old-firewall/rules/01-output-snat

10 lines
477 B
Bash

#!/bin/bash
rules() {
iptables --table filter $flag FORWARD -i ${IF_WAN} -o ${IF_LAN} -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables --table filter $flag FORWARD -i ${IF_LAN} -o ${IF_WAN} -j ACCEPT
iptables --table nat $flag POSTROUTING -s ${NET_LAN} -o ${IF_WAN} -j SNAT --to-source ${HOST_KASHA_WAN}
if ${HAVE_WAN2}; then
iptables --table nat $flag POSTROUTING -s 10.24.0.10 -o ${IF_WAN} -j SNAT --to-source ${HOST_KASHA_WAN2}
fi
}