/var/lock/subsys/local
#!/bin/sh
/sbin/modprobe ip_tables
/sbin/modprobe ip_nat_ftp
/sbin/modprobe ip_conntrack_ftp
/sbin/iptables -F
/sbin/iptables -F -t nat
/sbin/iptables -X
/sbin/iptables -Z
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -P OUTPUT ACCEPT
echo "1"> /proc/sys/net/ipv4/ip_forward
#iptables -t nat -A PREROUTING -p udp -d 192.168.0.254 --dport 53 -j DNAT --to 61.134.1.4:53
/sbin/iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/255.255.255.0 -j SNAT --to xxx.xxx.xxx.xxx
/sbin/iptables -A FORWARD -s 0/0 -d 0/0 -j ACCEPT
###attack###
echo 0 > /proc/sys/net/ipv4/icmp_echo_ignore_all
iptables -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT
iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT
iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT
############

###syn-Ddos###
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
##########

###BT###
#iptables -I FORWARD -p tcp --dport 6881:6889 -j DROP
#iptables -A INPUT -p tcp --dport 6881:6889 -j DROP
#iptables -A OUTPUT -p tcp --dport 6881:6889 -j DROP
########

###thunder###
#iptables -I FORWARD -p tcp --dport 21212:21300 -j DROP
#iptables -A INPUT -p tcp --dport 21212:21300 -j DROP
#iptables -A OUTPUT -p tcp --dport 21212:21300 -j DROP
##########

#iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
iptables -I INPUT -p tcp --dport 135 -j REJECT
iptables -I INPUT -p udp --dport 135 -j REJECT
iptables -I INPUT -p tcp --dport 136 -j REJECT
iptables -I INPUT -p udp --dport 136 -j REJECT
iptables -I INPUT -p tcp --dport 137 -j REJECT
iptables -I INPUT -p udp --dport 137 -j REJECT
iptables -I INPUT -p tcp --dport 138 -j REJECT
iptables -I INPUT -p udp --dport 138 -j REJECT
iptables -I INPUT -p tcp --dport 139 -j REJECT
iptables -I INPUT -p udp --dport 139 -j REJECT
iptables -I INPUT -p tcp --dport 445 -j REJECT
iptables -I INPUT -p udp --dport 445 -j REJECT
iptables -I INPUT -p tcp --dport 1025 -j REJECT
iptables -I INPUT -p udp --dport 1025 -j REJECT
iptables -I INPUT -p tcp --dport 5554 -j REJECT
iptables -I INPUT -p tcp --dport 1434 -j REJECT
iptables -I INPUT -p udp --dport 1434 -j REJECT
iptables -I INPUT -p tcp --dport 2500 -j REJECT
iptables -I INPUT -p tcp --dport 5800 -j REJECT
iptables -I INPUT -p tcp --dport 5900 -j REJECT
iptables -I INPUT -p tcp --dport 6346 -j REJECT
iptables -I INPUT -p tcp --dport 6667 -j REJECT
iptables -I INPUT -p tcp --dport 9393 -j REJECT
iptables -I INPUT -p tcp --dport 593 -j REJECT
iptables -I INPUT -p udp --dport 593 -j REJECT
iptables -I INPUT -p udp --dport 69 -j REJECT
#FORWARD
iptables -I FORWARD -p tcp --dport 135 -j REJECT
iptables -I FORWARD -p udp --dport 135 -j REJECT
iptables -I FORWARD -p tcp --dport 136 -j REJECT
iptables -I FORWARD -p udp --dport 136 -j REJECT
iptables -I FORWARD -p tcp --dport 137 -j REJECT
iptables -I FORWARD -p udp --dport 137 -j REJECT
iptables -I FORWARD -p tcp --dport 138 -j REJECT
iptables -I FORWARD -p udp --dport 138 -j REJECT
iptables -I FORWARD -p tcp --dport 139 -j REJECT
iptables -I FORWARD -p udp --dport 139 -j REJECT
iptables -I FORWARD -p tcp --dport 445 -j REJECT
iptables -I FORWARD -p udp --dport 445 -j REJECT .
iptables -I FORWARD -p tcp --dport 1025 -j REJECT
iptables -I FORWARD -p udp --dport 1025 -j REJECT
iptables -I FORWARD -p tcp --dport 5554 -j REJECT
iptables -I FORWARD -p tcp --dport 1434 -j REJECT
iptables -I FORWARD -p udp --dport 1434 -j REJECT
iptables -I FORWARD -p tcp --dport 2500 -j REJECT
iptables -I FORWARD -p tcp --dport 5800 -j REJECT
iptables -I FORWARD -p tcp --dport 5900 -j REJECT
iptables -I FORWARD -p tcp --dport 6346 -j REJECT
iptables -I FORWARD -p tcp --dport 6667 -j REJECT
iptables -I FORWARD -p tcp --dport 9393 -j REJECT
iptables -I FORWARD -p tcp --dport 593 -j REJECT
iptables -I FORWARD -p udp --dport 593 -j REJECT
iptables -I FORWARD -p udp --dport 69 -j REJECT

#####ftp######
/sbin/iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 88 -j DNAT --to 192.168.0.8:21
/sbin/iptables -t nat -A POSTROUTING -d 192.168.0.8 -p tcp --dport 21 -o eth1 -j SNAT --to 192.168.0.1

#####mstcs#####
/sbin/iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 6666 -j DNAT --to 192.168.0.3:3389 .
/sbin/iptables -t nat -A POSTROUTING -d 192.168.0.3 -p tcp --dport 6666 -o eth1 -j SNAT --to 192.168.0.1

######cs#######
/sbin/iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 27015 -j DNAT --to 192.168.0.3:27015
/sbin/iptables -t nat -A POSTROUTING -d 192.168.0.3 -p tcp --dport 27015 -o eth1 -j SNAT --to 192.168.0.1

/sbin/iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 27016 -j DNAT --to 192.168.0.3:27016
/sbin/iptables -t nat -A POSTROUTING -d 192.168.0.3 -p tcp --dport 27016 -o eth1 -j SNAT --to 192.168.0.1 .

#####Main page#####
/sbin/iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 8080 -j DNAT --to 192.168.0.7:80
/sbin/iptables -t nat -A POSTROUTING -d 192.168.0.7 -p tcp --dport 80 -o eth1 -j SNAT --to 192.168.0.1