#!/bin/bash
iptables -F
#--- Check IP WAN ---#
ppp0=`ifconfig | grep -A1 ppp0 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
ppp1=`ifconfig | grep -A1 ppp1 | tail -1 | cut -d : -f 2 | cut -f 1 -d " "`
#--- Del nat ppp0-ppp1 ---#
iptables -t nat -D POSTROUTING -o ppp0 -j MASQUERADE
iptables -t nat -D POSTROUTING -o ppp1 -j MASQUERADE
#--- Add SNAT ppp0-ppp1 ---#
iptables -t nat -A POSTROUTING -o ppp0 -j SNAT --to-source $ppp0
iptables -t nat -A POSTROUTING -o ppp1 -j SNAT --to-source $ppp1
#---Dota---#
/home/dota
############
#--- Control Bittorrent To ppp1&ppp1
iptables -t filter -A FORWARD -i ppp0 -m ipp2p --bit -j DROP
iptables -t filter -A FORWARD -i ppp1 -m ipp2p --bit -j ACCEPT
iptables -t mangle -A PREROUTING -i ppp0 -m layer7 --l7proto bittorrent -j DROP
iptables -t mangle -A PREROUTING -i ppp1 -m layer7 --l7proto bittorrent -j ACCEPT
#--- HTTP Proxy service ---#
if [ -f /var/run/squid.pid ]; then
iptables -t nat -D PREROUTING -s 0/0 -i eth1 -p tcp -m multiport --dport 80,88,5977,9898 -j REDIRECT --to-ports 3128
iptables -t nat -D OUTPUT -p tcp -d 202.43.33.122 --dport 80 -j DNAT --to 202.43.33.122:9898
iptables -t nat -A PREROUTING -s 0/0 -i eth1 -p tcp -m multiport --dport 80,88,5977,9898 -j REDIRECT --to-ports 3128
iptables -t nat -I OUTPUT -p tcp -d 202.43.33.122 --dport 80 -j DNAT --to 202.43.33.122:9898
fi
#--- FTP Proxy service ---#
if [ -f /var/run/frox.pid ]; then
iptables -t nat -D PREROUTING -p tcp -s 0/0 -m multiport --dport 21,8021 -j REDIRECT --to 2121
iptables -t nat -A PREROUTING -p tcp -s 0/0 -m multiport --dport 21,8021 -j REDIRECT --to 2121
fi
if [ -f /var/run/imspector.pid ]; then
iptables -t nat -D PREROUTING -p tcp -m multiport --destination-port 1863,6667,5050,5190 -j REDIRECT --to-ports 16667
iptables -t nat -A PREROUTING -p tcp -m multiport --destination-port 1863,6667,5050,5190 -j REDIRECT --to-ports 16667
fi
### WEB ###
# Multimedia Ports #
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -m multiport --dports 554,1935,8000,8080,9999 -j ACCEPT
iptables -t mangle -A MULTIWAN_MARK -i $lan -p udp -m multiport --dports 554,1935,8000,8080,9999 -j ACCEPT
# FTP,SSH,HTTP,HTTPS,MSN,PIRCH #
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -m multiport --dports 20:25,22,80,81,443,1863,6667 -j ACCEPT
iptables -t mangle -A MULTIWAN_MARK -i $lan -p udp -m multiport --dports 20:25,22,80,81,443,1863,6667 -j ACCEPT
#
www.musicstarcool.com #
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d 210.1.58.56 --dport 9010 -j ACCEPT
iptables -t mangle -A MULTIWAN_MARK -i $lan -p udp -d 210.1.58.56 --dport 9010 -j ACCEPT
#
www.balldee.com #
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d www22.xatech.com --dport 10033 -j ACCEPT
iptables -t mangle -A MULTIWAN_MARK -i $lan -p udp -d www22.xatech.com --dport 10033 -j ACCEPT
# CAMFROG #
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 61.19.241.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 61.19.247.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 61.19.248.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 61.19.249.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 98.126.28.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 122.155.0.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 122.155.1.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 210.1.58.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 203.146.170.0/24 -j ACCEPT
# iptables -t mangle -A MULTIWAN_MARK -i $lan -d 203.170.145.0/24 -j ACCEPT
#
#
#############################################################################################################################
#--- By Pass Proxy ----#
#--- gmember ---#
iptables -t nat -I PREROUTING -i eth1 -p tcp -d 203.151.207.0/24 --dport 80 -j ACCEPT
#--- uploadD ---#
iptables -t nat -I PREROUTING -i eth+ -p tcp -d uploadd.com --dport 80 -j ACCEPT
#--- talesrunner ---#
#iptables -t nat -I PREROUTING -i eth+ -p tcp -d 203.113.8.130 --dport 80 -j ACCEPT
#iptables -t nat -I PREROUTING -i eth+ -p tcp -d 203.113.9.104 --dport 80 -j ACCEPT
#iptables -t nat -I PREROUTING -i eth+ -p tcp -d 203.113.9.105 --dport 80 -j ACCEPT
#############################################################################################################################
#--- Multiwan service ---#
lan=192.168.105.0/16
Game=MULTIWAN_ppp0
Net1=MULTIWAN_ppp1
#############
## Block A ##
#############
#iptables -t mangle -A MULTIWAN_MARK -s $lan -j $Net1
#############
## Block B ##
#############
# Hon
iptables -t mangle -A MULTIWAN_MARK -d 0.0.0.0/0 -p udp --dport 11200:11500,4931,4930 -j $Game
iptables -t mangle -A MULTIWAN_MARK -d 174.36.178.0/24 -p tcp --dport 11000:11500,4931,4930 -j $Game
# AOM
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 45800:45809 -j $Game
#--- ACEOnline
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 15100:15103 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 15150:15153 -j $Game
#--- Rappelz
#iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d 122.155.2.0/24 -m multiport --dports 4500:4600 -j $Game
#iptables -t mangle -A MULTIWAN_MARK -s $lan -d 122.155.2.0/24 -j $Game
#iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -m multiport --dport 4500:4520 -j Games
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dports 4500:4600 -j $Game
#--- Audition
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 18200:18201 -j $Game
#--- Yulgang
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 2424 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 16100:16110 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 16000:16011 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 16100:16110 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 16000:16011 -j $Game
#--- Cabal
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 38100:38500 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 63112:63115 -j $Game
#--- Dark_Story
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 14400:14605 -j $Game
#--- ECO
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 12001:12400 -j $Game
#--- Ghost_online
#iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13000:13999 -j $Game
# Ghost
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 1041:1064,13022:13024 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13001,13032,13070 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m --sport 8000 -j $Game
#--- GE
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 2000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7000:7003 -j $Game
#--- Hip street
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 4000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 791 -j $Game
#--- Luna
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 15000:15002 -j $Game
#--- Pangya
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10104 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 20201:20205 -j $Game
#--- Pangya_Upgrade
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 44999 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 44999 -j $Game
#--- Ran
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 5001 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 5105 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 5502 -j $Game
#--- SF
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 27930:27931 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 20000:21000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 20000:21000 -j $Game
#--- Freestyle
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10001:10030 -j $Game
#--- TRO
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 5000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 6900 -j $Game
#--- RO_Upgrade
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 27931 -j $Game
#--- TaleRunner
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 9000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 9153 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 9155 -j $Game
#--- WL
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 6414 -j $Game
#--- Rebirth
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13011 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13022 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13033 -j $Game
#--- MapleStory
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 8484 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 8585:8586 -j $Game
#--- Flyff
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 15400 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 28000 -j $Game
#--- RYL
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10103:10104 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10110 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10200:10215 -j $Game
#--- KhanOnlin
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 2100:2115 -j $Game
#--- Lastchaos
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 4001 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 4010 -j $Game
#--- Linage2
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7777 -j $Game
#--- Nage
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 100:300 -j $Game
#--- PerfectWorld
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 1899 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 29000 -j $Game
#--- Trickster
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 9980 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10006 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13339 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 22006 -j $Game
#--- 16Pound
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 65010:65015 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 65115 -j $Game
#--- Raycity
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 2170:2192 -j $Game
#--- PVP
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 6680:6700 -j $Game
#--- SuddenAttack
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 12000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 13000:14000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 15000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m tcp --dport 27000:27100 -j $Game
#--- ZhuXian
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 29000 -j $Game
#--- CMR_Dance
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 1221 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7341 -j $Game
#iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 3001:3999 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7700:7800 -j $Game
#--- Ts
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 4500 -j $Game
#--- 9HERO
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 9000:9010 -j $Game
#--- MU
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 55600:55900 -j $Game
#--- Dekaron
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7880:7881 -j $Game
#--- PointBlank ---#
#iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 39190 -j $Game
#--- Cre Dot A
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --sport 6000:6255 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --sport 6000:6255 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --sport 7000:7255 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --sport 7000:7255 -j $Game
#--- Join Dot A
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 6000:6255 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7000:7255 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 6000:6255 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 7000:7255 -j $Game
#--- GG
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 8688 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 8688 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7456 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 7456 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 1513 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 1513 -j $Game
#--- Wffm
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 15000:15001 -j $Game
#---Richman
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 21002 -j $Game
#---6sense
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 5021 -j $Game
#---zone4
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 30010 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 29996 -j $Game
#---zero
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 5816 -j $Game
#--- Zone4
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d 58.147.89.0/24 -p tcp --dport 29996:30100 -j $Game
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d 58.147.89.0/24 -p udp --dport 29996:30100 -j $Game
#--- X-SHOT
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7341 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7451 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7876 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 7777:7876 -j $Game
#--- ICAFE_PLUS
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 2106 -j $Game
# item icafe #
iptables -t mangle -I MULTIWAN_MARK -d icafe.gg.in.th -j $Game
iptables -t nat -I PREROUTING -p tcp -d icafe.gg.in.th --dport 80 -j ACCEPT
#--- Control Cabal to ppp1
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m multiport --dport 38100:38500 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m multiport --dport 38100:38500 -j $Game
###############
### Block C ###
###############
#--- Asiasoft Ragnarok
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.0.0/16 -j $Game
#---Rappelz
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 122.155.2.0/24 -j $Game
#--- ABC
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 210.86.180.139/32 -j $Game
#--- Audition Kerean
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 210.118.53.0/24 -j $Game
#--- CSO
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 202.43.35.0/24 -j $Game
#--- Freestyl
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.179.0/24 -j $Game
#--- Getamped
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 210.86.180.0/24 -j $Game
#--- SuddenAttack
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.130.0/24 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.91.72.0/24 -j $Game
#--- Linage2
iptables -t nat -I PREROUTING -i $lan -p tcp -d 61.90.252.0/24 --dport 2009 -j ACCEPT
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d 61.90.252.0/24 -m multiport --dports 2100:3000,7777 -j $Game
#--- Pucca
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 58.64.0.0/16 -j $Game
#--- NosTale
#iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.121.165.0/24 -j $Game
iptables -t mangle -A MULTIWAN_MARK -i $lan -p tcp -d 61.91.122.0/24 -m multiport --dport 4001 -j $Game
#--- BnB
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.179.0/24 -j $Game
#--- Maple
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.90.227.0/24 -j $Game
# SA
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.90.203.0/24 -j $Game
# SF
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.130.0/24 -j $Game
#--- Ts
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.137.0/24 -j $Game
#--- TalesRunner
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.113.0.0/16 -j $Game
#--- Yulgang
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.179.0/24 -j $Game
#--- Tricket
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.90.203.0/24 -j $Game
#--- 9HERO
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 202.43.35.0/24 -j $Game
#--- MU
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 202.151.180.21 -j $Game
#--- Ip Bonus
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.244.12 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.244.13 -j $Game
#--- AOM ---#
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.132.91 -j $Game
#--- Raycity
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.19.242.0/24 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 58.147.89.0/24 -j $Game
#--- Dekaron
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.166.0/24 -j $Game
#--- PointBlank ---#
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.91.72.0/24 -j $Game
#--- ZhuXian
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.91.122.0/24 -j $Game
#--- Wffm
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.130.94 -j $Game
#---Richman
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 203.144.132.64 -j $Game
#---sixsense
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 202.170.121.9 -j $Game
#---zone4
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 58.147.89.41 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 58.147.89.42 -j $Game
#---zero
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -d 202.43.35.0/24 --dport 5816 -j $Game
##--- Control FIFA Online to ppp0
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 6215:6216 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 6316 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 7299 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p tcp -m tcp --dport 10000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 7299 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -p udp -m udp --dport 10000 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 61.91.68.0/24 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 159.153.186.14 -j $Game
iptables -t mangle -A MULTIWAN_MARK -s $lan -d 159.153.186.15 -j $Game
iptables -t nat -I PREROUTING -p tcp -d 61.91.68.0/24 --dport 1863 -j ACCEPT
#--------------------------------------------------------------------------------#
# Control Bot ygl
/sbin/iptables -t nat -I PREROUTING -d 203.150.228.108 -p tcp --dport 80 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.150.228.108 -p tcp --dport 80 -j $Game
# Control Bot Kore
/sbin/iptables -t nat -I PREROUTING -d 203.150.228.115 -p tcp --dport 80 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.150.228.115 -p tcp --dport 80 -j $Net1
#--------------------------------------------------------------------------------#
#--- Ping to ppp1---#
iptables -t mangle -A MULTIWAN_MARK -s $lan -p icmp --icmp-type echo-request -j $Game
#--------------------------------------------------------------------------------#
#CamFrog Zone
# xX_18UP_LadY_ShoW_GirIs_Xx
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 210.1.58.26 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 210.1.58.26 -j ACCEPT
# XxllX_Thai_Lady_Sh0w_Girls_XllxX
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.146.253.82 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 203.146.253.82 -j ACCEPT
# GAY_REALITY_HITZ
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.151.233.181 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 203.151.233.181 -j ACCEPT
# _x0x__Hot_Thai_GirL__x0x_ 203.146.253.117
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.146.253.117 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 203.146.253.117 -j ACCEPT
# OxoxO_BangKoK_OnLin3_OxoxO 203.146.170.180
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.146.170.180 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 203.146.170.180 -j ACCEPT
#GAY_Ma_Do_K 122.155.6.88
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 122.155.6.88 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 122.155.6.88 -j ACCEPT
# 8o8___NoBoDy_18x_GiRlS___8o8 122.155.3.96
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 122.155.3.96 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 122.155.3.96 -j ACCEPT
# GAY_ZEED 61.19.248.97
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 61.19.248.97 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 61.19.248.97 -j ACCEPT
# -------------------------------------------------------------------#
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.146.170.184 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 203.146.170.184 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 61.19.241.53 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 61.19.241.53 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 202.170.120.210 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 202.170.120.210 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 203.170.145.34 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 203.170.145.34 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 202.129.207.6 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 202.129.207.6 -j ACCEPT
sbin/iptables -t mangle -A MULTIWAN_MARK -d 122.155.1.223 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 122.155.1.223 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 61.19.247.121 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 61.19.247.121 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 61.19.247.121 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 61.19.247.121 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 209.11.241.150 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 209.11.241.150 -j ACCEPT
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 98.126.47.119 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 98.126.47.119 -j ACCEPT
# CaMFrOG_DeAF_EnjOY_HoME #DEAV#
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 61.19.241.58 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 61.19.241.58 -j ACCEPT
# Xx_007_Deaf_Thailandia_007_xX #DEAV#
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 219.75.254.169 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 219.75.254.169 -j ACCEPT
# CaMFrOG_DeAF_EnjOY_Home # DEAF #
/sbin/iptables -t mangle -A MULTIWAN_MARK -d 61.19.241.0/24 -j $Net1
/sbin/iptables -t nat -I PREROUTING -d 61.19.241.0/24 -j ACCEPT
#--------------------------------------------------------------------------------#
iptables -A INPUT -m state --state INVALID -j DROP
iptables -A INPUT -p tcp -m tcp --tcp-flags SYN,ACK SYN,ACK -m state --state NEW -j REJECT --reject-with tcp-reset
iptables -A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
iptables -A INPUT -s 127.0.0.0/255.0.0.0 -i ppp0 -j DROP
iptables -A INPUT -s 169.254.0.0/255.255.0.0 -i ppp0 -j DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -i pptp+ -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A INPUT -i eth+ -j ACCEPT
iptables -A INPUT -i ppp+ -p icmp -m icmp --icmp-type 0 -j ACCEPT
iptables -A INPUT -i ppp+ -p icmp -m icmp --icmp-type 3 -j ACCEPT
iptables -A INPUT -i ppp+ -p icmp -m icmp --icmp-type 8 -j ACCEPT
iptables -A INPUT -i ppp+ -p icmp -m icmp --icmp-type 11 -j ACCEPT
iptables -A INPUT -i ppp+ -p udp -m udp --sport 67 --dport 68 -j ACCEPT
iptables -A INPUT -i ppp+ -p tcp -m tcp --sport 67 --dport 68 -j ACCEPT
#--- Incoming Port ---#
iptables -A INPUT -d 0/0 -p tcp -m tcp --dport 80 -j ACCEPT
iptables -A OUTPUT -s 0/0 -o ppp+ -p tcp -m tcp --sport 80 -j ACCEPT
iptables -A INPUT -d 0/0 -p tcp -m tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -s 0/0 -o ppp+ -p tcp -m tcp --sport 22 -j ACCEPT
iptables -A INPUT -d 0/0 -p tcp -m tcp --dport 81 -j ACCEPT
iptables -A OUTPUT -s 0/0 -o ppp+ -p tcp -m tcp --sport 81 -j ACCEPT
iptables -A INPUT -d 0/0 -p tcp -m tcp --dport 87 -j ACCEPT
iptables -A OUTPUT -s 0/0 -o ppp+ -p tcp -m tcp --sport 87 -j ACCEPT
iptables -A INPUT -d 0/0 -i ppp+ -p udp -m udp --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -d 0/0 -i ppp+ -p tcp -m tcp --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i ppp+ -j DROP
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth+ -j ACCEPT
iptables -A FORWARD -i pptp+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT
iptables -A FORWARD -j DROP
iptables -A OUTPUT -o lo -j ACCEPT
iptables -A OUTPUT -o pptp+ -j ACCEPT
iptables -A OUTPUT -o tun+ -j ACCEPT
iptables -A OUTPUT -o eth+ -j ACCEPT
iptables -A OUTPUT -o ppp+ -p icmp -j ACCEPT
iptables -A OUTPUT -o ppp+ -p udp -m udp --sport 68 --dport 67 -j ACCEPT
iptables -A OUTPUT -o ppp+ -p tcp -m tcp --sport 68 --dport 67 -j ACCEPT
iptables -A OUTPUT -o ppp+ -j ACCEPT
iptables -A drop-lan -j ACCEPT
# item icafe++ #
iptables -t mangle -I MULTIWAN_MARK -i eth+ -d icafe.gg.in.th -j $Game
iptables -t nat -I PREROUTING -p tcp -d icafe.gg.in.th --dport 80 -j ACCEPT