#!/bin/sh
# network	: ipv4.ipv4.ipv4.ipv4/mask || dns/mask
# clients	: PROTO ; PORT ; IFACE ; IFACE ; IFACE .... |
# servers	: PROTO ; PORT ; IFACE ; IFACE ; IFACE .... |

# Only intranet
#local network="$network;$net;224.0.0.0/8"

# [ MDNS ]
#local clients="$clients|UDP	;5353	"
#local servers="$servers|UDP	;5353	"

# ruleOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# ruleIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""
# dropOut	: iptables -t filter -A OUTPUT   -o ""$eth"" -j ""$rulesOut""
# dropIn	: iptables -t filter -A INPUT    -i ""$eth"" -j ""$rulesIn""
# MDNS
# SRC=10.90.6.134 DST=239.255.255.250 LEN=759 TOS=0x00 PREC=0x00 TTL=1 ID=38790 PROTO=UDP SPT=63522 DPT=3702 LEN=739 MARK=0x16
local ruleFwd="$ruleFwd;ws_discovery	| -s "$net"	-d 239.255.255.250/32	-p udp --dport 3702"
# SRC=10.90.6.151 DST=10.90.6.134 LEN=1498 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=3702 DPT=57733 LEN=1478 MARK=0x16
local ruleFwd="$ruleFwd;ws_discovery	| -s "$net"	-d "$net"	-p udp --sport 3702"

# LLMNR
# SRC=10.85.88.188 DST=224.0.0.252 LEN=61 TOS=0x00 PREC=0x00 TTL=1 ID=8010 PROTO=UDP SPT=57442 DPT=5355 LEN=41 MARK=0x13
#local ruleFwd="$ruleFwd;net_igmp	| -s "$net"	-d 224.0.0.252/32		-p udp --dport 5355"