PVE iptables映射端口管理脚本

12次阅读

共计 1806 个字符，预计需要花费 5 分钟才能阅读完成。

用 gpt4.0 写的，一次成功，没有报错，后面又让他小修小补了一下，gpt 是真好用

使用脚本前先 apt install iptables-persistent 安装 iptables 持久化，否则 iptables 默认重启后配置消失

#!/bin/bash

# 定义公网接口变量，根据实际情况修改
PUBLIC_INTERFACE=vmbr0

# 保存 iptables 规则
save_iptables_rules() {
iptables-save > /etc/iptables/rules.v4
echo “Iptables rules saved.”
}

# 添加端口映射
add_port_mapping() {
echo “Enter the VM IP address:”
read vm_ip
echo “Enter the public port:”
read public_port
echo “Enter the VM port:”
read vm_port

iptables -t nat -A PREROUTING -i $PUBLIC_INTERFACE -p tcp –dport $public_port -j DNAT –to-destination $vm_ip:$vm_port
iptables -A FORWARD -p tcp -d $vm_ip –dport $vm_port -j ACCEPT
save_iptables_rules
echo “Port mapping added: Public port $public_port to VM $vm_ip:$vm_port”
}

# 删除端口映射
delete_port_mapping() {
echo “Enter the VM IP address:”
read vm_ip
echo “Enter the public port:”
read public_port
echo “Enter the VM port:”
read vm_port

iptables -t nat -D PREROUTING -i $PUBLIC_INTERFACE -p tcp –dport $public_port -j DNAT –to-destination $vm_ip:$vm_port
iptables -D FORWARD -p tcp -d $vm_ip –dport $vm_port -j ACCEPT
save_iptables_rules
echo “Port mapping deleted: Public port $public_port to VM $vm_ip:$vm_port”
}

# 改进的查看当前的端口映射
list_port_mappings() {
echo “Current port mappings:”
iptables -t nat -L PREROUTING -n -v | grep DNAT | while read line; do
      # 提取公网端口
      public_port=$(echo “$line” | awk ‘{print $11}’ | sed -n -e ‘s/^.*dpt://p’)
      # 提取目标 IP 和端口
      target=$(echo “$line” | awk ‘{print $NF}’)
      # 如果没有提取到公网端口，则显示为 N /A
      if [-z “$public_port”]; then
         public_port=”N/A”
      fi
      echo “$public_port -> $target”
done
}

# 交互式选择操作
echo “Choose an operation:”
echo “1) Add port mapping”
echo “2) Delete port mapping”
echo “3) List port mappings”
read operation

case $operation in
1)
      add_port_mapping
      ;;
2)
      delete_port_mapping
      ;;
3)
      list_port_mappings
      ;;
*)
      echo “Invalid option selected.”
      exit 1
      ;;
esac

exit 0
复制代码

GPT 是真好用，其中 list_port_mappings 存在比较繁琐的取值，gpt 也是顺利搞定

正文完