#!/usr/sh echo "Initiating firewall..." echo "Flushing chains..." /sbin/ipchains -F input /sbin/ipchains -F output /sbin/ipchains -F forward echo "Setting default policies..." /sbin/ipchains -P input REJECT /sbin/ipchains -P output REJECT /sbin/ipchains -P forward REJECT #let internal hosts get to the internet /sbin/ipchains -A forward -s 192.168.10.0/24 -d 0.0.0.0/0 -j MASQ #let internal hosts connect to the firewall on port 22 (ssh) /sbin/ipchains -A input -s 192.168.10.0/24 -p tcp -d 192.168.10.2 22 -j ACCEPT #forward connections on port 80 (www) to worf /usr/sbin/ipmasqadm portfw -a -P tcp -L 10.0.0.1 80 -R 192.168.10.6 80 #forward connections on port 22 (ssh) to worf /usr/sbin/ipmasqadm portfw -a -P tcp -L 10.0.0.1 22 -R 192.168.10.6 22 #forward connections on port 21 (ftp control) to worf /usr/sbin/ipmasqadm portfw -a -P tcp -L 10.0.0.1 21 -R 192.168.10.6 21 #forward connections on port 20 (ftp data) to worf /usr/sbin/ipmasqadm portfw -a -P tcp -L 10.0.0.1 20 -R 192.168.10.6 20 echo "Setting user customizations..." echo "Enabling IPMasq..." echo "1" > /proc/sys/net/ipv4/ip_forward echo "1" > /proc/sys/net/ipv4/ip_dynaddr echo "Loading modules..." /sbin/modprobe ip_masq_raudio /sbin/modprobe ip_masq_ftp /sbin/modprobe ip_masq_irc