safe google iptables 다운로드 - safe google iptables 소스 코드 다운로드

safe google iptables

기타 소스코드

1.0.0

다운로드

dnat rasp ap

 # Print the IP address
_IP= $( hostname -I ) || true
if [ " $_IP " ] ; then
  printf " My IP address is %sn " " $_IP "
fi


echo 1 > /proc/sys/net/ipv4/ip_forward && 
iptables -F & 
iptables -t nat -F & 
iptables -t nat -X REDSOCKS &

sleep 5 && 
iptables -t nat -N REDSOCKS && 
iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN && 
iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN && 
iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN && 
iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN && 
iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN && 
iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN && 
iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN && 
iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN && 
iptables -t nat -A REDSOCKS -p tcp -o eth0 -j DNAT --to 127.0.0.1:12345 && 
iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345 && 
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner dmit -j RETURN && 
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner pi -j REDSOCKS && 
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner root -j REDSOCKS && 
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner forest -j REDSOCKS && 
iptables -t nat -A OUTPUT -p tcp -j REDSOCKS && 
iptables -A INPUT -i eth0 -j ACCEPT && 
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE && 
iptables -A FORWARD -i eth0 -j ACCEPT && 
iptables -t nat -A PREROUTING -p tcp -i eth0 -j REDSOCKS && 
iptables -A INPUT -i wlan0 -j ACCEPT && 
iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE && 
iptables -A FORWARD -i wlan0 -j ACCEPT && 
iptables -t nat -A PREROUTING -p tcp -i wlan0 -j REDSOCKS && 
systemctl start isc-dhcp-server && 
echo " RASP ROUTER CONFIGURED "



exit 0

Safe-Google-Iptables

안전한 iptables

 #! /bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

# Print the IP address
_IP= $( hostname -I ) || true
if [ " $_IP " ] ; then
  printf " My IP address is %sn " " $_IP "
fi


echo " GOOGLE IPTABLES "
iptables -t nat -F &
iptables -t nat -N REDSOCKS &

iptables -t nat -D REDSOCKS -d 202.120.58.0/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 101.6.8.0/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 59.111.0.251/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 202.120.188.98/24 -j RETURN &
iptables -t nat -D REDSOCKS -d 0.0.0.0/8 -j RETURN &
iptables -t nat -D REDSOCKS -d 10.0.0.0/8 -j RETURN &
iptables -t nat -D REDSOCKS -d 127.0.0.0/8 -j RETURN &
iptables -t nat -D REDSOCKS -d 169.254.0.0/16 -j RETURN &
iptables -t nat -D REDSOCKS -d 172.16.0.0/12 -j RETURN &
iptables -t nat -D REDSOCKS -d 192.168.0.0/16 -j RETURN &
iptables -t nat -D REDSOCKS -d 224.0.0.0/4 -j RETURN &
iptables -t nat -D REDSOCKS -d 240.0.0.0/4 -j RETURN &

iptables -t nat -A REDSOCKS -d 202.120.188.98/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 202.120.58.0/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 101.6.8.0/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 59.111.0.251/24 -j RETURN &
iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN &
iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN &
iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN &
iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN &
iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN &
iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN &
iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN &
iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN &

iptables -t nat -D REDSOCKS -p tcp -j REDIRECT --to-ports 12345 &
iptables -t nat -D OUTPUT -p tcp -m owner --uid-owner pi -j REDSOCKS &
iptables -t nat -D OUTPUT -p tcp -m owner --uid-owner root -j REDSOCKS &

iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345 &
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner pi -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner root -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --uid-owner 0 -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --gid-owner root -j REDSOCKS &
iptables -t nat -A OUTPUT -p tcp -m owner --gid-owner 0 -j REDSOCKS &

iptables -D OUTPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -D INPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -D OUTPUT -p udp -d 127.0.0.0/8 -j ACCEPT &
iptables -D OUTPUT -p udp -d 45.89.228.0/24 -j ACCEPT &
iptables -D OUTPUT -p udp -j DROP &

iptables -A OUTPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -A INPUT -p tcp --tcp-flags RST RST -j DROP &
iptables -A OUTPUT -p udp -d 127.0.0.0/8 -j ACCEPT &
iptables -A OUTPUT -p udp -d 45.89.228.0/24 -j ACCEPT &
iptables -A OUTPUT -p udp -j DROP &

echo " GOOGLE IPTABLES ADDED "

Enterprise X86 아치 라우터 iptables 구성

echo 1>/proc/sys/net/ipv4/ip_forward iptables -f iptables -t nat -f iptables -t nat -x redsocks

iptables -t nat -n redsocks iptables -t nat -a redsocks -d 0.0.0.0/8 -j return iptables -t nat -a redsocks -d 10.0.0.0/8 -j return iptables -t nat -a redsocks -d 127.0.0.0/8 -j return iables- t nat -t nat -a redsocks -d- 169.254.0.0/16 -j return iptables -t nat -a redsocks -d 172.16.0.0/12 -j return iptables -t nat -a redsocks -d 192.168.0.0/16 -j return iptables -t nat -a redsocks -d 224.0.0/4-j -t nat -a nat -a -a redsocks -t -t nat -t nat -a redsocks -t. 240.0.0.0/4 -j return iptables -t nat -a redsocks -d 45.89.228.109 -j 반환 iptables -t nat -a redsocks -d 2.56.240.163 -j return

iptables -t nat -a redsocks -p tcp -o wlp0s29f7u4 -j dnat -to 127.0.1:12345 iptables -t nat -a redsocks -o enp4s0 -j dnat -to 127.0.0.12345 iptables -t nat -a redsock -j -t nat -a redsock- 리디렉션--포트 12345

iptables -t nat -a 출력 -p tcp -m 소유자 -uid -anner root -j return iptables -t nat -a output -m tcp -m 소유자 -uid -anner vpn -j return iptables -t nat -a 출력 -p tcp -j redsocks.

모든 인터페이스에서 입력 및 포워드를 허용합니다

IPTables -A 입력 -i enp2s0 -j 수락 iptables -a 입력 -i enp3s0 -j iptables -a input -i enp4s0 -j accept iptables -a 입력 -i enp5s0 -j 수락 iptables -a 입력 -i enp6s0 -j iptables -a enp7s0-j 수락 iptables -j in -in putable -j. wlp0s29f7u4 -j는 iptables를 받아 들여 -i 전방 -i enp2s0 -j iptables -a 앞으로 -i enp3s0 -j 수락 iptables -a 앞으로 -i enp4s0 -j 수락 iptables -j iptables -a promperabs -i enp6s0 -j -a prosed -i enp7s0 -a prosed -i enp7s0 -a promport -i enp5s0 -J WLP0S29F7U4 -J 허용

직접 나가는 인터페이스에 대한 NAT Masquerade를 활성화하십시오

iptables -t -t -o postrouting -o enp4s0 -j masquerade iptables -t nat -a postrouting -o wlp0s29f7u4 -j masquerade iptables -t nat -a postrouting -o enp7s0 -j masquerade iptables -a postrouting -a postroude -a postroude -a postroude -a postrouting -o enp6s -a postroud -o 스트라우팅 -o enp5s0 -j masquerade

클라이언트 입력을 Redsocks로 리디렉션합니다

iptables -t nat -a prerouting -p tcp -i enp7s0 -j redsocks iptables -t nat -a prerouting -p tcp -i enp6s0 -j redsocks iptables -t nat -a prerouting -p tcp -i enp5s0 -j redsocks

Echo "Redsocks iptables 구성";

확장하다

추가 정보