[4] Comentário enviado por
dhuberto em 15/06/2010 - 12:41h:
###################
# LIBERACAO SEFAZ #
###################
iptables -t nat -A PREROUTING -p tcp -d 200.201.173.68 --dport 80 -j DNAT --to 200.201.173.68:80
iptables -I FORWARD -p tcp -s 0/0 -d 200.201.173.68/32 --dport 80 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -d 200.201.166.200 --dport 80 -j DNAT --to 200.201.166.200:80
iptables -I FORWARD -p tcp -s 0/0 -d 200.201.166.200/32 --dport 80 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -d 200.201.174.207 --dport 80 -j DNAT --to 200.201.174.207:80
iptables -I FORWARD -p tcp -s 0/0 -d 200.201.174.207/32 --dport 80 -j ACCEPT
iptables -I FORWARD -p all -s 200.201.174.0/24 -d 0/0 -j ACCEPT
iptables -I OUTPUT -p all -s 200.201.174.0/24 -d 0/0 -j ACCEPT
iptables -I INPUT -p all -s 200.201.174.0/24 -d 0/0 -j ACCEPT
iptables -A FORWARD -p tcp -m tcp --dport 2631 -s 10.20.0.0/16 -d 200.201.174.204 -j ACCEPT
iptables -A FORWARD -p tcp -m tcp --dport 2004 -s 10.20.0.0/16 -d 200.244.109.65 -j ACCEPT
#TED
iptables -t nat -A PREROUTING -i eth1 -s \! 10.20.0.0/16 -p tcp -m multiport --dport 8017,80,443 -j REDIRECT --to-port 3128
iptables -A FORWARD -p tcp --dport 8017 -j ACCEPT
iptables -A FORWARD -p udp --dport 8017 -j ACCEPT
#TED2
iptables -t nat -A PREROUTING -i eth1 -p tcp -d ! ted.sefaz.rs.gov.br --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -i eth1 -d ted.sefaz.rs.gov.br -j ACCEPT
iptables -t filter -A FORWARD -i eth1 -d ted.sefaz.rs.gov.br -j ACCEPT
iptables -A FORWARD -p tcp --dport 8017 -j ACCEPT
iptables -A FORWARD -p udp --dport 8017 -j ACCEPT