Subversion Repositories ALCASAR

Rev

Rev 1063 | Rev 1147 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 1063 Rev 1069
Line 1... Line 1...
1 
#!/bin/bash
 1 
#!/bin/bash
2 
# $Id: alcasar-iptables-bypass.sh 1063 2013-04-01 21:36:46Z richard $
 2 
# $Id: alcasar-iptables-bypass.sh 1069 2013-04-10 21:53:09Z richard $
3 
 
 3 
 
4 
# alcasar-iptables-bypass.sh
 4 
# alcasar-iptables-bypass.sh
5 
# by Rexy - 3abtux
 5 
# by Rexy - 3abtux
6 
# This script is distributed under the Gnu General Public License (GPL)
 6 
# This script is distributed under the Gnu General Public License (GPL)
7 
 
 7 
 
Line 124... Line 124...
124 
$IPTABLES -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
 124 
$IPTABLES -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
125 
 
 125 
 
126 
# On active le masquage d'adresse par translation (NAT)
 126 
# On active le masquage d'adresse par translation (NAT)
127 
$IPTABLES -A POSTROUTING -t nat -o $EXTIF -j MASQUERADE
 127 
$IPTABLES -A POSTROUTING -t nat -o $EXTIF -j MASQUERADE
128 
 
 128 
 
129 
/etc/init.d/iptables save
 129 
# on ne sauvegarde pas les règles. En cas de reboot, on repasse ainsi automatiquement en mode normal (bypass -off)
130 
# Fin du script des regles du parefeu
 130 
# Fin du script des regles du parefeu