#!/bin/sh # network : ipv4.ipv4.ipv4.ipv4/mask || dns/mask # clients : PROTO ; PORT ; IFACE ; IFACE ; IFACE .... | # servers : PROTO ; PORT ; IFACE ; IFACE ; IFACE .... | # Only intranet #local network="$network;$net;224.0.0.0/8" # [ MDNS ] #local clients="$clients|UDP ;5353 " #local servers="$servers|UDP ;5353 " # ruleOut : iptables -t filter -A OUTPUT -o ""$eth"" -j ""$rulesOut"" # ruleIn : iptables -t filter -A INPUT -i ""$eth"" -j ""$rulesIn"" # dropOut : iptables -t filter -A OUTPUT -o ""$eth"" -j ""$rulesOut"" # dropIn : iptables -t filter -A INPUT -i ""$eth"" -j ""$rulesIn"" # MDNS local ruleFwd="$ruleFwd;mdns | -s "$net" -d 224.0.0.0/8 -p udp --sport 5353 --dport 5353" # IGMP local ruleFwd="$ruleFwd;net_igmp | -s "$net" -d 224.0.0.0/8 -p igmp" # IGMP UPNP local ruleFwd="$ruleFwd;upnp_igmp | -s "$net" -d 239.255.255.250/32 -p igmp" # LLMNR # SRC=10.85.88.188 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=8010 PROTO=UDP SPT=57442 DPT=5355 LEN=41 MARK=0x13 local ruleFwd="$ruleFwd;net_igmp | -s "$net" -d 224.0.0.252/32 -p udp --dport 5355"