| verzia 2.37, 2006/01/13 18:32:36 |
verzia 2.38, 2006/01/15 15:07:45 |
|
|
| |
|
| ip="`get_first_ip_addr IP_$NAT_SUBNET_IFACE`" |
ip="`get_first_ip_addr IP_$NAT_SUBNET_IFACE`" |
| netmask="Mask_$NAT_SUBNET_IFACE" |
netmask="Mask_$NAT_SUBNET_IFACE" |
| localnet="${!ip}/${!netmask}" |
localnet="$ip/${!netmask}" |
| |
|
| lan_ip="`get_first_ip_addr IP_$NAT_LAN_IFACE`" |
lan_ip="`get_first_ip_addr IP_$NAT_LAN_IFACE`" |
| |
|
|
|
| eval `echo $redirect | awk -v FS=: '{ printf "remote_port=%s; local_port=%s;", $1, $2; }'` |
eval `echo $redirect | awk -v FS=: '{ printf "remote_port=%s; local_port=%s;", $1, $2; }'` |
| echo -en " $remote_port:$local_port" |
echo -en " $remote_port:$local_port" |
| $IPTABLES -t nat -A PREROUTING -p TCP \ |
$IPTABLES -t nat -A PREROUTING -p TCP \ |
| -i ! $NAT_LAN_IFACE -d ! ${!lan_ip} \ |
-i ! $NAT_LAN_IFACE -d ! $lan_ip \ |
| --dport $remote_port -j REDIRECT --to-port $local_port |
--dport $remote_port -j REDIRECT --to-port $local_port |
| done |
done |
| |
|
|
|
| for redirect in $NAT_TCP_PORT_FORWARD; do |
for redirect in $NAT_TCP_PORT_FORWARD; do |
| eval `echo $redirect | awk -v FS=: '{ printf "src_port=%s; local_machine=%s; dest_port=%s;", $1, $2, $3; }'` |
eval `echo $redirect | awk -v FS=: '{ printf "src_port=%s; local_machine=%s; dest_port=%s;", $1, $2, $3; }'` |
| echo -en " $src_port -> $local_machine:$dest_port" |
echo -en " $src_port -> $local_machine:$dest_port" |
| $IPTABLES -t nat -A PREROUTING -p TCP -i $NAT_LAN_IFACE -d ${!lan_ip} \ |
$IPTABLES -t nat -A PREROUTING -p TCP -i $NAT_LAN_IFACE -d $lan_ip \ |
| --dport $src_port -j DNAT --to $local_machine:$dest_port |
--dport $src_port -j DNAT --to $local_machine:$dest_port |
| $IPTABLES -A FORWARD -p TCP -i $NAT_LAN_IFACE -d $local_machine --dport $dest_port -j ACCEPT |
$IPTABLES -A FORWARD -p TCP -i $NAT_LAN_IFACE -d $local_machine --dport $dest_port -j ACCEPT |
| done |
done |
| Riadok 729 do_ip_accounting() |
|
| Riadok 729 do_ip_accounting() |
|
| |
|
| ip="`get_first_ip_addr IP_$NAT_SUBNET_IFACE`"; |
ip="`get_first_ip_addr IP_$NAT_SUBNET_IFACE`"; |
| netmask="Mask_$NAT_SUBNET_IFACE" |
netmask="Mask_$NAT_SUBNET_IFACE" |
| localnet="${!ip}/${!netmask}" |
localnet="$ip/${!netmask}" |
| |
|
| $IPTABLES -I INPUT -i $NAT_LAN_IFACE -j $IPACCT_IN_NAME |
$IPTABLES -I INPUT -i $NAT_LAN_IFACE -j $IPACCT_IN_NAME |
| $IPTABLES -I OUTPUT -o $NAT_LAN_IFACE -j $IPACCT_OUT_NAME |
$IPTABLES -I OUTPUT -o $NAT_LAN_IFACE -j $IPACCT_OUT_NAME |