Адаптер Ethernet Ethernet:
DNS-суффикс подключения . . . . . :
Локальный IPv6-адрес канала . . . : fe80::d03b:cda1:ee06:e921%8
IPv4-адрес. . . . . . . . . . . . : 192.168.88.118
Маска подсети . . . . . . . . . . : 255.255.255.0
Основной шлюз. . . . . . . . . : 192.168.88.1
┌── fckfuck [ /home/fck ]
└─> ip route
default via 192.168.1.1 dev wlan0 proto static metric 600
169.254.0.0/16 dev eth0 scope link metric 1000
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.11 metric 600
192.168.88.0/24 dev eth0 proto kernel scope link src 192.168.88.1 metric 100
iptables -t nat -A POSTROUTING -s 192.168.88.0/24 -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth0 -o tun0 -p tcp --dport 139 --sport 139 -j REJECT
iptables -A FORWARD -i eth0 -o tun0 -p tcp --dport 445 --sport 445 -j REJECT
iptables -A FORWARD -i tun0 -o eth0 -p tcp --dport 139 --sport 139 -j REJECT
iptables -A FORWARD -i tun0 -o eth0 -p tcp --dport 445 --sport 445 -j REJECT
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 REJECT tcp -- eth0 tun0 0.0.0.0/0 0.0.0.0/0 tcp spt:139 dpt:139 reject-with icmp-port-unreachable
0 0 REJECT tcp -- eth0 tun0 0.0.0.0/0 0.0.0.0/0 tcp spt:445 dpt:445 reject-with icmp-port-unreachable
0 0 REJECT tcp -- tun0 eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:139 dpt:139 reject-with icmp-port-unreachable
0 0 REJECT tcp -- tun0 eth0 0.0.0.0/0 0.0.0.0/0 tcp spt:445 dpt:445 reject-with icmp-port-unreachable
iptables -A INPUT -p tcp -i eth1 -j DROP
Chain INPUT (policy ACCEPT 57371 packets, 2835K bytes)
pkts bytes target prot opt in out source destination
186 23497 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 DROP tcp -- eth1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80