2.3 Теперь напишем скрипт чтобы он запускался при каждой загрузке системы и сохра-ним его в /etc/init.D/iptables.

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

#!/bin/bash

IPTAB="/sbin/iptables"

RUN="/bin/bash"

PATH="/sbin:/bin:/usr/sbin:/usr/bin"

NAME="$0"

N="/etc/init.d/$NAME"

if [ ! -f /etc/rc.router ]; then

   echo "/etc/rc.router does not exist"

   exit 0

fi

case "$1" in

   start|restart)

   echo -n "Starting up iptables...."

   $RUN /etc/rc.router

   echo "DONE."

   ;;

   stop)

   $IPTAB -t filter -F

   $IPTAB -t filter -X

   $IPTAB -t nat -F

  $IPTAB -t nat -X

   $IPTAB -t mangle -F

   $IPTAB -t mangle -X

   echo "DONE."

   exit 0;

   ;;

*)

   echo "Usage: $N {start|restart|stop}">&2

   exit 1

   ;;

esac

exit 0

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

#

# this is the configuration file for rinetd, the internet redirection server

#

# you may specify global allow and deny rules here

# only ip addresses are matched, hostnames cannot be specified here

# the wildcards you may use are * and ?

#

# allow 192.168.2.*

# deny 192.168.2.1?

#

# forwarding rules come here

#

# you may specify allow and deny rules after a specific forwarding rule

# to apply to only that forwarding rule

#

# bindadress    bindport connectaddress connectport

# для веб сервера

 188.16.38.55 80       192.168.0.101   80

# для правильной работы ФТП

 188.16.38.55    1024    192.168.0.102   1024

 188.16.38.55     21       192.168.0.102   21

 188.16.38.55     20       192.168.0.102   20

# для игрового сервера

 188.16.38.55    7777     192.168.0.40   7777

 188.16.38.55    2106    192.168.0.40 2106

# для ДНС

 188.16.38.55    53       192.168.0.103   53

# logging information

# logfile /var/log/rinetd.log

# uncomment the following line if you want web-server style logfile format

# logcommon