comeÃo

FIREWALL.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+
+source CONFIG.sh
+
+IP_EXTERNAL="20.60.0.1"
+IP_INTERNAL="10.60.0.1"
+
+sudo ifconfig enp0s8 $IP_EXTERNAL netmask 255.255.255.0
+sudo ifconfig enp0s9 $IP_INTERNAL netmask 255.255.255.0
+
+# instalar mod security e apache
+function instalar() {
+    yum list installed "$1" &>/dev/null && return || sudo yum install -y "$1"
+}
+
+instalar epel_release
+instalar httpd
+instalar mod_security
+instalar mod_security_crs
+
+# nat
+sudo sysctl -w net.ipv4.ip_forward=1
+
+sudo iptables -t nat -F
+sudo iptables -A FORWARD -i enp0s9 -o enp0s8 -j ACCEPT
+sudo iptables -A FORWARD -i enp0s8 -o enp0s9 -m state --state ESTABLISHED,RELATED -j ACCEPT
+sudo iptables -t nat -A POSTROUTING -o enp0s8 -j MASQUERADE
+sudo iptables-save > /etc/sysconfig/iptables
+
+cp conf/httpd.conf /etc/httpd/httpd.conf