Script NAT Proxy - Revision history

Onnowpurbo: /* Pranala Menarik */

2011-06-16T01:24:11Z

Pranala Menarik

Onnowpurbo: /* Pranala Menarik */

2010-05-11T04:10:23Z

Pranala Menarik

Onnowpurbo: /* isi script.sh */

2010-01-25T05:08:21Z

isi script.sh

Onnowpurbo at 05:07, 25 January 2010

2010-01-25T05:07:46Z

Onnowpurbo at 14:30, 7 January 2010

2010-01-07T14:30:20Z

Onnowpurbo at 14:27, 7 January 2010

2010-01-07T14:27:31Z

Onnowpurbo at 02:29, 11 April 2008

2008-04-11T02:29:09Z

Onnowpurbo at 07:36, 10 March 2008

2008-03-10T07:36:36Z

Onnowpurbo at 08:12, 8 March 2008

2008-03-08T08:12:23Z

Onnowpurbo at 08:06, 11 February 2008

2008-02-11T08:06:55Z

@@ Line 137: / Line 137: @@
 * [[Linux Howto]]
+* [[Script NAT Transparant Proxy & Squid]]
 [[Category: Linux]]
 [[Category: Proxy]]

← Older revision		Revision as of 04:10, 11 May 2010
Line 137:		Line 137:

	* [[Linux Howto]]		* [[Linux Howto]]
		+
		+
		+	[[Category: Linux]]
		+	[[Category: Proxy]]

@@ Line 69: / Line 69: @@
     /sbin/iptables -F
     /sbin/iptables -P INPUT DROP
-   /sbin/iptables -A INPUT -p tcp -i eth0 --destination-port 25 -s ! 192.168.0.1  -j DROP
+ #  /sbin/iptables -A INPUT -p tcp -i eth0 --destination-port 25 -s ! 192.168.0.1  -j DROP
-   /sbin/iptables -A INPUT -p tcp -i eth1 --destination-port 25 -s ! 192.168.0.1  -j DROP
+ #  /sbin/iptables -A INPUT -p tcp -i eth1 --destination-port 25 -s ! 192.168.0.1  -j DROP
     /sbin/iptables -A INPUT -i ! ${UPLINK} -j ACCEPT
@@ Line 78: / Line 78: @@
     /sbin/iptables -A INPUT -p udp -i ${UPLINK} -j REJECT --reject-with icmp-port-unreachable
- /sbin/iptables -A FORWARD -p tcp --destination-port 25 -s ! 192.168.0.1  -j DROP
+   /sbin/iptables -A FORWARD -p tcp --destination-port 25 -s ! 192.168.0.1  -j DROP
   # block bad sites
+  # /sbin/iptables -I INPUT -s 68.178.211.34 -j DROP
- /sbin/iptables -I INPUT -s 68.178.211.34 -j DROP
+  # /sbin/iptables -I INPUT -d 68.178.211.34 -j DROP
-  /sbin/iptables -I INPUT -d 68.178.211.34 -j DROP
+  # /sbin/iptables -I INPUT -s 64.27.5.168 -j DROP
+  # /sbin/iptables -I INPUT -d 64.27.5.168 -j DROP
   # turn off packet spoofing in all interfaces
@@ Line 92: / Line 90: @@
     do
       echo 1 > /proc/sys/net/ipv4/conf/${x}/rp_filter
     done
   if [ "$ROUTER" = "yes" ]
@@ Line 108: / Line 106: @@
     echo "Activate SNAT (static IP) ...."
     /sbin/iptables -t nat -A POSTROUTING -o ${UPLINK} -j SNAT --to ${NAT}
   fi
-  # echo "Activate Port Forwarding .."
+  # echo "Activate SMTP Port Forwarding .."
   # /sbin/iptables -t nat -A PREROUTING -i ${UPLINK} -m multiport -p tcp \
-  # --dport 25 -d ${NAT} -j DNAT --to 192.168.0.1:25
+  # --dport 25 -d ${NAT} -j DNAT --to 192.168.0.254:25
-  # /sbin/iptables -A FORWARD -i ${UPLINK} -m multiport -p tcp -d 192.168.0.1 \
+  # /sbin/iptables -A FORWARD -i ${UPLINK} -m multiport -p tcp -d 192.168.0.254 \
   #  --dport 25 -j ACCEPT
   fi
@@ Line 129: / Line 133: @@
         /sbin/iptables -t nat -F POSTROUTING
   fi
 ==Pranala Menarik==
 * [[Linux Howto]]

← Older revision		Revision as of 05:07, 25 January 2010
Line 26:		Line 26:


−	~~----~~	+	==isi script.sh==

	#!/bin/bash		#!/bin/bash

@@ Line 10: / Line 10: @@
   # ./script.sh stop
-Agar script.sh langsung on waktu komputer di booting,
+Agar script.sh langsung on waktu [[komputer]] di booting,
 anda dapat menuliskan script tersebut di folder (misalnya) /root.
 Masukan pada file /etc/rc/local perintah
   /root/script.sh start
 Isi script.sh adalah seperti tampak di bawah ini.
@@ Line 95: / Line 93: @@
       echo 1 > /proc/sys/net/ipv4/conf/${x}/rp_filter
     done
-−
   if [ "$ROUTER" = "yes" ]
     then

@@ Line 31: / Line 31: @@
   #!/bin/bash
-−
   # From: AHK <akuhon@kompas.com>
   # To: linux-admin@linux.or.id
-−
   # Save this file and activate through # file_name start
   # and de-activate through # file_name stop
-−
   # This firewall-script can be used for workstation, laptop, router
   # or server that are not running network service (such as web server, ftp
   # server etc)
-−
   # change the parameter UPLINK with Interface device to the Internet.
   # In our case WLAN router with NIC wlan0 connected to the Internet
   # and LAN connection with eth0.
   # if you use dial-up modem, you might use ppp0 as your UPLINK
-−
   UPLINK="eth1"
-−
   # if you run the gateway as router and forward IP packet between eth devices
   # please fill .yes., if not, please fill .no.
-−
   ROUTER="yes"
-−
   # Please change 202.150.10.45 to your static IP address of UPLINK device.
   # For those who use dial-up or dynamic IP, please enter .dynamic.
-−
   # NAT="192.168.1.100"
-−
   NAT="dynamic"
-−
   # please list all network interfaces including eth devices
   # as well as dial-up interface such as ppp0
-−
   INTERFACES="lo eth0 eth1 eth2"
-−
   if [ "$1" = "start" ]
     then
@@ Line 73: / Line 73: @@
     /sbin/iptables -A INPUT -p tcp -i eth0 --destination-port 25 -s ! 192.168.0.1  -j DROP
     /sbin/iptables -A INPUT -p tcp -i eth1 --destination-port 25 -s ! 192.168.0.1  -j DROP
-−
     /sbin/iptables -A INPUT -i ! ${UPLINK} -j ACCEPT
     /sbin/iptables -A INPUT -i ${UPLINK} -p tcp -s 0/0 --dport 25 -j ACCEPT
@@ Line 81: / Line 81: @@
   /sbin/iptables -A FORWARD -p tcp --destination-port 25 -s ! 192.168.0.1  -j DROP
-−
   # block bad sites
-−
   /sbin/iptables -I INPUT -s 68.178.211.34 -j DROP
   /sbin/iptables -I INPUT -d 68.178.211.34 -j DROP
-−
   /sbin/iptables -I INPUT -s 64.27.5.168 -j DROP
   /sbin/iptables -I INPUT -d 64.27.5.168 -j DROP
-−
   # turn off packet spoofing in all interfaces
   for x in ${INTERFACES}
@@ Line 111: / Line 111: @@
     /sbin/iptables -t nat -A POSTROUTING -o ${UPLINK} -j SNAT --to ${NAT}
   fi
-−
   # echo "Activate Port Forwarding .."
   # /sbin/iptables -t nat -A PREROUTING -i ${UPLINK} -m multiport -p tcp \
@@ Line 117: / Line 117: @@
   # /sbin/iptables -A FORWARD -i ${UPLINK} -m multiport -p tcp -d 192.168.0.1 \
   #  --dport 25 -j ACCEPT
-−
   fi
     elif [ "$1" = "stop" ]
@@ Line 131: / Line 131: @@
         /sbin/iptables -t nat -F POSTROUTING
   fi

← Older revision		Revision as of 07:36, 10 March 2008
Line 9:		Line 9:

	# ./script.sh stop		# ./script.sh stop
		+
		+	Agar script.sh langsung on waktu komputer di booting,
		+	anda dapat menuliskan script tersebut di folder (misalnya) /root.
		+	Masukan pada file /etc/rc/local perintah
		+
		+	/root/script.sh start
		+

← Older revision		Revision as of 08:12, 8 March 2008
Line 117:		Line 117:
	/sbin/iptables -t nat -F POSTROUTING		/sbin/iptables -t nat -F POSTROUTING
	fi		fi
		+
		+
		+
		+
		+
		+
		+	==Pranala Menarik==
		+
		+	* [[Linux Howto]]