>>> 此贴的回复 >> 用Linu#!/bin/sh echo "Enable IP Forwarding..." echo 1 > /proc/sys/net/ipv4/ip_forward echo "Starting iptables rules..." /sbin/modprobe iptable_filter /sbin/modprobe ip_tables /sbin/modprobe iptable_nat /sbin/modprobe ip_nat_ftp /sbin/modprobe ip_conntrack /sbin/modprobe ip_conntrack_ftp echo 3800 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established #默认规则 iptables -F INPUT iptables -F OUTPUT iptables -F FORWARD iptables -F -t nat iptables -P INPUT DROP iptables -P OUTPUT ACCEPT iptables -P FORWARD DROP #允许局域网访问 iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -i eth1 -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT #可通过NAT上网的IP iptables -A FORWARD -s 192.168.0.2 -m mac --mac-source 00:11:25:8F:8F:8F -j ACCEPT iptables -A FORWARD -s 192.168.0.3 -m mac --mac-source 00:11:25:8F:68:43 -j ACCEPT iptables -A FORWARD -s 192.168.0.5 -m mac --mac-source 00:11:25:8F:68:43 -j ACCEPT iptables -A FORWARD -s 192.168.0.102 -m mac --mac-source 00:0F:3D:82:F6:41 -j ACCEPT iptables -A FORWARD -s 192.168.0.116 -m mac --mac-source 00:40:05:42:E3:99 -j ACCEPT iptables -A FORWARD -s 192.168.0.117 -m mac --mac-source 00:0F:3D:82:F6:4D -j ACCEPT iptables -A FORWARD -s 192.168.0.247 -m mac --mac-source 00:09:6B:FA:62:30 -j ACCEPT iptables -A FORWARD -s 192.168.0.248 -m mac --mac-source 00:01:03:87:25:3F -j ACCEPT iptables -A FORWARD -s 192.168.0.249 -m mac --mac-source 00:0D:60:FC:82:0A -j ACCEPT iptables -A FORWARD -s 192.168.0.250 -m mac --mac-source 00:11:25:2C:AA:C2 -j ACCEPT iptables -A FORWARD -s 192.168.0.251 -m mac --mac-source 00:11:25:18:BD:6D -j ACCEPT iptables -A FORWARD -s 192.168.0.252 -m mac --mac-source 00:11:95:E2:5F:B2 -j ACCEPT iptables -A FORWARD -s 192.168.0.253 -m mac --mac-source 00:0F:3D:81:53:96 -j ACCEPT iptables -A FORWARD -s 192.168.0.254 -m mac --mac-source 00:0E:A6:C4:BB:12 -j ACCEPT iptables -A FORWARD -s 192.168.0.230 -j ACCEPT iptables -A FORWARD -s 192.168.0.231 -j ACCEPT iptables -A FORWARD -s 192.168.0.232 -j ACCEPT iptables -A FORWARD -s 192.168.0.233 -j ACCEPT iptables -A FORWARD -s 192.168.0.234 -j ACCEPT iptables -A FORWARD -s 192.168.0.235 -j ACCEPT iptables -A FORWARD -s 192.168.0.0/24 -d 202.96.134.133 -p udp --dport 53 -j ACCEPT #QQ iptables -A FORWARD -d 218.17.209.0/24 -j DROP iptables -A FORWARD -d 218.18.95.0/24 -j DROP iptables -A FORWARD -d 219.133.38.0/24 -j DROP iptables -A FORWARD -d 219.133.40.0/24 -j DROP iptables -A FORWARD -d 219.133.49.0/24 -j DROP iptables -A FORWARD -d 219.133.48.0/24 -j DROP iptables -A FORWARD -d 219.133.60.0/24 -j DROP #icq iptables -A FORWARD -d 205.188.153.0/24 -j DROP iptables -A FORWARD -d 205.188.179.0/24 -j DROP iptables -A FORWARD -d 205.188.248.0/24 -j DROP iptables -A FORWARD -d 205.188.250.0/24 -j DROP iptables -A FORWARD -d 64.12.163.0/24 -j DROP iptables -A FORWARD -d 64.12.164.0/24 -j DROP iptables -A FORWARD -d 64.12.161.0/24 -j DROP #nick iptables -A FORWARD -s 192.168.0.101 -m mac --mac-source 00:0A:EB:97:76:AB -m multiport -p tcp --dport 80,25,110,20,21 -j ACCEPT #magic iptables -A FORWARD -s 192.168.0.107 -m mac --mac-source 00:0A:EB:92:F6:21 -m multiport -p tcp --dport 80,25,110 -j ACCEPT #wu iptables -A FORWARD -s 192.168.0.154 -m mac --mac-source 00:0A:EB:98:1D:13 -m multiport -p tcp --dport 80,25,110,20,21 -j ACCEPT #lib iptables -A FORWARD -s 192.168.0.113 -m mac --mac-source 00:0F:3D:81:88:B8 -m multiport -p tcp --dport 80,25,110 -j ACCEPT #shunxq iptables -A FORWARD -s 192.168.0.121 -m mac --mac-source 00:0F:3D:81:885 -m multiport -p tcp --dport 80,25,110 -j ACCEPT #nancy iptables -A FORWARD -s 192.168.0.104 -m mac --mac-source 00:E0:4D:A1:B7:C7 -m multiport -p tcp --dport 80,25,110,20,21 -j ACCEPT #wangsy iptables -A FORWARD -s 192.168.0.124 -m mac --mac-source 00:0F:3D:80:3F:17 -m multiport -p tcp --dport 80,25,110 -j ACCEPT #lilf iptables -A FORWARD -s 192.168.0.119 -m mac --mac-source 00:0A:EB:98:1D:0D -m multiport -p tcp --dport 80,25,110 -j ACCEPT #msh iptables -A FORWARD -s 192.168.0.125 -m mac --mac-source 00:0F:3D:81:53:5E -m multiport -p tcp --dport 80,7001,7002 -j ACCEPT #lwh iptables -A FORWARD -s 192.168.0.122 -m mac --mac-source 00:0F:3D:81:53:74 -m multiport -p tcp --dport 80,25,110 -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE 看看这个脚本,差不多可以实际你要的功能.当然用qq代理的话没办法.
[ 关闭窗口 ]