Forum Debian Users Gang

# wlaczenie w kernel'u forwardowania 
echo 1 > /proc/sys/net/ipv4/ip_forward
# czyszczenie starych regul
iptables -F
iptables -X
iptables -t nat -X
iptables -t nat -F
# ustawienie polityki dzialania
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
# zezwolenie nna loczenie sie z naszym zewnetrznym ip po ssh
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p udp --dport 22 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p udp --dport 22 -j ACCEPT
# zezwolenie nna loczenie sie z naszym zewnetrznym ip po ftp
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 21 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 20 -j ACCEPT
iptables -A OUTPUT -s 0/0 -d 192.168.0.1 -p tcp --dport 20 -j ACCEPT
# polaczenia nawiazane
iptables -A INPUT -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
# udostepniaie internetu w sieci lokalnej
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE
iptables -A INPUT -s 192.168.0.0/24 -j ACCEPT
iptables -A FORWARD -s 192.168.0.0/24 -j ACCEPT

cosmos:/home/syziek# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:50:FC:AA:11:7D
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3525589 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4642268 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1577323229 (1.4 GiB)  TX bytes:1905111268 (1.7 GiB)
          Interrupt:5 Base address:0xe400

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:536 errors:0 dropped:0 overruns:0 frame:0
          TX packets:536 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:44896 (43.8 KiB)  TX bytes:44896 (43.8 KiB)

ppp0      Link encap:Point-to-Point Protocol
          inet addr:83.22.157.129  P-t-P:213.25.2.192  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:58215 errors:0 dropped:0 overruns:0 frame:0
          TX packets:55848 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:53844775 (51.3 MiB)  TX bytes:7092455 (6.7 MiB)