shell简单管理iptables脚本,shelliptables脚本

shell简单管理iptables脚本,shelliptables脚本

由于新来的同事对脚本不是很熟悉，为了方便管理服务器上的iptables，于是决定写上个简单的脚本，这样对不是很熟悉脚本的同事都能简单管理。以下的脚本只是用一个循环就搞定了！如果哪里写的不好，或者有更好的想法或者写法，麻烦联系我！！！

[root@localhost ~]# cat iptables.sh

#!/bin/bash

while [ "1" == "1" ]

do

clear

echo "----------------------menu----------------------"

echo "(1) service iptables restart"

echo "(2) iptables add"

echo "(3) iptables delete"

echo "(4) iptables stop"

echo "(5) iptables save(输完ACL后要记得保存和查看)"

echo "(6) iptables status"

echo "(7) iptables ACL list"

echo "(0) exit"

echo "-------------------------------------------------"

echo -n "enter you chose[0-7]:"

read num

if [ ${num} -lt 0 -o ${num} -gt 7 ]

then

echo "this is not between 0-7"

else

if [ "${num}" == "1" ]

then

service iptables restart&

else

if [ "${num}" == "2" ]

#######################################################

then

while [ "1" == "1" ]

do

clear

echo "----------------------add ACL----------------------"

echo "(1) 针对源IP放行添加"

echo "(2) 针对服务器端口放行添加"

echo "(3) 针对有端口和服务的ACL添加（这里要参数IP和端口 例如 0/0 80）"

echo "(4) 自定义添加"

echo "(5) 退回上一级"

echo "-------------------------------------------------"

echo -n "enter you chose[0-4]:"

read aclnum

if [ "${aclnum}" == "1" ]

then

read ip

iptables -A INPUT -s ${ip} -p tcp --dport 22 -j ACCEPT

service iptables save

elif [ "${aclnum}" == "2" ]

then

rad ip

iptables -A INPUT -p tcp --dport ${IP}-j ACCEPT

service iptables save

elif [ "${aclnum}" == "3" ]

then

read ip port

iptables -A INPUT -p tcp -s ${ip} --dport ${port} -j ACCEPT

service iptables save

elif [ "${aclnum}" == "4" ]

then

read addacl

`${addacl}`

service iptables save

else

break

fi

echo -n "是否想继续添加: [y/n]:"

read contine

if [ "${contine}" == "n" -o "${contine}" == "N" ]

then

break

fi

done

#######################################################

else

if [ "${num}" == "3" ]

then

while [ "1" == "1" ]

do

clear

echo "---------------------delete ACL----------------------"

echo "(1) 针对源ip删除"

echo "(2) 针对端口删除"

echo "(3) 针对有端口和服务的ACL删除"

echo "(4) 自定义删除"

echo "(5) 退回上一级"

echo "-------------------------------------------------"

echo -n "enter you chose[0-5]:"

read aclnum

if [ "${aclnum}" == "1" ]

then

read ip

iptables -D INPUT -s ${ip} -p tcp --dport 22 -j ACCEPT

service iptables save

elif [ "${aclnum}" == "2" ]

then

read port

iptables -D INPUT -p tcp --dport ${port}-j ACCEPT

service iptables save

elif [ "${aclnum}" == "3" ]

then

read ip port

iptables -D INPUT -p tcp -s ${ip} --dport ${port} -j ACCEPT

service iptables save

elif [ "${aclnum}" == "4" ]

then

read deleteacl

`${deleteacl}`

service iptables save

else

break

fi

echo -n "是否想继续添加: [y/n]:"

read contine

if [ "${contine}" == "n" -o "${contine}" == "N" ]

then

break

fi

done

###################################################################

else

if [ "${num}" == "4" ]

then

echo -e "`service iptables stop&` "

else

if [ "${num}" == "5" ]

then

echo -e "`service iptables save&`"

else

if [ "${num}" == "6" ]

then

echo -e "`service iptables status&`"

else

if [ "${num}" == "7" ]

then

while [ "1" == "1" ]

do

clear

echo "---------------------list ACL----------------------"

echo "(1) 查看当前正在使用的规则集"

echo "(2) 查看每个策略或每条规则、每条链的简单流量统计"

echo "(3) 查看NAT表"

echo "(4) 自定义查看"

echo "(5) 退回上一级"

echo "-------------------------------------------------"

echo -n "enter you chose[0-5]:"

read aclnum

if [ "${aclnum}" == "1" ]

then

iptables -L

elif [ "${aclnum}" == "2" ]

then

iptables -L -n -v

elif [ "${aclnum}" == "3" ]

then

iptables -L -t nat

elif [ "${aclnum}" == "4" ]

then

read listacl

`${listacl}`

else

break

fi

echo -n "是否想继续添加: [y/n]:"

read contine

if [ "${contine}" == "n" -o "${contine}" == "N" ]

then

break

fi

done

################################################

else

exit

fi

fi

fi

fi

fi

fi

fi

fi

echo -n "Do you contine [y/n]:"

read contine

if [ "${contine}" == "n" -o "${contine}" == "N" ]

then

exit

fi

done