diff --git a/README.md b/README.md index 2613010..44c4ea0 100644 --- a/README.md +++ b/README.md @@ -34,12 +34,27 @@ iptables -t nat -D PREROUTING -j ${KVAS2_NAME}_PREROUTING [2] Example ```bash +KVAS2_NAME=KVAS2 IPSET_TABLE=kvas2 MARK=1 TABLE=100 INTERFACE=ovpn_br0 -iptables -t mangle -A PREROUTING -m set --match-set $IPSET_TABLE dst -j MARK --set-mark $MARK -ip rule add fwmark $MARK table $TABLE -ip route add default dev $INTERFACE table $TABLE -iptables -t nat -A POSTROUTING -o $INTERFACE -j MASQUERADE + +# Создание правил +iptables -t mangle -N ${KVAS2_NAME}_PREROUTING +iptables -t nat -N ${KVAS2_NAME}_POSTROUTING +iptables -t mangle -A ${KVAS2_NAME}_PREROUTING -m set --match-set ${IPSET_TABLE} dst -j MARK --set-mark ${MARK} +iptables -t nat -A ${KVAS2_NAME}_POSTROUTING -o ${INTERFACE} -j MASQUERADE + +# Применение правил +ip rule add fwmark ${MARK} table ${TABLE} +ip route add default dev ${INTERFACE} table ${TABLE} +iptables -t mangle -A PREROUTING -j ${KVAS2_NAME}_PREROUTING +iptables -t nat -A POSTROUTING -j ${KVAS2_NAME}_POSTROUTING + +# Удаление правил +ip rule del fwmark ${MARK} table ${TABLE} +ip route del default dev ${INTERFACE} table ${TABLE} +iptables -t mangle -D PREROUTING -j ${KVAS2_NAME}_PREROUTING +iptables -t nat -D POSTROUTING -j ${KVAS2_NAME}_POSTROUTING ```