iptables 样式

 

#!/bin/bash
/sbin/iptables -F
/sbin/iptables -t nat -F
/sbin/iptables -t mangle -F
/sbin/iptables -X
/sbin/iptables -t nat -X
/sbin/iptables -t mangle -X
/sbin/iptables -P INPUT DROP
/sbin/iptables -P OUTPUT DROP
/sbin/iptables -P FORWARD DROP
echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -s 172.16.5.85 -m mac --mac-source 00:02:3F:EB:E2:63 -j ACCEPT
/sbin/iptables -A INPUT -s 172.16.99.85 -m mac --mac-source 00:16:3e:44:b8:59 -j ACCEPT
/sbin/iptables -A INPUT -s 172.16.100.100 -m mac --mac-source 00:16:3e:44:b8:59 -j ACCEPT
/sbin/iptables -A INPUT -s 172.16.100.140 -m mac --mac-source 00:16:3E:1C:2A:A4 -j ACCEPT
/sbin/iptables -A FORWARD -s 172.16.100.140 -m mac --mac-source 00:16:3E:1C:2A:A4 -j ACCEPT
/sbin/iptables -A FORWARD -s 172.16.5.85 -m mac --mac-source 00:02:3F:EB:E2:63 -j ACCEPT
/sbin/iptables -A FORWARD -s 172.16.99.85 -m mac --mac-source 00:16:3e:44:b8:59 -j ACCEPT
/sbin/iptables -t nat -A POSTROUTING -s 172.16.0.0/16 -j MASQUERADE