safe google iptables
1.0.0
# Print the IP address
_IP= $( hostname -I ) || true
if [ " $_IP " ] ; then
printf " My IP address is %sn " " $_IP "
fi
echo 1 > /proc/sys/net/ipv4/ip_forward &&
iptables -F &
iptables -t nat -F &
iptables -t nat -X REDSOCKS &
sleep 5 &&
iptables -t nat -N REDSOCKS &&
iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN &&
iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN &&
iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN &&
iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN &&
iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN &&
iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN &&
iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN &&
iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN &&
iptables -t nat -A REDSOCKS -p tcp -o eth0 -j DNAT --to 127.0.0.1:12345 &&
iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345 &&
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner dmit -j RETURN &&
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner pi -j REDSOCKS &&
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner root -j REDSOCKS &&
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner forest -j REDSOCKS &&
iptables -t nat -A OUTPUT -p tcp -j REDSOCKS &&
iptables -A INPUT -i eth0 -j ACCEPT &&
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE &&
iptables -A FORWARD -i eth0 -j ACCEPT &&
iptables -t nat -A PREROUTING -p tcp -i eth0 -j REDSOCKS &&
iptables -A INPUT -i wlan0 -j ACCEPT &&
iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE &&
iptables -A FORWARD -i wlan0 -j ACCEPT &&
iptables -t nat -A PREROUTING -p tcp -i wlan0 -j REDSOCKS &&
systemctl start isc-dhcp-server &&
echo " RASP ROUTER CONFIGURED "
exit 0iptables seguros
#! /bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
# Print the IP address
_IP= $( hostname -I ) || true
if [ " $_IP " ] ; then
printf " My IP address is %sn " " $_IP "
fi
echo " GOOGLE IPTABLES "
iptables -t nat -F &
iptables -t nat -N REDSOCKS &
iptables -t nat -D REDSOCKS -d 202.120.58.0/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 101.6.8.0/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 59.111.0.251/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 202.120.188.98/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 0.0.0.0/8 -j RETURN &
iptables -t nat -D REDSOCKS -d 10.0.0.0/8 -j RETURN &
iptables -t nat -D REDSOCKS -d 127.0.0.0/8 -j RETURN &
iptables -t nat -D REDSOCKS -d 169.254.0.0/16 -j RETURN &
iptables -t nat -D REDSOCKS -d 172.16.0.0/12 -j RETURN &
iptables -t nat -D REDSOCKS -d 192.168.0.0/16 -j RETURN &
iptables -t nat -D REDSOCKS -d 224.0.0.0/4 -j RETURN &
iptables -t nat -D REDSOCKS -d 240.0.0.0/4 -j RETURN &
iptables -t nat -A REDSOCKS -d 202.120.188.98/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 202.120.58.0/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 101.6.8.0/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 59.111.0.251/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN &
iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN &
iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN &
iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN &
iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN &
iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN &
iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN &
iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN &
iptables -t nat -D REDSOCKS -p tcp -j REDIRECT --to-ports 12345 &
iptables -t nat -D OUTPUT -p tcp -m owner --uid-owner pi -j REDSOCKS &
iptables -t nat -D OUTPUT -p tcp -m owner --uid-owner root -j REDSOCKS &
iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345 &
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner pi -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner root -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner 0 -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --gid-owner root -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --gid-owner 0 -j REDSOCKS &
iptables -D OUTPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -D INPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -D OUTPUT -p udp -d 127.0.0.0/8 -j ACCEPT &
iptables -D OUTPUT -p udp -d 45.89.228.0/24 -j ACCEPT &
iptables -D OUTPUT -p udp -j DROP &
iptables -A OUTPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -A INPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -A OUTPUT -p udp -d 127.0.0.0/8 -j ACCEPT &
iptables -A OUTPUT -p udp -d 45.89.228.0/24 -j ACCEPT &
iptables -A OUTPUT -p udp -j DROP &
echo " GOOGLE IPTABLES ADDED "echo 1>/proc/sys/net/ipv4/ip_forward iptables -f iptables -t nat -f iptables -t nat -x rojosocks
iptables -t nat -n RedSocks iptables -t nat -a rojosocks -d 0.0.0.0/8 -j return iptables -t nat -a rojosocks -d 10.0.0.0/8 -j return ippable -t nat -a rojosocks -d 127.0.0.0/8 -j return -t nat -a redsocks --dd 169.254.0.0/16 -j return iptables -t nat -a rojosocks -d 172.16.0.0/12 -j return iptables -t nat -a rojosocks -d 192.168.0.0/16 -j return iptables -t nat -a rowsocks -d 224.0.0.0/4 -j return iTables --tt natssksocks -dsocks -dsocks -dsocks 240.0.0.0/4 -J return iptables -t nat -a rojosocks -d 45.89.228.109 -J return iptables -t nat -a rojosocks -d 2.56.240.163 -j regreso
iptables -t nat -a rojosocks -p tcp -o wlp0s29f7u4 -j dnat - -to 127.0.0.1:12345 iptables -t nat -a rojosocks -p tcp -o enp4s0 -j dnat -a 127.0.0.1:12345 iptables --t nat nats rowsocks Redirección-a puerto 12345
iptables -t nat -a output -p tcp -m propietario --uid -propietario -rotor -j return iptables -t nat -a output -p tcp -m propietario --uid -tocador vpn -j return iptables -t nat -a salida -p tcp -j rojosocks
iptables -a entrada -i enp2s0 -j Aceptar iptables -a entrada -i enp3s0 -j Aceptar iptables -a entrada -i enp4s0 -j Aceptar iptables -a entrada -i enp5s0 -j -k aceptable iptables -a entrada -i enp6s0 -j aceptable iPtables -a entrada -i enp7s0 -j Aceptación de aceptación -a Input -i Wlp0s iptables -a delantero -i enp2s0 -j Aceptar iPtables -A adelante -i Enp3S0 -j Aceptar IPTables -A Forward -i enp4s0 -j Aceptar IPtables -A adelante -i Enp5S0 -J Aceptar IPTables -A delantero
iptables -t nat -A POSTROUTING -o enp4s0 -j MASQUERADE iptables -t nat -A POSTROUTING -o wlp0s29f7u4 -j MASQUERADE iptables -t nat -A POSTROUTING -o enp7s0 -j MASQUERADE iptables -t nat -A POSTROUTING -o enp6s0 -j MASQUERADE iptables -t nat -A posterior a la postratería -o enp5s0 -j mascarada
iptables -t nat -a preprouting -p tcp -i enp7s0 -j rojosocks iptables -t nat -a preprouting -p tcp -i enp6s0 -j rojosocks iptables -t nat -a prerrouting -p tcp -i enp5s0 -j rojosocks
echo "RedSocks IpTables configurados";
