Hack Security Pro.pdf - Index of

To share the Internet connection with other computers of your network:
iptables -F FORWARD
iptables -A FORWARD -j ACCEPT
iptables -A POSTROUTING -t nat -o ppp0 -j MASQUERADE
Finally, to redirect all entering connections to port destination 80, up to machine 192.168.1.10 on its
port 8080 (port forwarding):
iptables -t nat -A PREROUTING -d votre_addresse_ip_internet -p tcp --dport 80 -j DNAT -to-destination
192.168.1.10:8080
Here is a summary of the script you could use if applying all of these rules:
#/bin/sh
#let's find which is our Internet address:
IP=`ifconfig ppp0 | grep inet | awk {'print $2'} | awk -F ":" {'print $2}`
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
iptables -A INPUT -s 192.168.1.0/24 -j ACCEPT
iptables -A OUTPUT -d 192.168.1.0/24 -j ACCEPT
iptables -A FORWARD -s 192.168.1.0/24 -j ACCEPT
iptables -A INPUT -i ppp0 --protocol udp --source-port 53 -j ACCEPT
iptables -A OUTPUT -o ppp0 --protocol udp --destination-port 53 -j ACCEPT
iptables -A INPUT -i ppp0 --protocol tcp --source-port 53 -j ACCEPT
iptables -A OUTPUT -o ppp0 --protocol tcp --destination-port 53 -j ACCEPT
iptables -A INPUT -i ppp0 --protocol tcp --source-port 80 -m state --state ESTABLISHED
iptables -A OUTPUT -o ppp0 --protocol tcp --destination-port 80 -m state --state
NEW,ESTABLISHED
iptables -t nat -A PREROUTING -d $IP -p tcp --dport 80 -j DNAT --to-destination
192.168.1.10:8080
The Hackademy DMP -204/209- SYSDREAM