iptables -t mangle -D FORWARD -i eth1 -j STAT >/dev/null 2>&1
iptables -t mangle -D FORWARD -o eth1 -j STAT >/dev/null 2>&1
iptables -t mangle -F STAT >/dev/null 2>&1
iptables -t mangle -X STAT >/dev/null 2>&1
iptables -t mangle -N STAT
iptables -t mangle -I FORWARD -o eth1 -j STAT
iptables -t mangle -I FORWARD -i eth1 -j STAT

# i dla każdego komputera po dwie reguły
iptables -t mangle -A STAT -d 192.168.3.4
iptables -t mangle -A STAT -s 192.168.3.4
iptables -t mangle -A STAT -d 192.168.3.5
iptables -t mangle -A STAT -s 192.168.3.5
iptables -t mangle -A STAT -d 192.168.3.6
iptables -t mangle -A STAT -s 192.168.3.6
iptables -t mangle -A STAT -d 192.168.3.7
iptables -t mangle -A STAT -s 192.168.3.7
iptables -t mangle -A STAT -d 192.168.3.8
iptables -t mangle -A STAT -s 192.168.3.8
...
...

[root@serwer rafal1435]# /etc/rc.d/skrypt start

 ----ON----

iptables v1.3.4: host/network `::1' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.4: host/network `::1' not found
Try `iptables -h' or 'iptables --help' for more information.

#!/bin/bash
. /etc/rc.conf
i="/usr/sbin/iptables"

case "$1" in
start)

echo ""
echo " ----ON---- "
echo ""

# --- kasuje odwolania
$i -t mangle -D INPUT -j STAT >/dev/null 2>&1
$i -t mangle -D OUTPUT -j STAT >/dev/null 2>&1
$i -t mangle -D FORWARD -j STAT >/dev/null 2>&1

# --- kasuje reguly
$i -t mangle -F STAT >/dev/null 2>&1
# --- kasuje lancuch
$i -t mangle -X STAT >/dev/null 2>&1


# --- dodaje lancuch
$i -t mangle -N STAT

# --- dodaje odwolania
$i -t mangle -I INPUT -j STAT
$i -t mangle -I OUTPUT -j STAT
$i -t mangle -I FORWARD -j STAT

#--------------------------------------------------------

# --- Wyciaga IP z pliku /etc/hosts

grep "^" /etc/hosts | grep -v "^#"|grep [0123456789] |grep -v 127.0.0.0 |while read IP nazwa ; do

# --- tworzy reguly zliczajace
iptables -t mangle -A STAT -s $IP -j RETURN
iptables -t mangle -A STAT -d $IP -j RETURN

#echo $IP

done

#--------------------------------------------------------

;;
stop)

echo ""
echo " ----OFF---- "
echo ""

# --- kasuje odwolania
$i -t mangle -D INPUT -j STAT
$i -t mangle -D OUTPUT -j STAT
$i -t mangle -D FORWARD -j STAT

# --- kasuje reguly
$i -t mangle -F STAT

# --- kasuje lancuch
$i -t mangle -X STAT


;;
restart)
$0 stop
sleep 1
$0 start
;;
*)

echo ""
echo " uzyj polecenie z argumentem [ start | stop | restart ] "
echo ""

exit
;;
esac

# Tutaj umiesc komendy uruchamiajace twoje programy.
hdparm -c1 -d1 -k1 /dev/hda
/etc/rc.d/skrypt start
/etc/rc.d/httpd start
niceshaper0.6 start
/etc/rc.d/samba start
/etc/rc.d/mldonkey start
/etc/rc.d/rc.zewip20 start
/etc/rc.d/rc.zewip30 start
/etc/rc.d/rc.zewip40 start

    # zaplotkuj jesli nie chcesz udostepniac serwera IMAPS do inetu
    if [ "$IMAPS" = "1" ]; then
        $i -A INPUT -p tcp -i $EXTIF --dport 993 -j ACCEPT
        $i -A INPUT -p udp -i $EXTIF --dport 993 -j ACCEPT
    fi
    $i -A INPUT -p tcp -i $EXTIF --dport 9010 -j ACCEPT
    $i -A INPUT -p udp -i $EXTIF --dport 9010 -j ACCEPT
    $i -A INPUT -p tcp -i $EXTIF --dport 45146 -j ACCEPT
    $i -A INPUT -p udp -i $EXTIF --dport 45146 -j ACCEPT
    $i -A INPUT -p tcp -i $EXTIF --dport 45147 -j ACCEPT
    $i -A INPUT -p udp -i $EXTIF --dport 45147 -j ACCEPT
    $i -A INPUT -p tcp -i $EXTIF --dport 4080 -j ACCEPT
    $i -A INPUT -p udp -i $EXTIF --dport 4080 -j ACCEPT

    # pingi pozwalamy