diff --git a/pfw b/pfw index befc3eb..4123b51 100644 --- a/pfw +++ b/pfw @@ -6,6 +6,7 @@ iprt=$1 oprt=$2 oipa=$3 +## IPTABLES #echo 1 > /proc/sys/net/ipv4/ip_forward #iptables -F #iptables -t nat -F @@ -14,14 +15,15 @@ oipa=$3 #sudo iptables -t nat -L -n -v #sudo iptables-persistent -sudo nft -f /etc/nftables.conf -sudo sysctl -w net.ipv4.ip_forward=1 -sudo sed -i 's/DEFAULT_FORWARD_POLICY="DROP"/DEFAULT_FORWARD_POLICY="ACCEPT"/g' /etc/default/ufw -sudo ufw reload -sudo nft add table ip nat -sudo nft add chain ip nat prerouting { type nat hook prerouting priority -100 \; } -sudo nft add chain ip nat postrouting { type nat hook postrouting priority 100 \; } +## NFTABLES +#sudo nft -f /etc/nftables.conf +#sudo sysctl -w net.ipv4.ip_forward=1 +#sudo sed -i 's/DEFAULT_FORWARD_POLICY="DROP"/DEFAULT_FORWARD_POLICY="ACCEPT"/g' /etc/default/ufw +#sudo ufw reload +#sudo nft add table ip nat +#sudo nft add chain ip nat prerouting { type nat hook prerouting priority -100 \; } +#sudo nft add chain ip nat postrouting { type nat hook postrouting priority 100 \; } sudo nft add rule ip nat prerouting tcp dport $iprt dnat to $oipa:$oprt sudo nft add rule ip nat postrouting ip daddr $oipa masquerade #sudo mkdir /etc/nftables/ -sudo nft list ruleset #| sudo tee /etc/nftables/port-forwarding.nft \ No newline at end of file +sudo nft list ruleset #| sudo tee /etc/nftables/port-forwarding.nft diff --git a/pfwd b/pfwd new file mode 100644 index 0000000..9b49e6e --- /dev/null +++ b/pfwd @@ -0,0 +1,10 @@ +#!/bin/bash + +clear + +sudo nft -f /etc/nftables.conf +sudo sysctl -w net.ipv4.ip_forward=0 +sudo sed -i 's/DEFAULT_FORWARD_POLICY="ACCEPT"/DEFAULT_FORWARD_POLICY="DROP"/g' /etc/default/ufw +sudo ufw reload | sudo ufw status +sudo nft list ruleset | sudo rm -rf /etc/nftables/port-forwarding.nft + diff --git a/pfwe b/pfwe new file mode 100644 index 0000000..4f8b6f8 --- /dev/null +++ b/pfwe @@ -0,0 +1,12 @@ +#!/bin/bash + +clear + +sudo nft -f /etc/nftables.conf +sudo sysctl -w net.ipv4.ip_forward=1 +sudo sed -i 's/DEFAULT_FORWARD_POLICY="DROP"/DEFAULT_FORWARD_POLICY="ACCEPT"/g' /etc/default/ufw +sudo nft add table ip nat +sudo nft add chain ip nat prerouting { type nat hook prerouting priority -100 \; } +sudo nft add chain ip nat postrouting { type nat hook postrouting priority 100 \; } +sudo ufw reload | sudo ufw status +sudo nft list ruleset #| sudo tee /etc/nftables/port-forwarding.nft diff --git a/pfwrm b/pfwrm new file mode 100644 index 0000000..9c3ad6a --- /dev/null +++ b/pfwrm @@ -0,0 +1,11 @@ +#!/bin/bash + +clear + +iprt=$1 +oprt=$2 +oipa=$3 + +sudo nft delete rule ip nat prerouting tcp dport $iprt dnat to $oipa:$oprt +sudo nft delete rule ip nat postrouting ip daddr $oipa masquerade +sudo nft list ruleset #| sudo tee /etc/nftables/port-forwarding.nft diff --git a/pfws b/pfws new file mode 100644 index 0000000..33f2e76 --- /dev/null +++ b/pfws @@ -0,0 +1,5 @@ +#!/bin/bash + +clear +sudo ufw reload | sudo ufw status +sudo nft list ruleset | sudo tee /etc/nftables/port-forwarding.nft