEPT
iptables -I FORWARD -p tcp -d $STOERER -m multiport --sport $PORT1 -j ACCEPT
iptables -I FORWARD -p tcp -d $STOERER -m multiport --sport $PORT2 -j ACCEPT
iptables -I FORWARD -p tcp -d $STOERER -m multiport --sport $PORT2 -j ACCEPT
iptables -I FORWARD -p tcp -d $STOERER -m multiport --sport $PORT4 -j ACCEPT
iptables -I FORWARD -p tcp -d $STOERER -m multiport --sport $PORT4 -j ACCEPT
iptables -I FORWARD -p all -d $STOERER -j ACCEPT
# netzinterner traffic interessiert uns nicht
iptables -I FORWARD -p all -s $STOERER -j ACCEPT
iptables -I FORWARD -p all -s $STOERER -d $INTERN1 -j ACCEPT
iptables -I FORWARD -p all -s $STOERER -d $INTERN2 -j ACCEPT
iptables -I FORWARD -p all -d $STOERER -s $INTERN1 -j ACCEPT
iptables -I FORWARD -p all -d $STOERER -s $INTERN2 -j ACCEPT
iptables -nvL FORWARD
iptables -nvL FORWARD