veypi/mynote
1
0
Fork 0
Code Issues 1 Pull Requests Actions Releases Wiki Activity

添加路由映射脚本

Browse Source
This commit is contained in:
veypi 2020-12-21 18:30:16 +08:00
parent ce3e1a284d
commit 21a9c4d5eb
1 changed files with 54 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
linux/rip Executable file
View File

@ -0,0 +1,54 @@
#!/bin/bash
chan=pride
chan_pre=$chan'_pre'
chan_forward=$chan'_forward'
chan_post=$chan'_post'
to=192.168.122.245
to_port=3389
from=10.69.115.207
from_port=19520
## 清空 引用
sudo iptables -t nat -nvL PREROUTING --line-number | awk -F ' ' 'BEGIN{c=0} /'${chan_pre}'/ {printf "%s %s %s\n",c, $1,$4;system("sudo iptables -t nat -D PREROUTING "$1-c);c++}'
sudo iptables -t filter -nvL FORWARD --line-number | awk -F ' ' 'BEGIN{c=0} /'${chan_forward}'/ {printf "%s %s %s\n",c, $1,$4;system("sudo iptables -t filter -D FORWARD "$1-c);c++}'
sudo iptables -t nat -nvL POSTROUTING --line-number | awk -F ' ' 'BEGIN{c=0} /'${chan_post}'/ {printf "%s %s %s\n",c, $1,$4;system("sudo iptables -t nat -D POSTROUTING "$1-c);c++}'
## 清空自定义链
sudo iptables -t nat -F $chan_pre
sudo iptables -t filter -F $chan_forward
sudo iptables -t nat -F $chan_post
## 删除自定义链
sudo iptables -t nat -X $chan_pre
sudo iptables -t filter -X $chan_forward
sudo iptables -t nat -X $chan_post
## 创建自定义链
sudo iptables -t nat -N $chan_pre
sudo iptables -t filter -N $chan_forward
sudo iptables -t nat -N $chan_post
sudo iptables -t nat -p tcp -d $from --dport $from_port -j DNAT --to $to:$to_port -I $chan_pre
sudo iptables -t nat -p udp -d $from --dport $from_port -j DNAT --to $to:$to_port -I $chan_pre
sudo iptables -t filter -d $to -j ACCEPT -I $chan_forward
sudo iptables -t nat -p tcp -d $to --dport $to_port -j SNAT --to $from -I $chan_post
sudo iptables -t nat -p udp -d $to --dport $to_port -j SNAT --to $from -I $chan_post
## 引用新链
sudo iptables -t nat -I PREROUTING -j $chan_pre
sudo iptables -t filter -I FORWARD -j $chan_forward
sudo iptables -t nat -I POSTROUTING -j $chan_post
#iptables -L
sudo iptables -t nat -nvL $chan_pre --line-number
sudo iptables -t nat -nvL PREROUTING --line-number
echo "\n\n"
sudo iptables -t filter -nvL $chan_forward --line-number
sudo iptables -t filter -nvL FORWARD --line-number
echo "\n\n"
sudo iptables -t nat -nvL $chan_post --line-number
sudo iptables -t nat -nvL POSTROUTING --line-number