Хаклаб/Firewall

#!/bin/bash
iptables -F
iptables -X
iptables -Z
iptables -t nat -F
iptables -t nat -X
iptables -t nat -Z

ip6tables -F
ip6tables -X
ip6tables -Z

#ipv4
/sbin/iptables -A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -i ppp0 -j DROP
/sbin/iptables -t nat -o ppp0 -A POSTROUTING -j MASQUERADE

/sbin/iptables -A FORWARD -s 192.168.88.0/24 -j ACCEPT
/sbin/iptables -A FORWARD -d 192.168.88.0/24 -j ACCEPT

#ipv6

/sbin/ip6tables -A INPUT -i sit1 -p tcp --dport 22 -j ACCEPT
/sbin/ip6tables -A INPUT -i sit1 -p tcp --dport 80 -j ACCEPT
/sbin/ip6tables -A INPUT -i sit1 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i sit1 -j DROP

ip6tables -A FORWARD -i sit1 -m state --state ESTABLISHED,RELATED -j ACCEPT
ip6tables -A FORWARD -i sit1 -j DROP