ipt-firewall-gateway: some minor changes at script output.
This commit is contained in:
parent
4e4c041f9f
commit
4de6f50e12
@ -265,16 +265,27 @@ $ipt -F -t raw
|
|||||||
$ipt -X
|
$ipt -X
|
||||||
$ipt -Z
|
$ipt -Z
|
||||||
|
|
||||||
|
echo_done
|
||||||
|
|
||||||
$ipt -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
|
$ipt -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
|
||||||
|
|
||||||
unset natted_interface_arr
|
unset natted_interface_arr
|
||||||
declare -a natted_interface_arr
|
declare -a natted_interface_arr
|
||||||
|
|
||||||
for _dev in ${nat_device_arr[@]} ; do
|
echo ""
|
||||||
|
|
||||||
|
echononl "\tMasquerade (NAT) interfaces.."
|
||||||
|
if [[ ${#nat_device_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
||||||
|
for _dev in ${nat_device_arr[@]} ; do
|
||||||
$ipt -t nat -A POSTROUTING -o $_dev -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -o $_dev -j MASQUERADE
|
||||||
natted_interface_arr+=("$_dev")
|
natted_interface_arr+=("$_dev")
|
||||||
done
|
done
|
||||||
|
echo_done
|
||||||
|
else
|
||||||
|
echo_skipped
|
||||||
|
fi
|
||||||
|
|
||||||
|
echononl "\tMasquerade (NAT) networks.."
|
||||||
if [[ ${#nat_network_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
if [[ ${#nat_network_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
||||||
for _val in "${nat_network_arr[@]}" ; do
|
for _val in "${nat_network_arr[@]}" ; do
|
||||||
IFS=':' read -a _val_arr <<< "${_val}"
|
IFS=':' read -a _val_arr <<< "${_val}"
|
||||||
@ -290,14 +301,22 @@ if [[ ${#nat_network_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
|||||||
$ipt -t nat -A POSTROUTING -o ${_val_arr[1]} -d ${_val_arr[0]} -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -o ${_val_arr[1]} -d ${_val_arr[0]} -j MASQUERADE
|
||||||
$ipt -t nat -A POSTROUTING -o ${_val_arr[1]} -s ${_val_arr[0]} -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -o ${_val_arr[1]} -s ${_val_arr[0]} -j MASQUERADE
|
||||||
done
|
done
|
||||||
|
echo_done
|
||||||
|
else
|
||||||
|
echo_skipped
|
||||||
fi
|
fi
|
||||||
|
echo
|
||||||
|
|
||||||
if $telekom_internet_tv ; then
|
if $telekom_internet_tv ; then
|
||||||
|
echononl "\tNAT Telekom Intzernet TV.."
|
||||||
$ipt -t nat -A POSTROUTING -o $tv_extern_if -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -o $tv_extern_if -j MASQUERADE
|
||||||
|
echo_done
|
||||||
|
echo
|
||||||
fi
|
fi
|
||||||
|
|
||||||
unset no_if_for_ip_arr
|
unset no_if_for_ip_arr
|
||||||
declare -a no_if_for_ip_arr
|
declare -a no_if_for_ip_arr
|
||||||
|
echononl "\tMasquerade TCP Connections .."
|
||||||
if [[ ${#masquerade_tcp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
if [[ ${#masquerade_tcp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
||||||
for _val in "${masquerade_tcp_con_arr[@]}" ; do
|
for _val in "${masquerade_tcp_con_arr[@]}" ; do
|
||||||
IFS=':' read -a _val_arr <<< "${_val}"
|
IFS=':' read -a _val_arr <<< "${_val}"
|
||||||
@ -311,22 +330,22 @@ if [[ ${#masquerade_tcp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; th
|
|||||||
fi
|
fi
|
||||||
$ipt -t nat -A POSTROUTING -o ${_val_arr[3]} -p tcp -s ${_val_arr[0]} -d ${_val_arr[1]} --dport ${_val_arr[2]} -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -o ${_val_arr[3]} -p tcp -s ${_val_arr[0]} -d ${_val_arr[1]} --dport ${_val_arr[2]} -j MASQUERADE
|
||||||
done
|
done
|
||||||
|
echo_done
|
||||||
|
else
|
||||||
|
echo_skipped
|
||||||
fi
|
fi
|
||||||
|
|
||||||
#echo_done # Flushing firewall iptable (IPv4)..
|
|
||||||
if [[ ${#no_if_for_ip_arr[@]} -gt 0 ]] ; then
|
if [[ ${#no_if_for_ip_arr[@]} -gt 0 ]] ; then
|
||||||
echo_warning
|
echo_warning
|
||||||
for _ip in ${no_if_for_ip_arr[@]} ; do
|
for _ip in ${no_if_for_ip_arr[@]} ; do
|
||||||
warn "(TCP) Masquerading for ip '$_ip' was omitted - No destination interface present!"
|
warn "(TCP) Masquerading for ip '$_ip' was omitted - No destination interface present!"
|
||||||
done
|
done
|
||||||
else
|
|
||||||
echo_done
|
|
||||||
fi
|
fi
|
||||||
echo
|
|
||||||
|
|
||||||
|
|
||||||
unset no_if_for_ip_arr
|
unset no_if_for_ip_arr
|
||||||
declare -a no_if_for_ip_arr
|
declare -a no_if_for_ip_arr
|
||||||
|
echononl "\tMasquerade UDP Connections .."
|
||||||
if [[ ${#masquerade_udp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
if [[ ${#masquerade_udp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
||||||
for _val in "${masquerade_udp_con_arr[@]}" ; do
|
for _val in "${masquerade_udp_con_arr[@]}" ; do
|
||||||
IFS=':' read -a _val_arr <<< "${_val}"
|
IFS=':' read -a _val_arr <<< "${_val}"
|
||||||
@ -340,26 +359,30 @@ if [[ ${#masquerade_udp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; th
|
|||||||
fi
|
fi
|
||||||
$ipt -t nat -A POSTROUTING -o ${_val_arr[3]} -p udp -s ${_val_arr[0]} -d ${_val_arr[1]} --dport ${_val_arr[2]} -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -o ${_val_arr[3]} -p udp -s ${_val_arr[0]} -d ${_val_arr[1]} --dport ${_val_arr[2]} -j MASQUERADE
|
||||||
done
|
done
|
||||||
|
echo_done
|
||||||
|
else
|
||||||
|
echo_skipped
|
||||||
fi
|
fi
|
||||||
|
|
||||||
#echo_done # Flushing firewall iptable (IPv4)..
|
|
||||||
if [[ ${#no_if_for_ip_arr[@]} -gt 0 ]] ; then
|
if [[ ${#no_if_for_ip_arr[@]} -gt 0 ]] ; then
|
||||||
echo_warning
|
echo_warning
|
||||||
for _ip in ${no_if_for_ip_arr[@]} ; do
|
for _ip in ${no_if_for_ip_arr[@]} ; do
|
||||||
warn "(UDP) Masquerading for ip '$_ip' was omitted - No destination interface present!"
|
warn "(UDP) Masquerading for ip '$_ip' was omitted - No destination interface present!"
|
||||||
done
|
done
|
||||||
else
|
|
||||||
echo_done
|
|
||||||
fi
|
fi
|
||||||
echo
|
|
||||||
|
|
||||||
|
echononl "\tMasquerade ICMP Connections .."
|
||||||
if [[ ${#masquerade_icmp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
if [[ ${#masquerade_icmp_con_arr[@]} -gt 0 ]] && $kernel_activate_forwarding ; then
|
||||||
for _val in "${masquerade_icmp_con_arr[@]}" ; do
|
for _val in "${masquerade_icmp_con_arr[@]}" ; do
|
||||||
IFS=':' read -a _val_arr <<< "${_val}"
|
IFS=':' read -a _val_arr <<< "${_val}"
|
||||||
|
|
||||||
$ipt -t nat -A POSTROUTING -p icmp -s ${_val_arr[0]} -d ${_val_arr[1]} -j MASQUERADE
|
$ipt -t nat -A POSTROUTING -p icmp -s ${_val_arr[0]} -d ${_val_arr[1]} -j MASQUERADE
|
||||||
done
|
done
|
||||||
|
echo_done
|
||||||
|
else
|
||||||
|
echo_skipped
|
||||||
fi
|
fi
|
||||||
|
echo
|
||||||
|
|
||||||
|
|
||||||
# -------------
|
# -------------
|
||||||
|
Loading…
Reference in New Issue
Block a user