71 lines
2.2 KiB
Bash
Executable File
71 lines
2.2 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
CHAIN=$CHAIN
|
|
COMMENT=$COMMENT
|
|
PROTOCOL=$TYPE
|
|
|
|
##############################
|
|
|
|
echo 1 > /proc/sys/net/ipv4/ip_forward
|
|
|
|
##############################
|
|
|
|
#
|
|
if /sbin/iptables-legacy --list $CHAIN |grep ESTABLISHED |grep RELATED|grep ACCEPT ;
|
|
then : ;
|
|
else /sbin/iptables-legacy -I $CHAIN -m state --state established,related -j ACCEPT;
|
|
fi
|
|
|
|
###############################
|
|
|
|
COUNT=1
|
|
|
|
COUNT_SOURCE_IP=$(set |grep SOURCE_IP |wc -l)
|
|
COUNT_TARGET_IP=$(set |grep TARGET_IP |wc -l)
|
|
COUNT_TARGET_PORT=$(set |grep TARGET_PORT |wc -l)
|
|
|
|
if [[ $COUNT_SOURCE_IP -ge $COUNT_TARGET_IP ]] ; then
|
|
if [[ $COUNT_SOURCE_IP -ge $COUNT_TARGET_PORT ]] ; then
|
|
COUNT=$COUNT_SOURCE_IP
|
|
else
|
|
if [[ $COUNT_TARGET_IP -ge $COUNT_TARGET_PORT ]] ; then
|
|
COUNT=$COUNT_TARGET_IP
|
|
else
|
|
COUNT=$COUNT_TARGET_PORT
|
|
fi
|
|
fi
|
|
else # not ge
|
|
if [[ $COUNT_TARGET_IP -ge $COUNT_TARGET_PORT ]] ; then
|
|
COUNT=$COUNT_TARGET_IP
|
|
else
|
|
COUNT=$COUNT_TARGET_PORT
|
|
fi
|
|
fi
|
|
|
|
for i in $(seq 1 $COUNT) ; do
|
|
|
|
if set |grep SOURCE_IP_ ; then
|
|
SOURCE_IP=$(eval "echo \${"SOURCE_IP_$i"}")
|
|
fi
|
|
if set |grep TARGET_IP_ ; then
|
|
TARGET_IP=$(eval "echo \${"TARGET_IP_$i"}")
|
|
fi
|
|
if set |grep TARGET_PORT_ ; then
|
|
TARGET_PORT=$(eval "echo \${"TARGET_PORT_$i"}")
|
|
fi
|
|
|
|
# DELETE UNECESSARY LINES FROM PREVIOUS RULES
|
|
LINES=$(/sbin/iptables-legacy --line-number -n --list $CHAIN | grep "$SOURCE_IP |grep $TARGET_IP |grep $PROTOCOL |grep $TARGET_PORT" | awk '{print $1}')
|
|
|
|
if [ -n "$LINES" ] ; then
|
|
for n in $(seq 1 $LINES); do
|
|
/sbin/iptables-legacy -D --list $CHAIN $n
|
|
sleep 0.1
|
|
done
|
|
fi
|
|
|
|
# CREATE PORT FORWARD RULES
|
|
/sbin/iptables-legacy -I $CHAIN -s $SOURCE_IP -d $TARGET_IP -p $PROTOCOL --dport $TARGET_PORT -m comment --comment "$COMMENT" -j ACCEPT
|
|
|
|
done
|