Facebook
From Subtle Motmot, 3 Years ago, written in Plain Text.
Embed
Download Paste or View Raw
Hits: 542
  1. units=63
  2.  
  3. IP4='IPV4アドレス'
  4. PSID='MAP-E_PSID'
  5. LANDEV='LANインターフェイス'
  6. WAN6DEV='WANインターフェイス'
  7. TUNDEV='MAP-Eインターフェイス'
  8.  
  9. iptables -t nat -F PREROUTING
  10. iptables -t nat -F OUTPOUT
  11. iptables -t nat -F POSTROUTING
  12.  
  13. rule=1
  14. while [ $rule -le $units  ] ; do
  15.   mark=`expr $rule + 16`
  16.   pn=`expr $rule - 1`
  17.   portl=`expr $rule \* 1024 + $PSID \* 16`
  18.   portr=`expr $portl + 15`
  19.  
  20.   iptables -t nat -A PREROUTING -p tcp -m statistic --mode nth --every $units --packet $pn -j MARK --set-mark $mark
  21.   iptables -t nat -A OUTPUT -p tcp -m statistic --mode nth --every $units --packet $pn -j MARK --set-mark $mark
  22.  
  23.   iptables -t nat -A POSTROUTING -p icmp -m connlimit --connlimit-daddr --connlimit-upto 16 --connlimit-mask 0 -o $TUNDEV -j SNAT --to $IP4:$portl-$portr
  24.   iptables -t nat -A POSTROUTING -p tcp -o $TUNDEV -m mark --mark $mark -j SNAT --to $IP4:$portl-$portr
  25.   iptables -t nat -A POSTROUTING -p udp -m connlimit --connlimit-daddr --connlimit-upto 16 --connlimit-mask 0 -o $TUNDEV -j SNAT --to $IP4:$portl-$portr
  26.  
  27.   rule=`expr $rule + 1`
  28. done
  29.  
  30. sleep 5
  31.  
  32. iptables -t nat -A PREROUTING -i $LANDEV -j zone_lan_prerouting
  33. iptables -t nat -A PREROUTING -i $WAN6DEV -j zone_wan_prerouting
  34. iptables -t nat -A PREROUTING -i $TUNDEV -j zone_wan_prerouting
  35.  
  36. iptables -t nat -A POSTROUTING -o $LANDEV -j zone_lan_postrouting
  37. iptables -t nat -A POSTROUTING -o $WAN6DEV -j zone_wan_postrouting
  38. iptables -t nat -A POSTROUTING -o $TUNDEV -j zone_wan_postrouting
  39.