Difference between revisions of "Warcraft DOTA Forward Port Rules"

From MS Computech
Jump to: navigation, search
Line 1: Line 1:
−
ตัวอย่าง 25 PC Forward Rules by IPTables By Phat@mscompute.com
+
Warcraft DOTA Portforward Rules
 +
<pre>
 +
#!/bin/bash
 +
#30 PC Forward
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6101 -j DNAT --to-destination 192.168.1.101:6101
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6101 -j DNAT --to-destination 192.168.1.101:6101
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6101 -j DNAT --to-destination 192.168.1.101:6101
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.101/32 -p tcp -m tcp --dport 6101 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.101/32 -o eth2 -p tcp -m tcp --dport 6101 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6102 -j DNAT --to-destination 192.168.1.102:6102
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6102 -j DNAT --to-destination 192.168.1.102:6102
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6102 -j DNAT --to-destination 192.168.1.102:6102
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.102/32 -p tcp -m tcp --dport 6102 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.102/32 -o eth2 -p tcp -m tcp --dport 6102 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6103 -j DNAT --to-destination 192.168.1.103:6103
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6103 -j DNAT --to-destination 192.168.1.103:6103
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6103 -j DNAT --to-destination 192.168.1.103:6103
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.103/32 -p tcp -m tcp --dport 6103 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.103/32 -o eth2 -p tcp -m tcp --dport 6103 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6104 -j DNAT --to-destination 192.168.1.104:6104
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6104 -j DNAT --to-destination 192.168.1.104:6104
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6104 -j DNAT --to-destination 192.168.1.104:6104
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.104/32 -p tcp -m tcp --dport 6104 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.104/32 -o eth2 -p tcp -m tcp --dport 6104 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6105 -j DNAT --to-destination 192.168.1.105:6105
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6105 -j DNAT --to-destination 192.168.1.105:6105
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6105 -j DNAT --to-destination 192.168.1.105:6105
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.105/32 -p tcp -m tcp --dport 6105 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.105/32 -o eth2 -p tcp -m tcp --dport 6105 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6106 -j DNAT --to-destination 192.168.1.106:6106
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6106 -j DNAT --to-destination 192.168.1.106:6106
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6106 -j DNAT --to-destination 192.168.1.106:6106
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.106/32 -p tcp -m tcp --dport 6106 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.106/32 -o eth2 -p tcp -m tcp --dport 6106 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6107 -j DNAT --to-destination 192.168.1.107:6107
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6107 -j DNAT --to-destination 192.168.1.107:6107
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6107 -j DNAT --to-destination 192.168.1.107:6107
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.107/32 -p tcp -m tcp --dport 6107 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.107/32 -o eth2 -p tcp -m tcp --dport 6107 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6108 -j DNAT --to-destination 192.168.1.108:6108
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6108 -j DNAT --to-destination 192.168.1.108:6108
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6108 -j DNAT --to-destination 192.168.1.108:6108
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.108/32 -p tcp -m tcp --dport 6108 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.108/32 -o eth2 -p tcp -m tcp --dport 6108 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6109 -j DNAT --to-destination 192.168.1.109:6109
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6109 -j DNAT --to-destination 192.168.1.109:6109
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6109 -j DNAT --to-destination 192.168.1.109:6109
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.109/32 -p tcp -m tcp --dport 6109 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.109/32 -o eth2 -p tcp -m tcp --dport 6109 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6110 -j DNAT --to-destination 192.168.1.110:6110
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6110 -j DNAT --to-destination 192.168.1.110:6110
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6110 -j DNAT --to-destination 192.168.1.110:6110
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.110/32 -p tcp -m tcp --dport 6110 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.110/32 -o eth2 -p tcp -m tcp --dport 6110 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6111 -j DNAT --to-destination 192.168.1.111:6111
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6111 -j DNAT --to-destination 192.168.1.111:6111
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6111 -j DNAT --to-destination 192.168.1.111:6111
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.111/32 -p tcp -m tcp --dport 6111 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.111/32 -o eth2 -p tcp -m tcp --dport 6111 -j ACCEPT
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6112 -j DNAT --to-destination 192.168.1.112:6112
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6112 -j DNAT --to-destination 192.168.1.112:6112
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6112 -j DNAT --to-destination 192.168.1.112:6112
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.112/32 -p tcp -m tcp --dport 6112 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.112/32 -o eth2 -p tcp -m tcp --dport 6112 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6113 -j DNAT --to-destination 192.168.1.113:6113
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6113 -j DNAT --to-destination 192.168.1.113:6113
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6113 -j DNAT --to-destination 192.168.1.113:6113
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.113/32 -p tcp -m tcp --dport 6113 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.113/32 -o eth2 -p tcp -m tcp --dport 6113 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6114 -j DNAT --to-destination 192.168.1.114:6114
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6114 -j DNAT --to-destination 192.168.1.114:6114
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6114 -j DNAT --to-destination 192.168.1.114:6114
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.114/32 -p tcp -m tcp --dport 6114 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.114/32 -o eth2 -p tcp -m tcp --dport 6114 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6115 -j DNAT --to-destination 192.168.1.115:6115
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6115 -j DNAT --to-destination 192.168.1.115:6115
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6115 -j DNAT --to-destination 192.168.1.115:6115
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.115/32 -p tcp -m tcp --dport 6115 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.115/32 -o eth2 -p tcp -m tcp --dport 6115 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6116 -j DNAT --to-destination 192.168.1.116:6116
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6116 -j DNAT --to-destination 192.168.1.116:6116
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6116 -j DNAT --to-destination 192.168.1.116:6116
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.116/32 -p tcp -m tcp --dport 6116 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.116/32 -o eth2 -p tcp -m tcp --dport 6116 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6117 -j DNAT --to-destination 192.168.1.117:6117
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6117 -j DNAT --to-destination 192.168.1.117:6117
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6117 -j DNAT --to-destination 192.168.1.117:6117
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.117/32 -p tcp -m tcp --dport 6117 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.117/32 -o eth2 -p tcp -m tcp --dport 6117 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6118 -j DNAT --to-destination 192.168.1.118:6118
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6118 -j DNAT --to-destination 192.168.1.118:6118
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6118 -j DNAT --to-destination 192.168.1.118:6118
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.118/32 -p tcp -m tcp --dport 6118 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.118/32 -o eth2 -p tcp -m tcp --dport 6118 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6119 -j DNAT --to-destination 192.168.1.119:6119
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6119 -j DNAT --to-destination 192.168.1.119:6119
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6119 -j DNAT --to-destination 192.168.1.119:6119
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.117/32 -p tcp -m tcp --dport 6119 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.119/32 -o eth2 -p tcp -m tcp --dport 6119 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6120 -j DNAT --to-destination 192.168.1.120:6120
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6120 -j DNAT --to-destination 192.168.1.120:6120
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6120 -j DNAT --to-destination 192.168.1.120:6120
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.120/32 -p tcp -m tcp --dport 6120 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.120/32 -o eth2 -p tcp -m tcp --dport 6120 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6121 -j DNAT --to-destination 192.168.1.121:6121
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6121 -j DNAT --to-destination 192.168.1.121:6121
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6121 -j DNAT --to-destination 192.168.1.121:6121
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.121/32 -p tcp -m tcp --dport 6121 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.121/32 -o eth2 -p tcp -m tcp --dport 6121 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6122 -j DNAT --to-destination 192.168.1.122:6122
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6122 -j DNAT --to-destination 192.168.1.122:6122
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6122 -j DNAT --to-destination 192.168.1.122:6122
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.122/32 -p tcp -m tcp --dport 6122 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.122/32 -o eth2 -p tcp -m tcp --dport 6122 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6123 -j DNAT --to-destination 192.168.1.123:6123
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6123 -j DNAT --to-destination 192.168.1.123:6123
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6123 -j DNAT --to-destination 192.168.1.123:6123
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.123/32 -p tcp -m tcp --dport 6123 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.123/32 -o eth2 -p tcp -m tcp --dport 6123 -j ACCEPT
 +
 
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6124 -j DNAT --to-destination 192.168.1.124:6124
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6124 -j DNAT --to-destination 192.168.1.124:6124
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6124 -j DNAT --to-destination 192.168.1.124:6124
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.124/32 -p tcp -m tcp --dport 6124 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.124/32 -o eth2 -p tcp -m tcp --dport 6124 -j ACCEPT
  
−
IP เริ่ม 192.168.1.101 &gt; 6101 102 &gt; 6102 &gt;&gt;&gt;&gt;
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6125 -j DNAT --to-destination 192.168.1.125:6125
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6125 -j DNAT --to-destination 192.168.1.125:6125
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6125 -j DNAT --to-destination 192.168.1.125:6125
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.125/32 -p tcp -m tcp --dport 6125 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.125/32 -o eth2 -p tcp -m tcp --dport 6125 -j ACCEPT
  
−
Save file name dotaforward.sh and chmod 755 ก่อนนำไปรัน
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6126 -j DNAT --to-destination 192.168.1.126:6126
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6126 -j DNAT --to-destination 192.168.1.126:6126
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6126 -j DNAT --to-destination 192.168.1.126:6126
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.126/32 -p tcp -m tcp --dport 6126 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.126/32 -o eth2 -p tcp -m tcp --dport 6126 -j ACCEPT
  
−
Script สามารถใช้ร่วมกับ Clark Connect Dualwan ได้
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6127 -j DNAT --to-destination 192.168.1.127:6127
−
<pre>
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6127 -j DNAT --to-destination 192.168.1.127:6127
−
#!/bin/bash
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6127 -j DNAT --to-destination 192.168.1.127:6127
−
# iptables PortForward Dota
+
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.127/32 -p tcp -m tcp --dport 6127 -j SNAT --to-source 192.168.1.1
−
# Powered by Phat Nawanangkull
+
/sbin/iptables -A FORWARD -d 192.168.1.127/32 -o eth2 -p tcp -m tcp --dport 6127 -j ACCEPT
−
# phat@mscompute.com
 
−
# http://www.mscompute.com/
 
−
## Dual Wan Forward Rules
 
  
−
## Input your Wan interface ( example ppp0, ppp1 ).
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6128 -j DNAT --to-destination 192.168.1.128:6128
−
NETIFR_I=`ip r | grep ppp0 | awk '{print$9}'`
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6128 -j DNAT --to-destination 192.168.1.128:6128
−
NETIFR_II=`ip r | grep ppp1 | awk '{print$9}'`
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6128 -j DNAT --to-destination 192.168.1.128:6128
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.128/32 -p tcp -m tcp --dport 6128 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.128/32 -o eth2 -p tcp -m tcp --dport 6128 -j ACCEPT
  
−
##In put your Lan Interface.
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6129 -j DNAT --to-destination 192.168.1.129:6129
−
# NETIFLAN=`ip r | grep eth1 | awk '{print$9}'` 
+
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6129 -j DNAT --to-destination 192.168.1.129:6129
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6129 -j DNAT --to-destination 192.168.1.129:6129
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.129/32 -p tcp -m tcp --dport 6129 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.129/32 -o eth2 -p tcp -m tcp --dport 6129 -j ACCEPT
  
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6130 -j DNAT --to-destination 192.168.1.130:6130
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6130 -j DNAT --to-destination 192.168.1.130:6130
 +
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6130 -j DNAT --to-destination 192.168.1.130:6130
 +
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.130/32 -p tcp -m tcp --dport 6130 -j SNAT --to-source 192.168.1.1
 +
/sbin/iptables -A FORWARD -d 192.168.1.130/32 -o eth2 -p tcp -m tcp --dport 6130 -j ACCEPT
  
 
echo "#-------------------------------------------------------------------$"  
 
echo "#-------------------------------------------------------------------$"  
Line 72: Line 233:
 
echo "#-------------------------------------------------------------------$"  
 
echo "#-------------------------------------------------------------------$"  
 
#===========================================================================
 
#===========================================================================
 +
</pre>
 +
 +
 +
----
 +
 +
Port Forward Credit Permpong (Alexa)
 +
<pre>
 +
My_Local_Net="192.168.0.0/24"
 +
eth1_addr=`ifconfig | grep -A1 eth1 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
 +
ppp0_addr=`ifconfig | grep -A1 ppp0 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
 +
ppp1_addr=`ifconfig | grep -A1 ppp1 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
 +
 +
ppp0_gw=`ip route | grep ppp0 | head -1 | cut -f 1 -d " "`
 +
ppp1_gw=`ip route | grep ppp1 | head -1 | cut -f 1 -d " "`
 +
 +
# ----- Port Forwarding
 +
serverIPAddr=192.168.0.1
 +
clientIPAddr=192.168.0.
 +
startClientNo=101
 +
startPortNo=7001
 +
clients=20
 +
 +
 +
n=0
 +
while [ $n -lt $clients -o $n -eq $clients ]
 +
do
 +
# ----- FORWARD
 +
iptables -t filter -A FORWARD -d $clientIPAddr$startClientNo -o eth1 -p tcp -m tcp --destination-port $startPortNo -j ACCEPT
 +
iptables -t filter -A FORWARD -d $clientIPAddr$startClientNo -o eth1 -p udp -m udp --destination-port $startPortNo -j ACCEPT
 +
 +
# ----- DNAT
 +
iptables -t nat -A PREROUTING -d $ppp0_addr -p tcp -m tcp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
 +
iptables -t nat -A PREROUTING -d $ppp0_addr -p udp -m udp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
 +
iptables -t nat -A PREROUTING -d $ppp1_addr -p tcp -m tcp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
 +
iptables -t nat -A PREROUTING -d $ppp1_addr -p udp -m udp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
 +
 +
# ----- SNAT
 +
iptables -t nat -A POSTROUTING -s $My_Local_Net -d $clientIPAddr$startClientNo -p tcp --destination-port $startPortNo -j SNAT --to-source $serverIPAddr
 +
iptables -t nat -A POSTROUTING -s $My_Local_Net -d $clientIPAddr$startClientNo -p udp --destination-port $startPortNo -j SNAT --to-source $serverIPAddr
 +
 +
startPortNo=$((startPortNo+1));
 +
startClientNo=$((startClientNo+1));
 +
n=$((n+1));
 +
done
 
</pre>
 
</pre>

Revision as of 09:27, 23 July 2009

Warcraft DOTA Portforward Rules 

#!/bin/bash
#30 PC Forward

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6101 -j DNAT --to-destination 192.168.1.101:6101
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6101 -j DNAT --to-destination 192.168.1.101:6101
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6101 -j DNAT --to-destination 192.168.1.101:6101
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.101/32 -p tcp -m tcp --dport 6101 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.101/32 -o eth2 -p tcp -m tcp --dport 6101 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6102 -j DNAT --to-destination 192.168.1.102:6102
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6102 -j DNAT --to-destination 192.168.1.102:6102
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6102 -j DNAT --to-destination 192.168.1.102:6102
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.102/32 -p tcp -m tcp --dport 6102 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.102/32 -o eth2 -p tcp -m tcp --dport 6102 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6103 -j DNAT --to-destination 192.168.1.103:6103
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6103 -j DNAT --to-destination 192.168.1.103:6103
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6103 -j DNAT --to-destination 192.168.1.103:6103
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.103/32 -p tcp -m tcp --dport 6103 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.103/32 -o eth2 -p tcp -m tcp --dport 6103 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6104 -j DNAT --to-destination 192.168.1.104:6104
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6104 -j DNAT --to-destination 192.168.1.104:6104
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6104 -j DNAT --to-destination 192.168.1.104:6104
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.104/32 -p tcp -m tcp --dport 6104 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.104/32 -o eth2 -p tcp -m tcp --dport 6104 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6105 -j DNAT --to-destination 192.168.1.105:6105
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6105 -j DNAT --to-destination 192.168.1.105:6105
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6105 -j DNAT --to-destination 192.168.1.105:6105
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.105/32 -p tcp -m tcp --dport 6105 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.105/32 -o eth2 -p tcp -m tcp --dport 6105 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6106 -j DNAT --to-destination 192.168.1.106:6106
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6106 -j DNAT --to-destination 192.168.1.106:6106
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6106 -j DNAT --to-destination 192.168.1.106:6106
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.106/32 -p tcp -m tcp --dport 6106 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.106/32 -o eth2 -p tcp -m tcp --dport 6106 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6107 -j DNAT --to-destination 192.168.1.107:6107
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6107 -j DNAT --to-destination 192.168.1.107:6107
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6107 -j DNAT --to-destination 192.168.1.107:6107
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.107/32 -p tcp -m tcp --dport 6107 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.107/32 -o eth2 -p tcp -m tcp --dport 6107 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6108 -j DNAT --to-destination 192.168.1.108:6108
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6108 -j DNAT --to-destination 192.168.1.108:6108
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6108 -j DNAT --to-destination 192.168.1.108:6108
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.108/32 -p tcp -m tcp --dport 6108 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.108/32 -o eth2 -p tcp -m tcp --dport 6108 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6109 -j DNAT --to-destination 192.168.1.109:6109
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6109 -j DNAT --to-destination 192.168.1.109:6109
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6109 -j DNAT --to-destination 192.168.1.109:6109
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.109/32 -p tcp -m tcp --dport 6109 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.109/32 -o eth2 -p tcp -m tcp --dport 6109 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6110 -j DNAT --to-destination 192.168.1.110:6110
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6110 -j DNAT --to-destination 192.168.1.110:6110
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6110 -j DNAT --to-destination 192.168.1.110:6110
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.110/32 -p tcp -m tcp --dport 6110 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.110/32 -o eth2 -p tcp -m tcp --dport 6110 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6111 -j DNAT --to-destination 192.168.1.111:6111
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6111 -j DNAT --to-destination 192.168.1.111:6111
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6111 -j DNAT --to-destination 192.168.1.111:6111
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.111/32 -p tcp -m tcp --dport 6111 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.111/32 -o eth2 -p tcp -m tcp --dport 6111 -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6112 -j DNAT --to-destination 192.168.1.112:6112
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6112 -j DNAT --to-destination 192.168.1.112:6112
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6112 -j DNAT --to-destination 192.168.1.112:6112
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.112/32 -p tcp -m tcp --dport 6112 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.112/32 -o eth2 -p tcp -m tcp --dport 6112 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6113 -j DNAT --to-destination 192.168.1.113:6113
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6113 -j DNAT --to-destination 192.168.1.113:6113
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6113 -j DNAT --to-destination 192.168.1.113:6113
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.113/32 -p tcp -m tcp --dport 6113 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.113/32 -o eth2 -p tcp -m tcp --dport 6113 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6114 -j DNAT --to-destination 192.168.1.114:6114
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6114 -j DNAT --to-destination 192.168.1.114:6114
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6114 -j DNAT --to-destination 192.168.1.114:6114
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.114/32 -p tcp -m tcp --dport 6114 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.114/32 -o eth2 -p tcp -m tcp --dport 6114 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6115 -j DNAT --to-destination 192.168.1.115:6115
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6115 -j DNAT --to-destination 192.168.1.115:6115
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6115 -j DNAT --to-destination 192.168.1.115:6115
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.115/32 -p tcp -m tcp --dport 6115 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.115/32 -o eth2 -p tcp -m tcp --dport 6115 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6116 -j DNAT --to-destination 192.168.1.116:6116
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6116 -j DNAT --to-destination 192.168.1.116:6116
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6116 -j DNAT --to-destination 192.168.1.116:6116
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.116/32 -p tcp -m tcp --dport 6116 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.116/32 -o eth2 -p tcp -m tcp --dport 6116 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6117 -j DNAT --to-destination 192.168.1.117:6117
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6117 -j DNAT --to-destination 192.168.1.117:6117
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6117 -j DNAT --to-destination 192.168.1.117:6117
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.117/32 -p tcp -m tcp --dport 6117 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.117/32 -o eth2 -p tcp -m tcp --dport 6117 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6118 -j DNAT --to-destination 192.168.1.118:6118
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6118 -j DNAT --to-destination 192.168.1.118:6118
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6118 -j DNAT --to-destination 192.168.1.118:6118
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.118/32 -p tcp -m tcp --dport 6118 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.118/32 -o eth2 -p tcp -m tcp --dport 6118 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6119 -j DNAT --to-destination 192.168.1.119:6119
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6119 -j DNAT --to-destination 192.168.1.119:6119
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6119 -j DNAT --to-destination 192.168.1.119:6119
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.117/32 -p tcp -m tcp --dport 6119 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.119/32 -o eth2 -p tcp -m tcp --dport 6119 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6120 -j DNAT --to-destination 192.168.1.120:6120
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6120 -j DNAT --to-destination 192.168.1.120:6120
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6120 -j DNAT --to-destination 192.168.1.120:6120
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.120/32 -p tcp -m tcp --dport 6120 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.120/32 -o eth2 -p tcp -m tcp --dport 6120 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6121 -j DNAT --to-destination 192.168.1.121:6121
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6121 -j DNAT --to-destination 192.168.1.121:6121
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6121 -j DNAT --to-destination 192.168.1.121:6121
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.121/32 -p tcp -m tcp --dport 6121 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.121/32 -o eth2 -p tcp -m tcp --dport 6121 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6122 -j DNAT --to-destination 192.168.1.122:6122
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6122 -j DNAT --to-destination 192.168.1.122:6122
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6122 -j DNAT --to-destination 192.168.1.122:6122
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.122/32 -p tcp -m tcp --dport 6122 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.122/32 -o eth2 -p tcp -m tcp --dport 6122 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6123 -j DNAT --to-destination 192.168.1.123:6123
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6123 -j DNAT --to-destination 192.168.1.123:6123
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6123 -j DNAT --to-destination 192.168.1.123:6123
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.123/32 -p tcp -m tcp --dport 6123 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.123/32 -o eth2 -p tcp -m tcp --dport 6123 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6124 -j DNAT --to-destination 192.168.1.124:6124
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6124 -j DNAT --to-destination 192.168.1.124:6124
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6124 -j DNAT --to-destination 192.168.1.124:6124
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.124/32 -p tcp -m tcp --dport 6124 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.124/32 -o eth2 -p tcp -m tcp --dport 6124 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6125 -j DNAT --to-destination 192.168.1.125:6125
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6125 -j DNAT --to-destination 192.168.1.125:6125
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6125 -j DNAT --to-destination 192.168.1.125:6125
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.125/32 -p tcp -m tcp --dport 6125 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.125/32 -o eth2 -p tcp -m tcp --dport 6125 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6126 -j DNAT --to-destination 192.168.1.126:6126
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6126 -j DNAT --to-destination 192.168.1.126:6126
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6126 -j DNAT --to-destination 192.168.1.126:6126
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.126/32 -p tcp -m tcp --dport 6126 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.126/32 -o eth2 -p tcp -m tcp --dport 6126 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6127 -j DNAT --to-destination 192.168.1.127:6127
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6127 -j DNAT --to-destination 192.168.1.127:6127
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6127 -j DNAT --to-destination 192.168.1.127:6127
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.127/32 -p tcp -m tcp --dport 6127 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.127/32 -o eth2 -p tcp -m tcp --dport 6127 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6128 -j DNAT --to-destination 192.168.1.128:6128
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6128 -j DNAT --to-destination 192.168.1.128:6128
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6128 -j DNAT --to-destination 192.168.1.128:6128
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.128/32 -p tcp -m tcp --dport 6128 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.128/32 -o eth2 -p tcp -m tcp --dport 6128 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6129 -j DNAT --to-destination 192.168.1.129:6129
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6129 -j DNAT --to-destination 192.168.1.129:6129
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6129 -j DNAT --to-destination 192.168.1.129:6129
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.129/32 -p tcp -m tcp --dport 6129 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.129/32 -o eth2 -p tcp -m tcp --dport 6129 -j ACCEPT

/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth0 --dport 6130 -j DNAT --to-destination 192.168.1.130:6130
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth1 --dport 6130 -j DNAT --to-destination 192.168.1.130:6130
/sbin/iptables -t nat -A PREROUTING -t nat -p tcp -i eth2 --dport 6130 -j DNAT --to-destination 192.168.1.130:6130
/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 192.168.1.130/32 -p tcp -m tcp --dport 6130 -j SNAT --to-source 192.168.1.1
/sbin/iptables -A FORWARD -d 192.168.1.130/32 -o eth2 -p tcp -m tcp --dport 6130 -j ACCEPT

echo "#-------------------------------------------------------------------$" 
echo "#               WarcraftDotA Forward Rules Start                    $"  
echo "#-------------------------------------------------------------------$" 

echo 1 > /proc/sys/net/ipv4/ip_forward

#========== PC 1 ==========#
#==========================#

/sbin/iptables -t nat -A PREROUTING -i ppp0 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_I --dport 6101 -j DNAT --to-destination 192.168.1.101
/sbin/iptables -t nat -A PREROUTING -i ppp1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_II --dport 6101  -j DNAT --to-destination 192.168.1.101
/sbin/iptables -A FORWARD -i ppp+ -o eth1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d 192.168.1.101/255.255.255.255 --dport 6101 -j ACCEPT

#========== PC 2 ==========#
#==========================#


/sbin/iptables -t nat -A PREROUTING -i ppp0 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_I --dport 6102 -j DNAT --to-destination 192.168.1.102
/sbin/iptables -t nat -A PREROUTING -i ppp1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_II --dport 6102  -j DNAT --to-destination 192.168.1.102
/sbin/iptables -A FORWARD -i ppp+ -o eth1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d 192.168.1.102/255.255.255.255 --dport 6102 -j ACCEPT

#========== PC 3 ==========#
#==========================#

/sbin/iptables -t nat -A PREROUTING -i ppp0 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_I --dport 6103 -j DNAT --to-destination 192.168.1.103
/sbin/iptables -t nat -A PREROUTING -i ppp1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_II --dport 6203  -j DNAT --to-destination 192.168.1.103
/sbin/iptables -A FORWARD -i ppp+ -o eth1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d 192.168.1.103/255.255.255.255 --dport 6103 -j ACCEPT

#========== PC 4 ==========#
#==========================#

/sbin/iptables -t nat -A PREROUTING -i ppp0 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_I --dport 6104 -j DNAT --to-destination 192.168.1.104
/sbin/iptables -t nat -A PREROUTING -i ppp1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_II --dport 6104  -j DNAT --to-destination 192.168.1.104
/sbin/iptables -A FORWARD -i ppp+ -o eth1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d 192.168.1.104/255.255.255.255 --dport 6104 -j ACCEPT

#========== PC 5 ==========#
#==========================#

/sbin/iptables -t nat -A PREROUTING -i ppp0 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_I --dport 6105 -j DNAT --to-destination 192.168.1.105
/sbin/iptables -t nat -A PREROUTING -i ppp1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d $NETIFR_II --dport 6105  -j DNAT --to-destination 192.168.1.105
/sbin/iptables -A FORWARD -i ppp+ -o eth1 -p tcp -m tcp --syn -s 0.0.0.0/0.0.0.0 --sport 1024:65535 -d 192.168.1.105/255.255.255.255 --dport 6105 -j ACCEPT


#===========================================================================
echo "#-------------------------------------------------------------------$" 
echo "#                    Forward Rules  FINISHED                        $"  
echo "#-------------------------------------------------------------------$" 
echo "#               See More at http://mscompute.com                    $"
echo "#-------------------------------------------------------------------$" 
#===========================================================================


Port Forward Credit Permpong (Alexa) 

My_Local_Net="192.168.0.0/24"
eth1_addr=`ifconfig | grep -A1 eth1 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
ppp0_addr=`ifconfig | grep -A1 ppp0 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
ppp1_addr=`ifconfig | grep -A1 ppp1 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`

ppp0_gw=`ip route | grep ppp0 | head -1 | cut -f 1 -d " "`
ppp1_gw=`ip route | grep ppp1 | head -1 | cut -f 1 -d " "`

# ----- Port Forwarding
	serverIPAddr=192.168.0.1
	clientIPAddr=192.168.0.
	startClientNo=101
	startPortNo=7001
	clients=20


	n=0
	while [ $n -lt $clients -o $n -eq $clients ]
	do
		# ----- FORWARD
		iptables -t filter -A FORWARD -d $clientIPAddr$startClientNo -o eth1 -p tcp -m tcp --destination-port $startPortNo -j ACCEPT
		iptables -t filter -A FORWARD -d $clientIPAddr$startClientNo -o eth1 -p udp -m udp --destination-port $startPortNo -j ACCEPT

		# ----- DNAT
		iptables -t nat -A PREROUTING -d $ppp0_addr -p tcp -m tcp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
		iptables -t nat -A PREROUTING -d $ppp0_addr -p udp -m udp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
		iptables -t nat -A PREROUTING -d $ppp1_addr -p tcp -m tcp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo
		iptables -t nat -A PREROUTING -d $ppp1_addr -p udp -m udp --destination-port $startPortNo -j DNAT --to-destination $clientIPAddr$startClientNo:$startPortNo

		# ----- SNAT
		iptables -t nat -A POSTROUTING -s $My_Local_Net -d $clientIPAddr$startClientNo -p tcp --destination-port $startPortNo -j SNAT --to-source $serverIPAddr
		iptables -t nat -A POSTROUTING -s $My_Local_Net -d $clientIPAddr$startClientNo -p udp --destination-port $startPortNo -j SNAT --to-source $serverIPAddr

		startPortNo=$((startPortNo+1));
		startClientNo=$((startClientNo+1));
		n=$((n+1));
	done
Retrieved from "https://msc.siamtools.com/wiki/index.php?title=Warcraft_DOTA_Forward_Port_Rules&oldid=611"