#!/bin/bash ##limpando as regras anteriores iptables -F iptables -F -t nat ##Gateway modprobe iptable_nat iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE iptables -t nat -A POSTROUTING -o eth2 -j MASQUERADE echo 1 > /proc/sys/net/ipv4/ip_forward #Rotas route -n route del -net 0.0.0.0 route del -net 0.0.0.0 #Internet UFSM route add -net 0.0.0.0 gw 200.18.45.201 #Internet ZUMPNET route add -net 0.0.0.0 gw 177.72.66.185 #Resolvendo problema Coperves/UFSM route add 200.18.45.28 gw 200.18.45.201 route add 200.18.45.220 gw 200.18.45.201 ##Capturando Log MSN iptables -t nat -A PREROUTING -p tcp --destination-port 1863 -j REDIRECT --to-ports 16667 iptables -t nat -A OUTPUT -p tcp --destination-port 1863 -m owner --uid-owner 100 -j REDIRECT --to-ports 16667 ##Proxy iptables -t nat -A PREROUTING -s 192.168.188.0/24 -d 0/0 -i eth0 -p tcp --dport 80 -j REDIRECT --to-ports 3128 ##Liberando MAquina Fernando iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.4 -d 0/0 -m multiport --dports 80,443 -j ACCEPT iptables -t nat -A PREROUTING -p tcp -s 192.168.188.4 --destination-port 1863 -j REDIRECT --to-ports 1863 ##Liberando MAquina Geison iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.22 -d 0/0 -m multiport --dports 80,443 -j ACCEPT iptables -t nat -A PREROUTING -p tcp -s 192.168.188.22 --destination-port 1863 -j REDIRECT --to-ports 1863 ##Liberando Iphone Fernando iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.45 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Liberando Maquina Adalberto iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.111 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Liberando Maquina Maioli iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.110 -d 0/0 -m multiport --dports 80,443 -j ACCEPT #Liberando Maquina Maioli2 iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.112 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Liberando PC Vitor iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.91 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Liberando PC Silvia iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.79 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Liberando Iphone Geison iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.141 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Liberando Maquina Vanise iptables -t nat -I PREROUTING -i eth0 -p tcp -s 192.168.188.129 -d 0/0 -m multiport --dports 80,443 -j ACCEPT ##Fechar Porta Squid Externa iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 200.18.45.202 --dport 3128 -j DNAT --to-destination 192.168.188.1:10 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.1 --sport 10 -d 0/0 --dport 3128 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 177.72.66.186 --dport 3128 -j DNAT --to-destination 192.168.188.1:10 iptables -t nat -A POSTROUTING -o eth1 -p tcp -s 192.168.188.1 --sport 10 -d 0/0 --dport 3128 -j SNAT --to 177.72.66.186 ## Redirecionamento Servidores FP2 Banco SQL 3389 LINK UFSM iptables -t nat -A PREROUTING -i eth2 -p tcp -d 200.18.45.202 --dport 3389 -j DNAT --to-destination 192.168.188.193:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.193 --sport 3389 -d 0/0 --dport 3389 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -i eth1 -p tcp -d 177.72.66.186 --dport 3389 -j DNAT --to-destination 192.168.188.193:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.193 --sport 3389 -d 0/0 --dport 3389 -j SNAT --to 177.72.66.186 ## Redirecionamento Servidores 210 Banco de Compras iptables -t nat -A PREROUTING -i eth2 -p tcp -d 200.18.45.202 --dport 3385 -j DNAT --to-destination 192.168.188.210:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.210 --sport 3389 -d 0/0 --dport 3385 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -i eth1 -p tcp -d 177.72.66.186 --dport 3385 -j DNAT --to-destination 192.168.188.210:3389 iptables -t nat -A POSTROUTING -o eth1 -p tcp -s 192.168.188.193 --sport 3389 -d 0/0 --dport 3385 -j SNAT --to 177.72.66.186 ## Redirecionamento Servidores FP2 Velho 3388 iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 200.18.45.202 --dport 3388 -j DNAT --to-destination 192.168.188.191:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.191 --sport 3389 -d 0/0 --dport 3388 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 177.72.66.186 --dport 3388 -j DNAT --to-destination 192.168.188.191:3389 iptables -t nat -A POSTROUTING -o eth1 -p tcp -s 192.168.188.191 --sport 3389 -d 0/0 --dport 3388 -j SNAT --to 177.72.66.186 ## Redirecionamento Maquina Eliana iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 200.18.45.202 --dport 3385 -j DNAT --to-destination 192.168.188.132:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.132 --sport 3389 -d 0/0 --dport 3385 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 177.72.66.186 --dport 3385 -j DNAT --to-destination 192.168.188.132:3389 iptables -t nat -A POSTROUTING -o eth1 -p tcp -s 192.168.188.132 --sport 3389 -d 0/0 --dport 3385 -j SNAT --to 177.72.66.186 ## Maquina Adilson 3387 iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 200.18.45.202 --dport 3387 -j DNAT --to-destination 192.168.188.32:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.32 --sport 3389 -d 0/0 --dport 3387 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 177.72.66.186 --dport 3387 -j DNAT --to-destination 192.168.188.32:3389 iptables -t nat -A POSTROUTING -o eth1 -p tcp -s 192.168.188.32 --sport 3389 -d 0/0 --dport 3387 -j SNAT --to 177.72.66.186 ## Maquina Adalberto 3386 iptables -t nat -A PREROUTING -p tcp -i eth2 -s 0/0 -d 200.18.45.202 --dport 3386 -j DNAT --to-destination 192.168.188.111:3389 iptables -t nat -A POSTROUTING -o eth2 -p tcp -s 192.168.188.111 --sport 3389 -d 0/0 --dport 3386 -j SNAT --to 200.18.45.202 iptables -t nat -A PREROUTING -p tcp -i eth1 -s 0/0 -d 177.72.66.186 --dport 3386 -j DNAT --to-destination 192.168.188.111:3389 iptables -t nat -A POSTROUTING -o eth1 -p tcp -s 192.168.188.111 --sport 3389 -d 0/0 --dport 3386 -j SNAT --to 177.72.66.186 cd /home/fernando ./facebook.sh