info24hs

Este script libera as portas para conexão VPN em máquinas Windows da rede interna.


Modifique as variáveis(IP, ETH) abaixo conforme sua configuração.

############################ vpn.sh #############################

#!/bin/bash -x

modprobe ip_gre

### Variáveis ###
IPTABLES=/sbin/iptables
IP="ip_do_host_com_VPN"
ETH="ethernet_externa"

# Ativando o protocolo GRE 47
# Esta regra deve aparecer antes de qualquer bloqueio na cadeia INPUT.
$IPTABLES -I INPUT -p 47 -j ACCEPT
$IPTABLES -I FORWARD -p 47 -d $IP -j ACCEPT
$IPTABLES -t nat -I PREROUTING -p 47 -j DNAT --to-dest $IP

# Ativando o protocolo IPSec 50
# Esta regra deve aparecer antes de qualquer bloqueio na cadeia INPUT.
$IPTABLES -I INPUT -p 50 -j ACCEPT
$IPTABLES -I FORWARD -p 50 -d $IP -j ACCEPT
$IPTABLES -t nat -I PREROUTING -p 50 -j DNAT --to-dest $IP

# Portas VPN 500,1701,4500 (L2TP/IPSec)
$IPTABLES -I FORWARD -p udp -m multiport --dports 500,1701,4500 -j ACCEPT
$IPTABLES -t nat -I PREROUTING -i $ETH -p udp -m multiport --dports 500,1701,4500 -j DNAT --to-dest $IP
$IPTABLES -t mangle -A PREROUTING -p udp -s $IP -m multiport --sports 500,1701,4500 -j

# Porta VPN 1723 (PPTP)
$IPTABLES -I FORWARD -p tcp --dport 1723 -j ACCEPT
$IPTABLES -t nat -I PREROUTING -i $ETH -p tcp --dport 1723 -j DNAT --to-dest $IP
$IPTABLES -t mangle -A PREROUTING -p tcp -s $IP --sport 1723 -j

############################ vpn.sh #############################