#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
# Add VLAN
#modprobe 8021q
#ip link add link eno2 name eno2.100 type vlan id 100
#ip link add link eno2 name eno2.101 type vlan id 101
#ip link set dev eno2.100 up
#ip link set dev eno2.101 up
#ip addr add 172.16.100.1/24 dev eno2.100
#ip addr add 172.16.101.1/24 dev eno2.101

#clearing iptables 
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

#NAT
iptables -t nat -A POSTROUTING -o eno2 -j MASQUERADE
iptables -A FORWARD -i eno1 -o eno2 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eno2 -o eno1 -j ACCEPT

#transparent proxy
#iptables -t nat -A PREROUTING -i eno2 -p tcp --dport 80 -j REDIRECT --to-port 3128
#iptables -t nat -A PREROUTING -i eno2 -p tcp --dport 443 -j REDIRECT --to-port 3128

exit 0