1 #!/bin/sh /etc/rc.common
6 config_get proto "$cfg" proto
7 config_get dport "$cfg" dport
8 config_get iface "$cfg" iface
9 config_get to "$cfg" to
11 ports=$(echo $to | cut -sd: -f2)
12 [ -n "$ports" ] && ports="--dport $(echo $ports | sed -e 's/-/:/')"
14 ip=$(echo $to | cut -d: -f1)
16 if ([ "$proto" == "tcpudp" ] || [ "$proto" == "tcp" ]); then
17 iptables -t nat -A luci_prerouting -i "$iface" -p tcp --dport "$dport" -j DNAT --to "$to"
18 iptables -A luci_forward -i "$iface" -p tcp -d "$ip" $ports -j ACCEPT
21 if ([ "$proto" == "tcpudp" ] || [ "$proto" == "udp" ]); then
22 iptables -t nat -A luci_prerouting -i "$iface" -p udp --dport "$dport" -j DNAT --to "$to"
23 iptables -A luci_forward -i "$iface" -p udp -d "$ip" $ports -j ACCEPT
31 config_get chain "$cfg" chain
32 [ -n "$chain" ] || return 0
33 [ "$chain" == "forward" ] && cmd="$cmd -A luci_forward"
34 [ "$chain" == "input" ] && cmd="$cmd -A luci_input"
35 [ "$chain" == "output" ] && cmd="$cmd -A luci_output"
36 [ "$chain" == "prerouting" ] && cmd="$cmd -t nat -A luci_prerouting"
37 [ "$chain" == "postrouting" ] && cmd="$cmd -t nat -A luci_postrouting"
39 config_get iface "$cfg" iface
40 [ -n "$iface" ] && cmd="$cmd -i $iface"
42 config_get oface "$cfg" oface
43 [ -n "$oface" ] && cmd="$cmd -o $oface"
45 config_get proto "$cfg" proto
46 [ -n "$proto" ] && cmd="$cmd -p $proto"
48 config_get source "$cfg" source
49 [ -n "$source" ] && cmd="$cmd -s $source"
51 config_get destination "$cfg" destination
52 [ -n "$destination" ] && cmd="$cmd -d $destination"
54 config_get sport "$cfg" sport
55 [ -n "$sport" ] && cmd="$cmd --sport $sport"
57 config_get dport "$cfg" dport
58 [ -n "$dport" ] && cmd="$cmd --dport $dport"
60 config_get todest "$cfg" todest
61 [ -n "$todest" ] && cmd="$cmd --to-destination $todest"
63 config_get tosrc "$cfg" tosrc
64 [ -n "$tosrc" ] && cmd="$cmd --to-source $tosrc"
66 config_get jump "$cfg" jump
67 [ -n "$jump" ] && cmd="$cmd -j $jump"
69 config_get command "$cfg" command
70 [ -n "$command" ] && cmd="$cmd $command"
77 iptables -N luci_input
78 iptables -N luci_output
79 iptables -N luci_forward
80 iptables -t nat -N luci_prerouting
81 iptables -t nat -N luci_postrouting
83 ### Hook in the chains
84 iptables -A input_rule -j luci_input
85 iptables -A output_rule -j luci_output
86 iptables -A forwarding_rule -j luci_forward
87 iptables -t nat -A prerouting_rule -j luci_prerouting
88 iptables -t nat -A postrouting_rule -j luci_postrouting
90 ### Read chains from config
92 config_foreach apply_portfw portfw
93 config_foreach apply_rule rule
97 ### Hook out the chains
98 iptables -D input_rule -j luci_input
99 iptables -D output_rule -j luci_output
100 iptables -D forwarding_rule -j luci_forward
101 iptables -t nat -D prerouting_rule -j luci_prerouting
102 iptables -t nat -D postrouting_rule -j luci_postrouting
105 iptables -F luci_input
106 iptables -F luci_output
107 iptables -F luci_forward
108 iptables -t nat -F luci_prerouting
109 iptables -t nat -F luci_postrouting
112 iptables -X luci_input
113 iptables -X luci_output
114 iptables -X luci_forward
115 iptables -t nat -X luci_prerouting
116 iptables -t nat -X luci_postrouting