mirror of
https://github.com/perlbot/perlbuut
synced 2025-06-07 17:25:41 -04:00
37 lines
1.6 KiB
Bash
Executable file
37 lines
1.6 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
set -e
|
|
set -u
|
|
|
|
ip netns delete perlbot >& /dev/null && echo "Removed old perlbot namespace" || echo "No perlbot namespace yet"
|
|
ip link delete perlbot-public type veth >& /dev/null && echo "Removed old perlbot veth device" || echo "No perlbot veth device yet"
|
|
|
|
ip netns add perlbot
|
|
ip link add perlbot-private type veth peer name perlbot-public
|
|
ip link set perlbot-private netns perlbot
|
|
|
|
sleep 1
|
|
|
|
ip addr add 192.168.196.1/24 dev perlbot-public
|
|
ip link set perlbot-public up
|
|
|
|
ip netns exec perlbot ip link set dev lo up
|
|
ip netns exec perlbot ip addr add 192.168.196.2/24 dev perlbot-private
|
|
ip netns exec perlbot ip link set perlbot-private up
|
|
ip netns exec perlbot ip route add default via 192.168.196.1
|
|
|
|
iptables -N PERLBOT-FORWARD || iptables -F PERLBOT-FORWARD
|
|
iptables -t nat -N PERLBOT-POST || iptables -t nat -F PERLBOT-POST
|
|
|
|
iptables -A PERLBOT-FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
iptables -A PERLBOT-FORWARD -i perlbot-public -d 192.168.32.1 -j ACCEPT
|
|
iptables -A PERLBOT-FORWARD -i perlbot-public -d 192.168.196.0/24 -j ACCEPT
|
|
iptables -A PERLBOT-FORWARD -i perlbot-public -d 192.168.0.0/16 -j REJECT
|
|
iptables -A PERLBOT-FORWARD -i perlbot-public -d 10.0.0.0/8 -j REJECT
|
|
#iptables -t nat -A PERLBOT-POST -s 192.168.196.0/24 -d 192.168.196.0/24 -j ACCEPT
|
|
#iptables -t nat -A PERLBOT-POST -s 192.168.196.0/24 -o perlbot-public -j MASQUERADE
|
|
|
|
iptables -t filter -D FORWARD -j PERLBOT-FORWARD || echo "No filter chain loaded"
|
|
#iptables -t nat -D POSTROUTING -j PERLBOT-POST || echo "No nat chain loaded"
|
|
#iptables -t nat -A POSTROUTING -j PERLBOT-POST
|
|
iptables -t filter -I FORWARD 1 -j PERLBOT-FORWARD
|