#!/bin/sh

### HTTPd

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 80 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 80 -d 192.168.1.2 -j ACCEPT


### Armada

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 2300:2400 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 2300:2400 -d 192.168.1.2 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 6073 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 6073 -d 192.168.1.2 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 6500 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 6500 -d 192.168.1.2 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 13139 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 13139 -d 192.168.1.2 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 27900 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 27900 -d 192.168.1.2 -j ACCEPT


### TCP-Ports

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 60200:60299 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 60200:60299 -d 192.168.1.2 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 60300:60399 -j DNAT --to 192.168.1.3
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 60300:60399 -d 192.168.1.3 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 60400:60499 -j DNAT --to 192.168.1.4
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 60400:60499 -d 192.168.1.4 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 60500:60599 -j DNAT --to 192.168.1.5
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 60500:60599 -d 192.168.1.5 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p tcp --dport 60600:60699 -j DNAT --to 192.168.1.6
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p tcp --dport 60600:60699 -d 192.168.1.6 -j ACCEPT


### UDP-Ports

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 60200:60299 -j DNAT --to 192.168.1.2
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 60200:60299 -d 192.168.1.2 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 60300:60399 -j DNAT --to 192.168.1.3
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 60300:60399 -d 192.168.1.3 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 60400:60499 -j DNAT --to 192.168.1.4
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 60400:60499 -d 192.168.1.4 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 60500:60599 -j DNAT --to 192.168.1.5
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 60500:60599 -d 192.168.1.5 -j ACCEPT

iptables -t nat -A prerouting_rule -i $(nvram get wan_ifname) -p udp --dport 60600:60699 -j DNAT --to 192.168.1.6
iptables        -A forwarding_rule -i $(nvram get wan_ifname) -p udp --dport 60600:60699 -d 192.168.1.6 -j ACCEPT