#!/bin/sh


# Gravar esse script em /etc/network/if-up.d/firewall
# E executar
# chmod 755 /etc/network/if-up.d/firewall



# Limpa as regras
iptables -F
iptables -t nat -F

# Permite tráfego de FORWARD (roteamento)
iptables -P FORWARD ACCEPT

# Libera NAT para computadores da rede 192.168.0.0/24
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j MASQUERADE

# Libera forward no kernel
echo 1 > /proc/sys/net/ipv4/ip_forward