| 67,13 → 67,14 |
|---|
| |
| # On autorise l'accès depuis Internet (multiports) vers un équipement du LAN (qui doit être en IP fixe) |
| # Access is allowed from Internet (multiports) to a LAN equipment (which must be in static IP) |
| #ext_ports=11223:11323; int_ports=11223:11323 |
| #ext_ports=11223:11323; int_ports=12000:12100 |
| #to_ip=192.168.182.7 |
| #int_ports_dnat=`echo $int_ports|tr : -` |
| #ext_ports_dnat=`echo $ext_ports|tr : -` |
| #$IPTABLES -A PREROUTING -i $EXTIF -t nat -p tcp -d $PUBLIC_IP -m multiport --dports $ext_ports -j DNAT --to $to_ip:$int_ports_dnat |
| #$IPTABLES -A FORWARD -i $EXTIF -p tcp -d $to_ip -m multiport --dports $ext_ports -j ACCEPT |
| #$IPTABLES -A FORWARD -o $EXTIF -p tcp -s $to_ip -m multiport --sports $int_ports -j ACCEPT |
| #$IPTABLES -A FORWARD -i $EXTIF -p tcp -d $to_ip -m multiport --dports $int_ports -j ACCEPT |
| #$IPTABLES -A PREROUTING -i $INTIF -t nat -p tcp -s $to_ip -m multiport --sports $int_ports -j DNAT --to :$ext_ports_dnat |
| #$IPTABLES -A PREROUTING -i $EXTIF -t nat -p udp -d $PUBLIC_IP -m multiport --dports $ext_ports -j DNAT --to $to_ip:$int_ports_dnat |
| #$IPTABLES -A FORWARD -i $EXTIF -p udp -d $to_ip -m multiport --dports $ext_ports -j ACCEPT |
| #$IPTABLES -A FORWARD -o $EXTIF -p udp -s $to_ip -m multiport --sports $int_ports -j ACCEPT |
| #$IPTABLES -A FORWARD -i $EXTIF -p udp -d $to_ip -m multiport --dports $int_ports -j ACCEPT |
| #$IPTABLES -A PREROUTING -i $INTIF -t nat -p udp -s $to_ip -m multiport --sports $int_ports -j DNAT --to :$ext_ports_dnat |
| |