Informatika Blog

Atheros 5212 chippel szerelt WLAN kártyával az alábbi módon készítettem a Debian linuxból wireless access pointot:

wlanconfig ath0 destroy; 
wlanconfig ath create wlandev wifi0 wlanmode ap; 
iwconfig ath0 rate 54M;
iwconfig ath0 essid "Sempi.dyndns.hu" ; 

iptables -A POSTROUTING -t nat -o ppp0 -s 10.1.1.0/24 -j MASQUERADE; 
iptables -A POSTROUTING -t mangle -o eth0 -j TTL --ttl-set 64;

iptables -t nat -A PREROUTING -p tcp --dport 65502 -j DNAT --to-destination 10.1.1.2:65502;
iptables -t nat -A PREROUTING -p tcp --dport 65503 -j DNAT --to-destination 10.1.1.3:65503;
iptables -t nat -A PREROUTING -p tcp --dport 65504 -j DNAT --to-destination 10.1.1.4:65504;

iptables -A FORWARD -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j ACCEPT;
iptables -A FORWARD -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec -j ACCEPT;
iptables -A FORWARD -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT;

iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -s 127.0.0.1 -j ACCEPT
iptables -A INPUT -p tcp --dport 21 -i ath0 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -p UDP --dport 67 -i ath0 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 111 -i ath0 -j ACCEPT
iptables -A INPUT -p tcp --dport 113 -i ath0 -j ACCEPT
iptables -A INPUT -p tcp --dport 139 -i ath0 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 445 -i ath0 -j ACCEPT
iptables -A INPUT -p tcp --dport 993 -j ACCEPT
iptables -A INPUT -p tcp --dport 3128 -j ACCEPT
iptables -A INPUT -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -p tcp --dport 65501 -j ACCEPT
iptables -A INPUT -p tcp --dport 65502 -j ACCEPT
iptables -A INPUT -p tcp --dport 65503 -j ACCEPT
iptables -A INPUT -p tcp --dport 65504 -j ACCEPT

iptables -A INPUT -p UDP --dport 22 -j ACCEPT
iptables -A INPUT -p UDP --dport 53 -j ACCEPT
iptables -A INPUT -p UDP --dport 67 -i ath0 -j ACCEPT
iptables -A INPUT -p UDP --dport 80 -j ACCEPT
iptables -A INPUT -p UDP --dport 123 -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT

iptables -P INPUT DROP

echo "1" > /proc/sys/net/ipv4/ip_forward; 
echo "1" > /proc/sys/net/ipv4/conf/all/log_martians;