Some-Shell/pve/port_forward/port_forward.sh

116 lines
3.0 KiB
Bash
Raw Permalink Normal View History

#!/bin/bash
# 添加端口转发的函数
add_forwarding() {
local proto=$1
local external_port=$2
local internal_ip=$3
local internal_port=$4
if [ "$proto" == "ipv4" ]; then
iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport $external_port -j DNAT --to-destination $internal_ip:$internal_port
iptables -A FORWARD -p tcp -d $internal_ip --dport $internal_port -j ACCEPT
echo "已添加 IPv4 转发: $external_port -> $internal_ip:$internal_port"
elif [ "$proto" == "ipv6" ]; then
ip6tables -t nat -A PREROUTING -i vmbr0 -p tcp --dport $external_port -j DNAT --to-destination [$internal_ip]:$internal_port
ip6tables -A FORWARD -p tcp -d $internal_ip --dport $internal_port -j ACCEPT
echo "已添加 IPv6 转发: $external_port -> $internal_ip:$internal_port"
else
echo "无效的协议。请使用 'ipv4' 或 'ipv6'。"
fi
}
# 删除端口转发的函数
delete_forwarding() {
local proto=$1
local external_port=$2
local internal_ip=$3
local internal_port=$4
if [ "$proto" == "ipv4" ]; then
iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport $external_port -j DNAT --to-destination $internal_ip:$internal_port
iptables -D FORWARD -p tcp -d $internal_ip --dport $internal_port -j ACCEPT
echo "已删除 IPv4 转发: $external_port"
elif [ "$proto" == "ipv6" ]; then
ip6tables -t nat -D PREROUTING -i vmbr0 -p tcp --dport $external_port -j DNAT --to-destination [$internal_ip]:$internal_port
ip6tables -D FORWARD -p tcp -d $internal_ip --dport $internal_port -j ACCEPT
echo "已删除 IPv6 转发: $external_port"
else
echo "无效的协议。请使用 'ipv4' 或 'ipv6'。"
fi
}
# 列出当前端口转发的函数
list_forwardings() {
echo "IPv4 转发:"
iptables -t nat -L PREROUTING -v -n
echo ""
echo "IPv6 转发:"
ip6tables -t nat -L PREROUTING -v -n
}
# 修改端口转发的函数
modify_forwarding() {
local proto=$1
local old_external_port=$2
local new_external_port=$3
local internal_ip=$4
local internal_port=$5
# 删除旧的转发规则
delete_forwarding $proto $old_external_port $internal_ip $internal_port
# 添加新的转发规则
add_forwarding $proto $new_external_port $internal_ip $internal_port
}
# 显示用法信息
usage() {
echo "用法: $0 {add|delete|modify|list} [选项]"
echo "命令:"
echo " add <ipv4|ipv6> <外部端口> <内部IP> <内部端口>"
echo " delete <ipv4|ipv6> <外部端口> <内部IP> <内部端口>"
echo " modify <ipv4|ipv6> <旧外部端口> <新外部端口> <内部IP> <内部端口>"
echo " list"
}
# 主脚本逻辑
if [ $# -lt 1 ]; then
usage
exit 1
fi
command=$1
shift
case "$command" in
add)
if [ $# -ne 4 ]; then
usage
exit 1
fi
add_forwarding "$@"
;;
delete)
if [ $# -ne 4 ]; then
usage
exit 1
fi
delete_forwarding "$@"
;;
modify)
if [ $# -ne 5 ]; then
usage
exit 1
fi
modify_forwarding "$@"
;;
list)
list_forwardings
;;
*)
usage
exit 1
;;
esac