30 lines
951 B
Bash
30 lines
951 B
Bash
#!/bin/bash
|
|
|
|
clear
|
|
|
|
iprt=$1
|
|
oprt=$2
|
|
oipa=$3
|
|
|
|
## IPTABLES
|
|
#echo 1 > /proc/sys/net/ipv4/ip_forward
|
|
#iptables -F
|
|
#iptables -t nat -F
|
|
#iptables -t nat -A PREROUTING -p tcp --dport $iprt -j DNAT --to-destination $oipa:$oprt
|
|
#sudo iptables -t nat -A POSTROUTING -j MASQUERADE
|
|
#sudo iptables -t nat -L -n -v
|
|
#sudo iptables-persistent
|
|
|
|
## NFTABLES
|
|
#sudo nft -f /etc/nftables.conf
|
|
#sudo sysctl -w net.ipv4.ip_forward=1
|
|
#sudo sed -i 's/DEFAULT_FORWARD_POLICY="DROP"/DEFAULT_FORWARD_POLICY="ACCEPT"/g' /etc/default/ufw
|
|
#sudo ufw reload
|
|
#sudo nft add table ip nat
|
|
#sudo nft add chain ip nat prerouting { type nat hook prerouting priority -100 \; }
|
|
#sudo nft add chain ip nat postrouting { type nat hook postrouting priority 100 \; }
|
|
sudo nft add rule ip nat prerouting tcp dport $iprt dnat to $oipa:$oprt
|
|
sudo nft add rule ip nat postrouting ip daddr $oipa masquerade
|
|
#sudo mkdir /etc/nftables/
|
|
sudo nft list ruleset #| sudo tee /etc/nftables/port-forwarding.nft
|