#!/bin/sh # network : ipv4.ipv4.ipv4.ipv4/mask || dns/mask # clients : PROTO ; PORT ; IFACE ; IFACE ; IFACE .... | # servers : PROTO ; PORT ; IFACE ; IFACE ; IFACE .... | # Only intranet local network="$network;$net" # [ TELEPHONY ] local clients="$clients|UDP ;sip:aol " local servers="$servers|UDP ;sip:aol " local clients="$clients|UDP ;10000:20000 " local servers="$servers|UDP ;10000:20000 " local clients="$clients|TCP ;sip:aol " local servers="$servers|TCP ;sip:aol " local clients="$clients|TCP ;10000:20000 " local servers="$servers|TCP ;10000:20000 " # ruleOut : iptables -t filter -A OUTPUT -o ""$eth"" -j ""$rulesOut"" # ruleIn : iptables -t filter -A INPUT -i ""$eth"" -j ""$rulesIn"" # dropOut : iptables -t filter -A OUTPUT -o ""$eth"" -j ""$rulesOut"" # dropIn : iptables -t filter -A INPUT -i ""$eth"" -j ""$rulesIn""