Sharing Internet Standar Dengan Iptables
Membangun internet sharing menggunakan Iptables dibawah ini adalah salah satu contoh script Iptables dibuat menggunakan "Iptables generator" jika anda ingin membuat script iptables sendiri menggunakan generator dapat anda kunjungi pada situs http://iptables-script.dk/index1.php #!/bin/sh # iptables script generator: V0.1-2002 # Comes with no warranty! # e-mail: michael@1go.dk # Diable forwarding echo 0 > /proc/sys/net/ipv4/ip_forward LAN_IP_NET='192.168.0.1/24' LAN_NIC='eth1' WAN_IP='202.15X.XX.XX' WAN_NIC='eth0' # load some modules (if needed) modprobe ip_nat_ftp modprobe ip_conntrack_ftp # Flush iptables -t nat -F POSTROUTING iptables -t nat -F PREROUTING iptables -t nat -F OUTPUT iptables -F iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT # enable Masquerade and forwarding iptables -t nat -A POSTROUTING -s $LAN_IP_NET -j MASQUERADE iptables -A FORWARD -j ACCEPT -i $LAN_NIC -s $LAN_IP_NET iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT # Open ports on router for server/services iptables -A INPUT -j ACCEPT -p tcp --dport 80 iptables -A INPUT -j ACCEPT -p tcp --dport 21 iptables -A INPUT -j ACCEPT -p tcp --dport 110 iptables -A INPUT -j ACCEPT -p tcp --dport 25 iptables -A INPUT -j ACCEPT -p tcp --dport 22 # STATE RELATED for router iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT # Enable forwarding echo 1 > /proc/sys/net/ipv4/ip_forward