Bash/Port/Forward

Forward Script

#!/bin/bash
: '
 @author   "Chorke, Inc."<[email protected]>
 @web       http://chorke.org
 @vendor    Chorke, Inc.
 @version   1.0.00.GA
 @since     1.0.00.GA
'

# pre initialization data
CKI_ALL_PORT='22210 22211 22212 22213 22214 22215'
CKI_ALL_ADDR='100.83.0.20 100.83.0.21 100.83.0.22'
CKI_ALL_ADDR="$CKI_ALL_ADDR 100.83.0.23"
CKI_ALL_ADDR="$CKI_ALL_ADDR 100.83.0.24"
CKI_ALL_ADDR="$CKI_ALL_ADDR 100.83.0.25"
CKI_WAN_ADDR=139.59.51.80


# set source port
choose_wan_port(){
  printf "\n\033[0;33mchoose wan port:\033[0m\n";
  select CKI_WAN_PORT in '22200' '22299';do
    case $CKI_WAN_PORT in
      '22200') break;;
      '22299') break;;
    esac
  done
}


# set target port
choose_lan_port(){
  printf "\n\033[0;33mchoose lan port:\033[0m\n";
  select CKI_LAN_PORT in $CKI_ALL_PORT;do
    case $CKI_LAN_PORT in
      '22210') break;;
      '22211') break;;
      '22212') break;;
      '22213') break;;
      '22214') break;;
      '22215') break;;
    esac
  done
}


# set target addr
choose_lan_addr(){
  printf "\n\033[0;33mchoose lan addr:\033[0m\n";
  select CKI_LAN_ADDR in $CKI_ALL_ADDR;do
    case $CKI_LAN_ADDR in
      '100.83.0.20') break;;
      '100.83.0.21') break;;
      '100.83.0.22') break;;
      '100.83.0.23') break;;
      '100.83.0.24') break;;
      '100.83.0.25') break;;
    esac
  done
}


# set action
choose_action(){
  printf "\n\033[0;33mchoose operation:\033[0m\n";
  select CKI_ACTION in 'add' 'del';do
    case $CKI_ACTION in
      'add') break;;
      'del') break;;
    esac
  done


  printf '\n\033[0;33mconfirm operation:\033[0m\n';
  CKI_MESSAGE='\033[0;31m%s\033[0m \033[0;33m%s:%s';
  CKI_MESSAGE="$CKI_MESSAGE\033[0m => \033[0;33m%s:%s\033[0m\n";
  printf "$CKI_MESSAGE" "$CKI_ACTION" "$CKI_WAN_ADDR" "$CKI_WAN_PORT" "$CKI_LAN_ADDR" "$CKI_LAN_PORT";

  select CKI_CONFIRM in 'yes' 'no';do
    case $CKI_CONFIRM in
      'yes') break;;
      'no') break;;
    esac
  done
}


# add rules to iptables
operation_add(){
  iptables -t nat -A PREROUTING  -p tcp -m tcp -d $CKI_WAN_ADDR --dport $CKI_WAN_PORT -j DNAT --to-destination $CKI_LAN_ADDR:$CKI_LAN_PORT
  iptables -A FORWARD -m state -p tcp -d $CKI_LAN_ADDR --dport $CKI_LAN_PORT --state NEW,ESTABLISHED,RELATED -j ACCEPT
  iptables -t nat -A POSTROUTING -p tcp -m tcp -s $CKI_LAN_ADDR --sport $CKI_LAN_PORT -j SNAT --to-source $CKI_WAN_ADDR
  printf '\n\033[0;32msuccess operation:\033[0m\n';
  printf "$CKI_MESSAGE\n" "$CKI_ACTION" "$CKI_WAN_ADDR" "$CKI_WAN_PORT" "$CKI_LAN_ADDR" "$CKI_LAN_PORT";
}


# delete from iptables
operation_del(){
  iptables -t nat -D PREROUTING  -p tcp -m tcp -d $CKI_WAN_ADDR --dport $CKI_WAN_PORT -j DNAT --to-destination $CKI_LAN_ADDR:$CKI_LAN_PORT
  iptables -D FORWARD -m state -p tcp -d $CKI_LAN_ADDR --dport $CKI_LAN_PORT --state NEW,ESTABLISHED,RELATED -j ACCEPT
  iptables -t nat -D POSTROUTING -p tcp -m tcp -s $CKI_LAN_ADDR --sport $CKI_LAN_PORT -j SNAT --to-source $CKI_WAN_ADDR
  printf '\n\033[0;32msuccess operation:\033[0m\n';
  printf "$CKI_MESSAGE\n" "$CKI_ACTION" "$CKI_WAN_ADDR" "$CKI_WAN_PORT" "$CKI_LAN_ADDR" "$CKI_LAN_PORT";
}


# execute options
choose_wan_port &&
choose_lan_port &&
choose_lan_addr &&
choose_action;


# exectue action
if [ "$CKI_CONFIRM" == 'yes' ];then
  if [ "$CKI_ACTION" == 'add' ];then operation_add;
  elif [ "$CKI_ACTION" == 'del' ];then operation_del;fi
else
  printf '\n\033[0;31mcanceled operation:\033[0m\n';
  printf "$CKI_MESSAGE\n" "$CKI_ACTION" "$CKI_WAN_ADDR" "$CKI_WAN_PORT" "$CKI_LAN_ADDR" "$CKI_LAN_PORT";
fi

# safe exit
exit $?

Good to Know

# enable series of port
firewall-cmd --zone=public --permanent --add-port=22200-22299/tcp

# enable specific port
firewall-cmd --zone=public --permanent --add-port=22200/tcp

# check port 22200
fuser 22200/tcp


# wan & lan ip config
CKI_WAN_ADDR=139.59.51.80
CKI_LAN_ADDR=100.43.0.20

# wan & lan port config
CKI_WAN_PORT=22200
CKI_LAN_PORT=22211

# add forwarding rule
iptables -t nat -A PREROUTING -p tcp -m tcp -d $CKI_WAN_ADDR --dport $CKI_WAN_PORT -j DNAT --to-destination $CKI_LAN_ADDR:$CKI_LAN_PORT
iptables -A FORWARD -m state -p tcp -d $CKI_LAN_ADDR --dport $CKI_LAN_PORT --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -p tcp -m tcp -s $CKI_LAN_ADDR --sport $CKI_LAN_PORT -j SNAT --to-source $CKI_WAN_ADDR

# remove forwarding rule
iptables -t nat -D PREROUTING -p tcp -m tcp -d $CKI_WAN_ADDR --dport $CKI_WAN_PORT -j DNAT --to-destination $CKI_LAN_ADDR:$CKI_LAN_PORT
iptables -D FORWARD -m state -p tcp -d $CKI_LAN_ADDR --dport $CKI_LAN_PORT --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -D POSTROUTING -p tcp -m tcp -s $CKI_LAN_ADDR --sport $CKI_LAN_PORT -j SNAT --to-source $CKI_WAN_ADDR

References

• Check Port in Used
• Restart Network Interface Using Bash