Lines Matching refs:IPTABLES
4 # This script sets up any static iptables rules required for the Wrigley. For
19 # connection-based authentication scheme instead. By using iptables, we are
35 IPTABLES="/system/bin/iptables"
40 $IPTABLES -F oem_out_wrigley # No-op on 1st inst of this script
41 $IPTABLES -N oem_out_wrigley # No-op on 2nd-Nth inst of this script
42 $IPTABLES -A oem_out -d 192.168.20.2 -j oem_out_wrigley
47 $IPTABLES -F oem_out_wrigley_sens # No-op on 1st inst of this script
48 $IPTABLES -F oem_out_wrigley_other # No-op on 1st inst of this script
49 $IPTABLES -N oem_out_wrigley_sens # No-op on 2nd-Nth inst of this script
50 $IPTABLES -N oem_out_wrigley_other # No-op on 2nd-Nth inst of this script
51 $IPTABLES -A oem_out_wrigley -p tcp --dport 3265 -j oem_out_wrigley_sens
52 $IPTABLES -A oem_out_wrigley -p tcp --dport 3267 -j oem_out_wrigley_sens
53 $IPTABLES -A oem_out_wrigley -p tcp --dport 11000 -j oem_out_wrigley_sens
54 $IPTABLES -A oem_out_wrigley -j oem_out_wrigley_other
57 $IPTABLES -A oem_out_wrigley_sens -m owner --uid-owner 0 -j ACCEPT
58 $IPTABLES -A oem_out_wrigley_sens -m owner --uid-owner 1001 -j ACCEPT
59 $IPTABLES -A oem_out_wrigley_sens -j REJECT
62 $IPTABLES -A oem_out_wrigley_other -m owner --uid-owner 0 -j ACCEPT
63 $IPTABLES -A oem_out_wrigley_other -m owner --uid-owner 1001 -j ACCEPT
64 $IPTABLES -A oem_out_wrigley_other -m owner --uid-owner 2000 -j ACCEPT
65 $IPTABLES -A oem_out_wrigley_other -j REJECT
74 $IPTABLES -F oem_fwd_wrigley # No-op on 1st inst of this script
75 $IPTABLES -N oem_fwd_wrigley # No-op on 2nd-Nth inst of this script
76 $IPTABLES -A oem_fwd -d 192.168.20.2 -j oem_fwd_wrigley
77 $IPTABLES -A oem_fwd -s 192.168.20.2 -j oem_fwd_wrigley
78 $IPTABLES -A oem_fwd_wrigley -p tcp --dport 3265 -j REJECT
79 $IPTABLES -A oem_fwd_wrigley -p tcp --dport 3267 -j REJECT
80 $IPTABLES -A oem_fwd_wrigley -p tcp --dport 11000 -j REJECT
81 $IPTABLES -A oem_fwd_wrigley -j ACCEPT
84 $IPTABLES -A oem_fwd -d 192.168.20.2 -j REJECT
93 $IPTABLES -t nat -A oem_nat_pre -p tcp -d 192.168.16.2 --dport 11006 -j DNAT --to 192.168.20.2:11006
