# Generated by iptables-save v1.4.4 on Sat Oct 20 14:59:09 2012
*nat
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
# Forward HTTP connections to Squid proxy
-A PREROUTING -p tcp -m tcp -i wlan0 -m multiport --dports 80,443 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp -i eth0 -m multiport --dports 80,443 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp -i wlan0 -m multiport --dports 80,443 -j REDIRECT --to-ports 8080
-A PREROUTING -p tcp -m tcp -i eth0 -m multiport --dports 80,443 -j REDIRECT --to-ports 8080
-A POSTROUTING -o wlan0 -j MASQUERADE
COMMIT
# Completed on Sat Oct 20 14:59:09 2012
# Generated by iptables-save v1.4.4 on Sat Oct 20 14:59:09 2012
*mangle
:PREROUTING ACCEPT [75:20533]
:INPUT ACCEPT [75:20533]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [90:31676]
:POSTROUTING ACCEPT [90:31676]
-A PREROUTING -m tos --tos 0x04 -j MARK --set-mark 0x4
-A INPUT -m tos --tos 0x04 -j MARK --set-mark 0x4
-A FORWARD -m tos --tos 0x04 -j MARK --set-mark 0x4
-A OUTPUT -m tos --tos 0x04 -j MARK --set-mark 0x4
-A POSTROUTING -m tos --tos 0x04 -j MARK --set-mark 0x4
COMMIT
# Completed on Sat Oct 20 14:59:09 2012
# Generated by iptables-save v1.4.4 on Sat Oct 20 14:59:09 2012
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i wlan0 -j ACCEPT
-A INPUT -i wlan0 -p tcp -m multiport --dports 80,443,53,953,8080 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i wlan0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A INPUT -i eth0 -j ACCEPT
-A INPUT -i eth0 -p tcp -m multiport --dports 80,443,53,953,8080 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A INPUT -p icmp --icmp-type echo-reply -j ACCEPT
-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
-A FORWARD -i wlan0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A FORWARD -o wlan0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o wlan0 -j ACCEPT
-A OUTPUT -o wlan0 -p tcp -m multiport --sports 80,443,53,953,8080 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -o wlan0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -m multiport --sports 80,443,53,953,8080 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
-A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
COMMIT
# Completed on Sat Oct 20 14:59:09 2012
Tidak ada komentar:
Posting Komentar