Skrypt rc.zewip #!/bin/sh USECOLOR=yes . /etc/rc.d/functions zewip=83.238.XX.XX wewip=192.168.10.10 zewip1=83.238.XX.XX wewip1=192.168.10.69 brd=83.238.XX.XX mask=255.255.255.240 dev=eth0 case "$1" in start) stat_busy "Start przydzielania zewnetrznego IP" ifconfig $dev:1 $zewip broadcast $brd netmask $mask up /usr/sbin/iptables -t nat -I PREROUTING -s 0/0 -d $zewip -j DNAT --to $w /usr/sbin/iptables -t nat -I POSTROUTING -s $wewip -d 0/0 -j SNAT --to $ /usr/sbin/iptables -I FORWARD -d $zewip -j ACCEPT /usr/sbin/iptables -I FORWARD -s $wewip -j ACCEPT /usr/sbin/iptables -I FORWARD -d $wewip -j ACCEPT /usr/sbin/iptables -I INPUT -d $zewip -j ACCEPT ifconfig $dev:2 $zewip1 broadcast $brd netmask $mask up /usr/sbin/iptables -t nat -I PREROUTING -s 0/0 -d $zewip1 -j DNAT --to $ /usr/sbin/iptables -t nat -I POSTROUTING -s $wewip1 -d 0/0 -j SNAT --to /usr/sbin/iptables -I FORWARD -d $zewip1 -j ACCEPT /usr/sbin/iptables -I FORWARD -s $wewip1 -j ACCEPT /usr/sbin/iptables -I FORWARD -d $wewip1 -j ACCEPT /usr/sbin/iptables -I INPUT -d $zewip1 -j ACCEPT stat_done ;; stop) stat_busy "Zatrzymanie przydzielania zewnetrznego IP" ifconfig $dev:1 down /usr/sbin/iptables -t nat -D PREROUTING -s 0/0 -d $zewip -j DNAT --to $w /usr/sbin/iptables -t nat -D POSTROUTING -s $wewip -d 0/0 -j SNAT --to $ /usr/sbin/iptables -D FORWARD -d $zewip -j ACCEPT /usr/sbin/iptables -D FORWARD -s $wewip -j ACCEPT /usr/sbin/iptables -D FORWARD -d $wewip -j ACCEPT /usr/sbin/iptables -D INPUT -d $zewip -j ACCEPT ifconfig $dev:2 down /usr/sbin/iptables -t nat -D PREROUTING -s 0/0 -d $zewip1 -j DNAT --to $ /usr/sbin/iptables -t nat -D POSTROUTING -s $wewip1 -d 0/0 -j SNAT --to /usr/sbin/iptables -D FORWARD -d $zewip1 -j ACCEPT /usr/sbin/iptables -D FORWARD -s $wewip1 -j ACCEPT /usr/sbin/iptables -D FORWARD -d $wewip1 -j ACCEPT /usr/sbin/iptables -D INPUT -d $zewip1 -j ACCEPT stat_done ;; restart) $0 stop sleep 1 $0 start ;; *) echo "usage $0 (start|stop|restart)" esac exit 0 ifconfig eth0 Link encap:Ethernet HWaddr 00:04:76:19:84:25 inet addr:83.238.XX.XX Bcast:83.238.XX.XX Mask:255.255.255.240 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1054976390 errors:5 dropped:0 overruns:1 frame:5 TX packets:1149905464 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:3533556791 (3369.8 Mb) TX bytes:3022228924 (2882.2 Mb) Interrupt:17 Base address:0xbc00 eth0:1 Link encap:Ethernet HWaddr 00:04:76:19:84:25 inet addr:83.238.XX.XX Bcast:83.238.XX.XX Mask:255.255.255.240 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:17 Base address:0xbc00 eth0:2 Link encap:Ethernet HWaddr 00:04:76:19:84:25 inet addr:83.238.XX.XX Bcast:83.238.XX.XX Mask:255.255.255.240 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 Interrupt:17 Base address:0xbc00 eth1 Link encap:Ethernet HWaddr 00:30:4F:28:C3:9C inet addr:192.168.10.253 Bcast:192.168.10.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1142517546 errors:0 dropped:0 overruns:0 frame:0 TX packets:1046778544 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1092837817 (1042.2 Mb) TX bytes:1223368218 (1166.6 Mb) Interrupt:19 Base address:0xee00 imq0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 UP RUNNING NOARP MTU:1500 Metric:1 RX packets:1052084615 errors:0 dropped:0 overruns:0 frame:0 TX packets:1049577389 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:30 RX bytes:709012674 (676.1 Mb) TX bytes:2799067857 (2669.3 Mb) imq1 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 UP RUNNING NOARP MTU:1500 Metric:1 RX packets:280726235 errors:0 dropped:0 overruns:0 frame:0 TX packets:280388506 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:30 RX bytes:3267823887 (3116.4 Mb) TX bytes:3080348198 (2937.6 Mb) imq2 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 UP RUNNING NOARP MTU:1500 Metric:1 RX packets:785623145 errors:0 dropped:0 overruns:0 frame:0 TX packets:784601115 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:30 RX bytes:2193450044 (2091.8 Mb) TX bytes:1479980422 (1411.4 Mb) imq3 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 UP RUNNING NOARP MTU:1500 Metric:1 RX packets:669358049 errors:0 dropped:0 overruns:0 frame:0 TX packets:667117615 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:30 RX bytes:606987546 (578.8 Mb) TX bytes:3250439189 (3099.8 Mb) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:27472200 errors:0 dropped:0 overruns:0 frame:0 TX packets:27472200 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2533067529 (2415.7 Mb) TX bytes:2533067529 (2415.7 Mb) tap0 Link encap:Ethernet HWaddr 00:FF:30:03:28:98 inet addr:192.168.150.1 Bcast:192.168.150.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:197214 errors:0 dropped:0 overruns:0 frame:0 TX packets:186389 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:18709226 (17.8 Mb) TX bytes:59353512 (56.6 Mb) iptables Chain PREROUTING (policy ACCEPT 8673 packets, 702K bytes) pkts bytes target prot opt in out source destination 0 0 REDIRECT tcp -- eth1 * 192.168.10.1 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.2 0.0.0.0/0 tcp dpt:80 redir ports 3128 32 1536 REDIRECT tcp -- eth1 * 192.168.10.3 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.4 0.0.0.0/0 tcp dpt:80 redir ports 3128 107 5136 REDIRECT tcp -- eth1 * 192.168.10.5 0.0.0.0/0 tcp dpt:80 redir ports 3128 34 1632 REDIRECT tcp -- eth1 * 192.168.10.6 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.7 0.0.0.0/0 tcp dpt:80 redir ports 3128 3 144 REDIRECT tcp -- eth1 * 192.168.10.8 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.9 0.0.0.0/0 tcp dpt:80 redir ports 3128 45 2160 REDIRECT tcp -- eth1 * 192.168.10.11 0.0.0.0/0 tcp dpt:80 redir ports 3128 124 5952 REDIRECT tcp -- eth1 * 192.168.10.12 0.0.0.0/0 tcp dpt:80 redir ports 3128 216 10368 REDIRECT tcp -- eth1 * 192.168.10.13 0.0.0.0/0 tcp dpt:80 redir ports 3128 2 96 REDIRECT tcp -- eth1 * 192.168.10.14 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.15 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.16 0.0.0.0/0 tcp dpt:80 redir ports 3128 4 192 REDIRECT tcp -- eth1 * 192.168.10.17 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.18 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.19 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.20 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.21 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.22 0.0.0.0/0 tcp dpt:80 redir ports 3128 8 384 REDIRECT tcp -- eth1 * 192.168.10.23 0.0.0.0/0 tcp dpt:80 redir ports 3128 42 2016 REDIRECT tcp -- eth1 * 192.168.10.24 0.0.0.0/0 tcp dpt:80 redir ports 3128 42 2016 REDIRECT tcp -- eth1 * 192.168.10.25 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.26 0.0.0.0/0 tcp dpt:80 redir ports 3128 51 2448 REDIRECT tcp -- eth1 * 192.168.10.27 0.0.0.0/0 tcp dpt:80 redir ports 3128 2 96 REDIRECT tcp -- eth1 * 192.168.10.28 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.29 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.30 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.31 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.32 0.0.0.0/0 tcp dpt:80 redir ports 3128 51 2448 REDIRECT tcp -- eth1 * 192.168.10.33 0.0.0.0/0 tcp dpt:80 redir ports 3128 39 1872 REDIRECT tcp -- eth1 * 192.168.10.34 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.35 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.36 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.37 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.38 0.0.0.0/0 tcp dpt:80 redir ports 3128 20 960 REDIRECT tcp -- eth1 * 192.168.10.39 0.0.0.0/0 tcp dpt:80 redir ports 3128 41 1968 REDIRECT tcp -- eth1 * 192.168.10.40 0.0.0.0/0 tcp dpt:80 redir ports 3128 143 6864 REDIRECT tcp -- eth1 * 192.168.10.41 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.42 0.0.0.0/0 tcp dpt:80 redir ports 3128 122 5856 REDIRECT tcp -- eth1 * 192.168.10.43 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.44 0.0.0.0/0 tcp dpt:80 redir ports 3128 2 96 REDIRECT tcp -- eth1 * 192.168.10.45 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.46 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.47 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.48 0.0.0.0/0 tcp dpt:80 redir ports 3128 6 288 REDIRECT tcp -- eth1 * 192.168.10.49 0.0.0.0/0 tcp dpt:80 redir ports 3128 219 9960 REDIRECT tcp -- eth1 * 192.168.10.50 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.51 0.0.0.0/0 tcp dpt:80 redir ports 3128 188 9024 REDIRECT tcp -- eth1 * 192.168.10.52 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.53 0.0.0.0/0 tcp dpt:80 redir ports 3128 13 624 REDIRECT tcp -- eth1 * 192.168.10.54 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.55 0.0.0.0/0 tcp dpt:80 redir ports 3128 15 720 REDIRECT tcp -- eth1 * 192.168.10.56 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.57 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.58 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.59 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.60 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.61 0.0.0.0/0 tcp dpt:80 redir ports 3128 1 48 REDIRECT tcp -- eth1 * 192.168.10.62 0.0.0.0/0 tcp dpt:80 redir ports 3128 159 7632 REDIRECT tcp -- eth1 * 192.168.10.63 0.0.0.0/0 tcp dpt:80 redir ports 3128 130 6240 REDIRECT tcp -- eth1 * 192.168.10.64 0.0.0.0/0 tcp dpt:80 redir ports 3128 34 1632 REDIRECT tcp -- eth1 * 192.168.10.65 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.66 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.67 0.0.0.0/0 tcp dpt:80 redir ports 3128 0 0 REDIRECT tcp -- eth1 * 192.168.10.68 0.0.0.0/0 tcp dpt:80 redir ports 3128 21 1008 REDIRECT tcp -- eth1 * 192.168.10.70 0.0.0.0/0 tcp dpt:80 redir ports 3128 354 20184 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4662 to:192.168.10.8:4662 8142 516K DNAT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:4672 to:192.168.10.8:4672 1124 58276 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6999 to:192.168.10.6:6999 0 0 DNAT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:6999 to:192.168.10.6:6999 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6886 to:192.168.10.6:6886 0 0 DNAT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:6886 to:192.168.10.6:6886 6150 558K DNAT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:7000 to:192.168.10.6:7000 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:4899 to:192.168.10.5:4899 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:23 to:192.168.10.5:23 0 0 DNAT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:23 to:192.168.10.5:23 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 to:192.168.10.3:6000 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306 to:192.168.10.253:3306 0 0 DNAT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 to:192.168.10.69:443 0 0 DNAT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:443 to:192.168.10.69:443