#!/bin/sh
modprobe ip_tables
#
echo -e "\n\nIPMASQ *TEST* rc.firewall ruleset for kj6eo.com (JAN 2003)\n"
#The location of the iptables program
IPTABLES="/sbin/iptables"
IFCONFIG="/sbin/ifconfig"
GREP="/bin/grep"
AWK="/bin/awk"
SED="/bin/sed"

echo " - Verifying that all kernel modules are ok"
/sbin/depmod -a
/sbin/insmod ip_tables
/sbin/insmod ip_conntrack
/sbin/insmod ip_conntrack_ftp
/sbin/insmod iptable_nat
/sbin/insmod ip_nat_ftp

echo "- Enabling packet forwarding in the kernel"
echo "1" > /proc/sys/net/ipv4/ip_forward

echo "-Resetting the firewall and setting the default FORWARD policy to DROP"
$IPTABLES -P INPUT ACCEPT
$IPTABLES -F INPUT
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -F OUTPUT
$IPTABLES -P FORWARD DROP
$IPTABLES -F FORWARD

echo "- FWD: Allow all conections OUT and only existing and related ones IN"
$IPTABLES -A FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i eth1 -o eth0 -j ACCEPT
$IPTABLES -A FORWARD -j LOG

echo "- FWD: Allow Echolink tcp 5200 and udp 5198,5199 packets IN"
iptables -A FORWARD -i eth0 -p tcp --dport 5200 -j ACCEPT
iptables -A FORWARD -i eth0 -p udp --dport 5198 -j ACCEPT
iptables -A FORWARD -i eth0 -p udp --dport 5199 -j ACCEPT

echo "- Enabling udp packet forwarding for Echolink"
EXITIF="eth0"		# External (Internet Side)
INTIF="eth1"    	# Internal (LAN Side)

# Determine the external IP automatically
EXITIP="`$IFCONFIG $EXITIF | $GREP 'inet addr' | $AWK '{print $2}' | $SED -e 's/.*://'`"

# Address of LAN Computer Running Echolink
ECHOIP="192.168.1.10"

$IPTABLES -t nat -A PREROUTING -d $EXITIP -p udp --dport 5198 -i $EXITIF -j DNAT --to-destination $ECHOIP
$IPTABLES -t nat -A PREROUTING -d $EXITIP -p udp --dport 5199 -i $EXITIF -j DNAT --to-destination $ECHOIP

echo "- Enabling SNAT (MASQUERADE) funtionality on eth0"
$IPTABLES -t nat -A POSTROUTING -o $EXITIF -j SNAT --to $EXITIP 
echo -e "\nDone.\n"