Forum Debian Users Gang

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
        address 83.19.28.220
        netmask 255.255.255.248
        gateway 83.19.28.217
        network 83.19.28.0
        broadcast 83.19.28.255

auto eth1
iface eth1 inet static
address 10.0.0.1
netmask 255.0.0.0

ddns-update-style none;
option domain-name-servers 194.204.159.1, 194.204.152.34;
default-lease-time 600;
max-lease-time 7200;


subnet 10.0.0.0 netmask 255.0.0.0 {
                option subnet-mask 255.0.0.0;
                option routers 10.0.0.1;
                option broadcast-address 10.0.0.255;


        ignore unknown-clients;

        #Admin
        host Ja {
                hardware ethernet 00:30:4F:79:9A:03;
                fixed-address 10.0.0.3;
        }

        #Olga
        host P102_1 {
                hardware ethernet 00:03:0D:84:30:6A;
                fixed-address 10.1.2.1;
        }

        #Basia
        host P102_2 {
                hardware ethernet 00:03:0D:82:82:41;
                fixed-address 10.1.2.2;
        }

        #Ola
        host P103_1 {
                hardware ethernet 00:23:8B:CD:30:0F;
                fixed-address 10.1.3.1;
        }

        #Ada
        host P104_1 {
                hardware ethernet 00:1D:72:01:36:C6;
                fixed-address 10.1.4.1;
        }

        #Zielonka
        host P107_1 {
                hardware ethernet 00:26:2D:7C:10:6D;
                fixed-address 10.1.7.1;
        }

        #Marta
        host P108_1 {
                hardware ethernet 00:0E:2E:8C:C7:5D;
                fixed-address 10.1.8.1;
        }
}

# wlaczenie w kernelu forwardowania
echo 1 > /proc/sys/net/ipv4/ip_forward

# czyszczenie starych regul
iptables -F
iptables -X
iptables -t nat -X
iptables -t nat -F
iptables -t mangle -F
iptables -t mangle -X

# ustawienie domyslnej polityki
iptables -P INPUT ACCEPT
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

# utrzymanie polaczen nawiazanych
iptables -A INPUT -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A FORWARD -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -j ACCEPT -m state --state ESTABLISHED,RELATED

# udostepniaie internetu w sieci lokalnej
iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -j MASQUERADE
iptables -I FORWARD -s 10.0.0.3 -m mac --mac-source 00:30:4F:79:9A:03 -j ACCEPT

iptables -I FORWARD -s 10.1.2.1 -m mac --mac-source 00:03:0D:84:30:6A -j ACCEPT         #P102 Olga
iptables -I FORWARD -s 10.1.2.2 -m mac --mac-source 00:03:0D:82:82:41 -j ACCEPT         #P102 Basia
iptables -I FORWARD -s 10.1.3.1 -m mac --mac-source 00:23:8B:CD:30:0F -j ACCEPT         #P103 Ola
iptables -I FORWARD -s 10.1.4.1 -m mac --mac-source 00:1D:72:01:36:C6 -j ACCEPT         #P104 Ada
iptables -I FORWARD -s 10.1.7.1 -m mac --mac-source 00:26:2D:7C:10:6D -j ACCEPT         #P107 Zielonka
iptables -I FORWARD -s 10.1.8.1 -m mac --mac-source 00:0E:2E:8C:C7:5D -j ACCEPT         #P108 Marta
iptables -I FORWARD -s 10.1.9.1 -m mac --mac-source 00:0B:6A:75:A7:91 -j ACCEPT         #P109 Rafal
iptables -I FORWARD -s 10.1.9.2 -m mac --mac-source 00:26:18:5E:DA:55 -j ACCEPT         #P109 Angela
iptables -I FORWARD -s 10.1.10.1 -m mac --mac-source 90:E6:BA:A0:EE:79 -j ACCEPT        #P110 Jacel
iptables -I FORWARD -s 10.2.5.1 -m mac --mac-source 40:61:86:19:64:BA -j ACCEPT         #P205 Sandra
iptables -I FORWARD -s 10.2.5.2 -m mac --mac-source E0:CB:4E:34:5F:72 -j ACCEPT         #P205 Marta
iptables -I FORWARD -s 10.2.6.1 -m mac --mac-source 00:0C:76:E5:46:15 -j ACCEPT         #P206 Jezus
iptables -I FORWARD -s 10.2.7.1 -m mac --mac-source 40:61:86:3E:03:B6 -j ACCEPT         #P207 Ogor
iptables -I FORWARD -s 10.2.7.2 -m mac --mac-source 00:03:0D:82:72:C4 -j ACCEPT         #P207 Henry
iptables -I FORWARD -s 10.2.10.1 -m mac --mac-source 00:0C:76:6A:A5:68 -j ACCEPT        #P210 Ania l2
iptables -I FORWARD -s 10.3.2.1 -m mac --mac-source 00:26:9E:10:47:F3 -j ACCEPT         #P302 Kamil
iptables -I FORWARD -s 10.3.5.1 -m mac --mac-source 00:16:36:48:C6:89 -j ACCEPT         #P305 Ula
iptables -I FORWARD -s 10.3.5.2 -m mac --mac-source 00:24:1D:D4:85:18 -j ACCEPT         #P305 Martyna
iptables -I FORWARD -s 10.3.6.1 -m mac --mac-source 00:16:44:99:E8:47 -j ACCEPT         #P306 Artur
iptables -I FORWARD -s 10.3.6.2 -m mac --mac-source 00:C0:A8:D9:F7:DB -j ACCEPT         #P306 Tomek
iptables -I FORWARD -s 10.3.7.1 -m mac --mac-source 00:23:54:54:49:A2 -j ACCEPT         #P307 Wojtek
iptables -I FORWARD -s 10.3.9.1 -m mac --mac-source 00:1E:33:C7:4F:51 -j ACCEPT         #P306 Alina