Files
baremetal-basics/pfw
T

30 lines
973 B
Bash
Raw Normal View History

2026-09-25 03:01:45 +00:00
#!/bin/bash
2026-09-25 12:36:04 +00:00
clear
2026-09-25 03:01:45 +00:00
iprt=$1
oprt=$2
oipa=$3
2026-09-25 23:24:59 +00:00
## IPTABLES
2026-09-25 03:01:45 +00:00
#echo 1 > /proc/sys/net/ipv4/ip_forward
#iptables -F
#iptables -t nat -F
2026-09-25 11:40:03 +00:00
#iptables -t nat -A PREROUTING -p tcp --dport $iprt -j DNAT --to-destination $oipa:$oprt
2026-09-25 03:01:45 +00:00
#sudo iptables -t nat -A POSTROUTING -j MASQUERADE
#sudo iptables -t nat -L -n -v
#sudo iptables-persistent
2026-09-25 23:24:59 +00:00
## NFTABLES
#sudo nft -f /etc/nftables.conf
#sudo sysctl -w net.ipv4.ip_forward=1
#sudo sed -i 's/DEFAULT_FORWARD_POLICY="DROP"/DEFAULT_FORWARD_POLICY="ACCEPT"/g' /etc/default/ufw
#sudo ufw reload
#sudo nft add table ip nat
#sudo nft add chain ip nat prerouting { type nat hook prerouting priority -100 \; }
#sudo nft add chain ip nat postrouting { type nat hook postrouting priority 100 \; }
2026-09-25 03:01:45 +00:00
sudo nft add rule ip nat prerouting tcp dport $iprt dnat to $oipa:$oprt
sudo nft add rule ip nat postrouting ip daddr $oipa masquerade
2026-09-25 12:01:49 +00:00
#sudo mkdir /etc/nftables/
2026-09-26 00:03:35 +00:00
#sudo ufw status
2026-09-26 01:37:16 +00:00
sudo nft list table ip nat #| sudo tee /etc/nftables/port-forwarding.nft