vpnroute.sh

vpnroute.sh

#!/bin/sh

GW_IFACE="mun0"
GW_IP="172.16.37.1"
LOCAL_IP="172.16.37.2"
ROUTE_PORTS="80 443 25 110 143 993"
MARK=2
TABLE=2


case "$1" in

start)
	ip rule add fwmark $MARK table $TABLE
	ip route add default via $GW_IP table $TABLE

	ip route flush cache

	for i in $ROUTE_PORTS; do
		iptables -t mangle -A OUTPUT -p tcp --dport $i -j MARK --set-mark $MARK
	done

	iptables -t nat -A POSTROUTING -o $GW_IFACE -j SNAT --to-source $LOCAL_IP

	sysctl -w net.ipv4.conf.${GW_IFACE}.rp_filter=2
	;;
stop)
	ip rule del fwmark $MARK table $TABLE
	ip route del default via $GW_IP table $TABLE
	ip route flush cache
	
	for i in $ROUTE_PORTS; do
		iptables -t mangle -D OUTPUT -p tcp --dport $i -j MARK --set-mark $MARK
	done

	iptables -t nat -D POSTROUTING -o $GW_IFACE -j SNAT --to-source $LOCAL_IP

	;;

*) 	echo "start/stop"
	;;
esac