#!/bin/sh # network : ipv6:ipv6:::ipv6/mask || dns6/mask # Local is all ips registered #local network="$( ip6toolsGetIps | $cmdTr -s ' ' ';' )" local network="${ip6}/128" # clients : PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... | # servers : PROTO ; PORT ; UID/GID ; UID/GID ; UID/GID .... | # forward : PROTO ; PORT | # -- CLIENT -- local clients="$clients|TCP ;3350 ;root/root;xrdp/xrdp" #local clients="$clients|UDP ;domain ;root/root;1000/1000;0/109" # -- SERVER -- local servers="$servers|TCP ;3350 ;root/root;xrdp/xrdp" #local servers="$servers|UDP ;domain ;root/root;1000/1000" # ruleOut : iptables -t filter -A OUTPUT -o ""$eth"" -j ""$rulesOut"" # ruleIn : iptables -t filter -A INPUT -i ""$eth"" -j ""$rulesIn"" # dropOut : iptables -t filter -A OUTPUT -o ""$eth"" -j ""$rulesOut"" # dropIn : iptables -t filter -A INPUT -i ""$eth"" -j ""$rulesIn""