# Definindo as variaveis
IPTABLES="/sbin/iptables"
REDEINT="192.168.1.0/24"
IPDNSPROVEDOR="200.225.197.37"
ENT="eth1"
PORTS="1863:1864 6891:6900 6901 1863 5190 6901"
IPLIBERADO="192.168.1.10/24 192.168.1.167/24 192.168.1.235/24
            192.168.1.17/24 192.168.1.129/24 192.168.1.179/24"
MSN="loginnet.passport.com webmessenger.msn.com meebo.com passport.com msn.com.br msn.com sc.msn.com www.msn.be 207.46.110.11 messenger.msn.com.br
     http.msg.yahoo.com nickname.msn.com.br chat.msn.com chat.msn.com.br gateway.messenger.hotmail.com
     http1.msgr.hotmail.com http2.msgr.hotmail.com http3.msgr.hotmail.com http4.msgr.hotmail.com
     http5.msgr.hotmail.com http6.msgr.hotmail.com http7.msgr.hotmail.com http8.msgr.hotmail.com
     http9.msgr.hotmail.com http10.msgr.hotmail.com http11.msgr.hotmail.com http12.msgr.hotmail.com
     http13.msgr.hotmail.com http14.msgr.hotmail.com http15.msgr.hotmail.com http16.msgr.hotmail.com
     http17.msgr.hotmail.com http18.msgr.hotmail.com http19.msgr.hotmail.com http20.msgr.hotmail.com
     "

# carregando os modulos
modprobe ip_tables
modprobe iptable_nat
modprobe ip_conntrack
modprobe ip_conntrack_ftp

# limpando as tabelas
$IPTABLES -F
$IPTABLES -t nat -F
$IPTABLES -t nat -X
$IPTABLES -X
$IPTABLES -F -t filter
$IPTABLES -X -t filter

echo 1 > /proc/sys/net/ipv4/ip_forward

echo "compartilha a web na rede interna"
$IPTABLES -t nat -A POSTROUTING -s $REDEINT -o $ENT -j MASQUERADE

echo "Liberando msn para algumas maquinas"
echo "Aguarde..."
for IP in $IPLIBERADO; do
  for PORT in $PORTS; do
    for ENDERECO in $MSN; do
       $IPTABLES -A FORWARD -i eth+ -s $IP -p tcp --dport $PORT  -j ACCEPT
       $IPTABLES -A FORWARD -i eth+ -s $IP -d $ENDERECO -j ACCEPT
    done
  done
echo "IP: $IP - Liberado"
done

echo "Bloqueando portas msn na rede interna"
for PORT in $PORTS; do
   $IPTABLES -A FORWARD -i eth+ -s $REDEINT -p tcp --dport $PORT -j DROP
   echo "Bloqueando porta: $PORT"
done

for ENDERECO in $MSN; do
   $IPTABLES -A FORWARD -i eth+ -s $REDEINT -d $ENDERECO -j DROP
   echo "Bloqueando endereco: $ENDERECO"
done