firewallbasico.sh

vagnerfonseeca

Jun 18th, 2025

Never

Add comment

Not a member of Pastebin yet? Sign Up, it unlocks many cool features!

text 2.01 KB | None | 0 0

raw download clone embed print report

#!/bin/bash
#set -x
# Firewall basico
# acha o Iptables
IPT=$(which iptables)
reset () {
CHAINS="INPUT OUTPUT FORWARD"
for chain in $CHAINS
do
$IPT -P $chain ACCEPT
$IPT -F $chain
$IPT -Z $chain
done
}
#reset nas cadeias
reset
#Define a pol�tica de entrada
$IPT -P INPUT DROP
$IPT -P FORWARD DROP
# regras de filtro
# portas tcp
PORTAS="80 21 22 20 25 53 110"
for PORTA in $PORTAS
do
$IPT -A INPUT -p tcp --sport $PORTA --dport 32000: -j ACCEPT
done
# portas UDP
PORTAS="53 67 68 138 139"
for PORTA in $PORTAS
do
$IPT -A INPUT -p udp --sport $PORTA --dport 32000: -j ACCEPT
done
# Portas Altas para ftp
$IPT -A INPUT -p tcp --sport 32000: --dport 32000: -j ACCEPT
# Regras de Forward
CASA="192.168.1.0/24"
#TCP
PORTAS="80 21 22 20 25 53 110"
for PORTA in $PORTAS
do
$IPT -A FORWARD -s $SALA2 -p tcp --dport $PORTA --sport 32000: -j ACCEPT
$IPT -A FORWARD -d $SALA2 -p tcp --sport $PORTA --dport 32000: -j ACCEPT
done
# UDP
# portas UDP
PORTAS="53 67 68 138 139"
for PORTA in $PORTAS
do
$IPT -A FORWARD -s $SALA2 -p udp --dport $PORTA --sport 32000: -j ACCEPT
$IPT -A FORWARD -s $SALA2 -p udp --sport $PORTA --dport 32000: -j ACCEPT
done
# portas altas para ftp
$IPT -A FORWARD -p tcp --sport 32000: --dport 32000: -j ACCEPT
#compartilha a conex�o
IFOUT=eth0
echo 'Compartilhando a conex�o de Internet ...'
#$IPT -t nat -A POSTROUTING -s $CASANET -d ! $CASANET -o $IFPPP -j MASQUERADE
$IPT -t nat -A POSTROUTING -s $CASANET -j SNAT --to-source $MORIA
# Liga o proxy transparente para o resto da casa.
echo 'Ligando o proxy transparente ...'
$IPT -t nat -A PREROUTING -s $CASANET -p tcp --dport 80 -j REDIRECT --to-ports 3128
#
#################################################################################
$IPT -t nat -A POSTROUTING -s $SALA2 -o $IFOUT -j MASQUERADE
# Liga o roteamento
PROC="/proc/sys/net/ipv4/ip_forward"
ROT=$(cat $PROC)
if [ $ROT -eq 0 ]
then
echo 1 > $PROC
fi

Add Comment

Please, Sign In to add comment