Forum Debian Users Gang

#!/bin/bash 

if [ "$1" = "start" ]; then
echo " Stratuje Firewall"

/sbin/modprobe ip_tables
/sbin/modprobe ip_conntrack
/sbin/modprobe iptable_filter
/sbin/modprobe iptable_mangle
/sbin/modprobe iptable_nat
/sbin/modprobe ipt_LOG
/sbin/modprobe ipt_limit
/sbin/modprobe ipt_state
/sbin/modprobe ipt_REJECT


iptables -t nat -F
iptables -t nat -X 
iptables -F -t filter
iptables -X -t filter

iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 80.80.80.80


#wlaczam forwarding pakietow
echo 1 > /proc/sys/net/ipv4/ip_forward

#wyloczam ECN 
echo 0 > /proc/sys/net/ipv4/tcp_ecn
iptables -P INPUT DROP
iptables -A INPUT -i ! eth0 -j ACCEPT 
iptables -A INPUT -i ! eth0 -p icmp -j ACCEPT 
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT


#Blokowanie pingow
iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT

#Blokowanie syn
iptables -I FORWARD -p tcp ! --syn -m state --state NEW -j LOG --log-prefix "Nowy - bez bitu syn:"
iptables -I FORWARD -p tcp ! --syn -m state --state NEW -j DROP



elif [ "$1" = "stop" ]; then

echo "Zatrzymanie Firewalla"

iptables -F 
iptables -X 
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
fi