iptables rules to pass packets to nfqueue

imgurbot12 · Jan 20, 2018 · d4001eb · d4001eb
1 parent 9e3646d
commit d4001eb
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/iptables.sh b/iptables.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+# NetFilterQueue Rules
+sudo iptables -A INPUT -m conntrack --ctstate NEW,RELATED,INVALID -j NFQUEUE --queue-num=0
+sudo iptables -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
+
+sudo iptables -A OUTPUT -m conntrack --ctstate NEW,RELATED,INVALID -j NFQUEUE --queue-num=0
+sudo iptables -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT
+
+sudo iptables -A FORWARD -m conntrack --ctstate NEW,RELATED,INVALID -j NFQUEUE --queue-num=0
+sudo iptables -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT