[완료] iptable.sh <-- 이 스크립트좀 봐 주시면 감사하겠습니다.

#!/bin/sh
 
# Shell script for stateful firewall based on iptables
Version=1.0.1
 
PATH=/sbin:/usr/sbin:/bin:/usr/bin
ME=$(basename "$0")             # program name as invoked
IPTABLES='/sbin/iptables'
 
# Must be root
if [ "$(/usr/bin/id -u)" != 0 ] ; then
    echo -e "$ME: You must be root to run this script.\n" >&2
    exit 1
fi
 
do_start ()
{
    # drop packets that don't pass any rules
    $IPTABLES -P INPUT DROP
    # accept packets that are part of established or related connection
    $IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    # accept packets from loopback interface
    $IPTABLES -A INPUT -i lo -j ACCEPT
    # log packets that don't pass the above rules
    $IPTABLES -A INPUT -j LOG --log-prefix "firewall: "
}
 
do_stop ()
{
    # flush rules and delete the optional user-defined chains
    $IPTABLES -F
    $IPTABLES -X
    $IPTABLES -t nat -F
    $IPTABLES -t nat -X
    $IPTABLES -t mangle -F
    $IPTABLES -t mangle -X
    $IPTABLES -P INPUT ACCEPT
    $IPTABLES -P FORWARD ACCEPT
    $IPTABLES -P OUTPUT ACCEPT
    $IPTABLES -t nat -P PREROUTING ACCEPT
    $IPTABLES -t nat -P POSTROUTING ACCEPT
    $IPTABLES -t nat -P OUTPUT ACCEPT
    $IPTABLES -t mangle -P PREROUTING ACCEPT
    $IPTABLES -t mangle -P INPUT ACCEPT
    $IPTABLES -t mangle -P FORWARD ACCEPT
    $IPTABLES -t mangle -P OUTPUT ACCEPT
    $IPTABLES -t mangle -P POSTROUTING ACCEPT
}
 
do_status ()
{
    echo
    echo $IPTABLES "-t filter -v -L"
    $IPTABLES -t filter -v -L
    echo
    echo
    echo $IPTABLES "-t nat -v -L"
    $IPTABLES -t nat -v -L
    echo
    echo
    echo $IPTABLES "-t mangle -v -L"
    $IPTABLES -t mangle -v -L
}
 
case "$1" in
    start)
        echo -n "$ME: Starting firewall... "
        do_stop
        do_start
        echo "done"
    ;;
    stop)
        echo -n "$ME: Stopping firewall... "
        do_stop
        echo "done"
    ;;
    restart|reload|force-reload)
        echo -n "$ME: Restarting firewall... "
        do_stop
        do_start
        echo "done"
    ;;
    status)
        echo "$ME: List all iptables tables, chains, rules and net 
stats"
        do_status
    ;;
    --version)
        echo -e "$ME version: $Version \n"
    ;;
    *)
        echo -n "Usage: $0 {start|stop|restart|reload|force-reload" >&2
        echo "|status|--version}" >&2
        exit 1
    ;;
esac
 
exit 0