#
#!/bin/sh
#
set -x
#set -v
#
PATH=/usr/eth0cal/sbin:/usr/eth0cal/bin:/sbin:/bin:/usr/sbin:/usr/bin:/sbin/iptables
#
DAEMON=/etc/init.d/fw
#
NAME=fw
#
ID=$$
#
DESC="Par Feux 1.07"
#
FAMOPTS="-T 0"
#
 
#
ipineth0tcpsport="iptables -A INPUT -i eth0 -p tcp -m multiport --source-ports "
#
ipintcpsport="iptables -A INPUT -p tcp -m multiport --source-ports"
#
ipinudpsport="iptables -A INPUT -p udp -m multiport --source-ports "
#
ipinudpdport="iptables -A INPUT -p udp -m multiport --destination-port "
#
ipouttcpdport="iptables -A OUTPUT -p tcp -m multiport --destination-port "
#
ipouttcpsport="iptables -A OUTPUT -p tcp -m owner --uid-owner 1002 -m multiport --source-ports "
#
ipoutudpsport="iptables -A OUTPUT -p udp -m owner --uid-owner 1002 -m multiport --source-ports "
#
ipdropoutudpdport="iptables -A OUTPUT -p udp -m multiport --destination-port "
#
suivi=" -m state --state ESTABLISHED,RELATED -j ACCEPT"
#
newsuivi=" -m state --state ESTABLISHED,NEW"
#
newpure="-m state --state NEW"
#
loopack="iptables -A INPUT -i lo -j ACCEPT"
#
loopackout="iptables -A OUTPUT -o lo -j ACCEPT"
#
limiteflood=" -m limit --limit 1/s --limit-burst 2 -j LOG --log-prefix "
#
AC=" -j ACCEPT"
#
DP=" -j DROP"
#
iduser="1002"
#
gnomein1="iptables -A INPUT -p tcp -s 127.0.0.1 -d 127.0.0.1 --dport 111 -m state --state ESTABLISHED,NEW -j ACCEPT"
#
gnomein2="iptables -A INPUT -p tcp -s 127.0.0.1 -d 127.0.0.1 --sport 111 -m state --state ESTABLISHED,NEW -j ACCEPT"
#
gnomeout1="iptables -A OUTPUT -p tcp -s 127.0.0.1 -d 127.0.0.1 --dport 111 -m state --state ESTABLISHED,NEW -j ACCEPT"
#
gnomeout2="iptables -A OUTPUT -p tcp -s 127.0.0.1 -d 127.0.0.1 --sport 111 -m state --state ESTABLISHED,NEW -j ACCEPT"
#
LOGALLIN="iptables -A INPUT -i lo -j LOG --log-prefix=""<LOOPACKIN> "" --log-level debug"
#
LOGALLOUT="iptables -A OUTPUT -o lo -j LOG --log-prefix=""<LOOPACK> "" --log-level debug"
#
surfin="iptables -A INPUT -p udp -m multiport --source-ports 53,80 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT "
#
surfin2="iptables -A INPUT -p tcp -m multiport --source-ports 81,80 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT"
#
 
#
surfout="iptables -A OUTPUT -m owner --uid-owner $iduser udp -m multiport --destination-port 53,80,81 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT"
#
echo $surfout