#!/bin/bash
#-------------AtlaWare Firewall------------#


# Configurazione
IPTABLES="/sbin/iptables"
EXT_PPP=$1
INT_LAN="eth0"
# INT_IP="192.168.6.6"
# IP_PPP=`/sbin/ifconfig ppp1 | grep inet | cut -d : -f 2 | cut -d \  -f 1`
IP_PPP=$2

# Routing

ip rule add from ${IP_PPP} table $3
ip route add 192.168.6.0/24 dev eth0 table $3
#ip route add 192.168.7.0/24 dev tun0 table $3
ip route add 127.0.0.0/8 dev lo table $3
ip route add default via ${IP_PPP} table $3

# ip rule add from ${INT_IP} table $3

${IPTABLES} -t filter -D FORWARD -o ${EXT_PPP} -i ${INT_LAN} -j ACCEPT
${IPTABLES} -t filter -D FORWARD -o ${INT_LAN} -i ${EXT_PPP} -j ACCEPT
${IPTABLES} -t filter -A FORWARD -o ${EXT_PPP} -i ${INT_LAN} -j ACCEPT
${IPTABLES} -t filter -A FORWARD -o ${INT_LAN} -i ${EXT_PPP} -j ACCEPT
${IPTABLES} -t filter -D INPUT -i ${EXT_PPP} -m state --state ESTABLISHED -j ACCEPT
${IPTABLES} -t filter -A INPUT -i ${EXT_PPP} -m state --state ESTABLISHED -j ACCEPT


#${IPTABLES} -t nat -D POSTROUTING -o ${EXT_PPP} -j MASQUERADE
#${IPTABLES} -t nat -A POSTROUTING -o ${EXT_PPP} -j MASQUERADE

#exit;

# Regole pacchetti altra macchina
# ${IPTABLES} -t nat -D PREROUTING -i ${EXT_PPP} -j DNAT --to-destination ${INT_IP}
# ${IPTABLES} -t nat -A PREROUTING -i ${EXT_PPP} -j DNAT --to-destination ${INT_IP}