#!/bin/sh
IPE1="195.82.184.83"
MASK1="255.255.255.240"
IPE2="192.168.172.1"
MASK2="255.255.255.0"
IPE3="195.82.184.97"
MASK3="255.255.255.240"
/sbin/ifconfig lo 127.0.0.1
/sbin/route add -net 127.0.0.0 netmask 255.0.0.0 lo
GETEWAY="195.82.184.81"
BROADCAST=`/bin/ipmask ${MASK1} ${IPE1} | cut -f 1 -d ' '`
NETWORK=`/bin/ipmask ${MASK1} ${IPE1} | cut -f 2 -d ' '`
BROADCAST2=`/bin/ipmask ${MASK2} ${IPE2} | cut -f 1 -d ' '`
NETWORK2=`/bin/ipmask ${MASK2} ${IPE2} | cut -f 2 -d ' '`
BROADCAST3=`/bin/ipmask ${MASK3} ${IPE3} | cut -f 1 -d ' '`
NETWORK3=`/bin/ipmask ${MASK3} ${IPE3} | cut -f 2 -d ' '`

/sbin/ifconfig eth0 ${IPE1} broadcast ${BROADCAST} netmask ${MASK1}
/sbin/ifconfig eth1 ${IPE2} netmask ${MASK2} broadcast ${BROADCAST2}
/sbin/ifconfig eth1:1 ${IPE3} netmask ${MASK3} broadcast ${BROADCAST3}
/sbin/route add default gw ${GETEWAY} metric 1
/sbin/route add -net ${IPE2} dev eth1
/sbin/route add -net ${IPE3} dev eth1:1

# Adresy oczywiscie dla twojej sieci twoje :)
# do netu
net0=195.82.184.80
mask0=255.255.255.240
#prywatne w zasadzie tylko ten jest potrzebny :)
net1=192.168.172.0
mask1=255.255.255.0
#publiczne
net2=195.82.184.96
mask2=255.255.255.240
.
.
.
# Uzytkownicy dla wszystkich
sed -n /^/P /etc/hosts |while read IP nazwa ;do
    $i -A INPUT -i eth1 -s $IP -j ACCEPT
    $i -A FORWARD -s $IP -j ACCEPT
done

# maskarada tylko dla prywatnych !!
sed -n /^/P /etc/hosts |while read IP nazwa ;do
        set -- `ipmask $mask1 $IP`
        if [ $2 = $net1 ];then
            $i -t nat -A POSTROUTING  -s $IP -j MASQUERADE
        fi
done