最近买了独服安装了PVE系统，iptables端口映射总是很复杂，于是就用ChatGPT编写了这个脚本
使用脚本前先apt install iptables-persistent安装iptables持久化，否则iptables默认重启后配置消失
#!/bin/bash
# 定义公网接口变量，根据实际情况修改
PUBLIC_INTERFACE=vmbr0
# 保存iptables规则
save_iptables_rules() {
iptables-save > /etc/iptables/rules.v4
echo "Iptables rules saved."
}
# 添加端口映射
add_port_mapping() {
echo "Enter the VM IP address:"
read vm_ip
echo "Enter the public port:"
read public_port
echo "Enter the VM port:"
read vm_port
iptables -t nat -A PREROUTING -i $PUBLIC_INTERFACE -p tcp --dport $public_port -j DNAT --to-destination $vm_ip:$vm_port
iptables -A FORWARD -p tcp -d $vm_ip --dport $vm_port -j ACCEPT
save_iptables_rules
echo "Port mapping added: Public port $public_port to VM $vm_ip:$vm_port"
}
# 删除端口映射
delete_port_mapping() {
echo "Enter the VM IP address:"
read vm_ip
echo "Enter the public port:"
read public_port
echo "Enter the VM port:"
read vm_port
iptables -t nat -D PREROUTING -i $PUBLIC_INTERFACE -p tcp --dport $public_port -j DNAT --to-destination $vm_ip:$vm_port
iptables -D FORWARD -p tcp -d $vm_ip --dport $vm_port -j ACCEPT
save_iptables_rules
echo "Port mapping deleted: Public port $public_port to VM $vm_ip:$vm_port"
}
# 改进的查看当前的端口映射
list_port_mappings() {
echo "Current port mappings:"
iptables -t nat -L PREROUTING -n -v | grep DNAT | while read line; do
# 提取公网端口
public_port=$(echo "$line" | awk '{print $11}' | sed -n -e 's/^.*dpt://p')
# 提取目标IP和端口
target=$(echo "$line" | awk '{print $NF}')
# 如果没有提取到公网端口，则显示为N/A
if [ -z "$public_port" ]; then
public_port="N/A"
fi
echo "$public_port -> $target"
done
}
# 交互式选择操作
echo "Choose an operation:"
echo "1) Add port mapping"
echo "2) Delete port mapping"
echo "3) List port mappings"
read operation
case $operation in
1)
add_port_mapping
;;
2)
delete_port_mapping
;;
3)
list_port_mappings
;;
*)
echo "Invalid option selected."
exit 1
;;
esac
exit 0脚本使用截图
