��#2 (Andrey Mitrofanov)

Mon, 29 Sep 2008 09:02:23 GMT

>>�� linux ��. �� iptables
>>
>>�� eth2 �� 192.168.1.0/30
>>� �� eth3 �� 10.1.1.0/26
>>
>>� �� 4662/tcp 4772/udp
>>
>>�� (�� tcp) �� :
>
>�� :

�� firehol -- �� :
# [B]cat edonk-forward[/B]
version 5

OUTIF=eth2
OUTA=192.168.1.2

LANA=10.1.1.1
LANIF=eth3

LANSRV=10.1.1.2

#-server_eserver_ports="tcp/4661 udp/4661 udp/4665"
#-client_eserver_ports="any"
server_eserver_ports="tcp/4662 udp/4672"
client_eserver_ports="any"

dnat to "$LANSRV" inface "$OUTIF" proto tcp dport "4662"
dnat to "$LANSRV" inface "$OUTIF" proto udp dport "4672"

router prtfwd dst "$LANSRV"
server "eserver" accept
# [B]firehol ./edonk-forward debug |./explain-sorter[/B]

-N out_prtfwd_eserver_s1
-A out_prtfwd_eserver_s1 -p tcp --sport 4662 -m state --state ESTABLISHED -j ACCEPT
-A out_prtfwd_eserver_s1 -p udp --sport 4672

�� tcp 4662 � �� iptables (Alexander Pytlev)

Sat, 27 Sep 2008 19:14:51 GMT

>�� linux ��. �� iptables
>
>�� eth2 �� 192.168.1.0/30
>� �� eth3 �� 10.1.1.0/26
>
>� �� 4662/tcp 4772/udp
>
>�� (�� tcp) �� :

�� :

REMOTE_IP="10.1.1.2"
REMOTE_PORT="4662"
IN_IP="192.168.1.1"
IN_IFACE="eth2"

iptables -A INPUT -i ${IN_IFACE} -p tcp --dport ${REMOTE_PORT} -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -d $IN_IP --dport ${REMOTE_PORT} -j DNAT --to-destination ${REMOTE_IP}:${REMOTE_PORT}
iptables -A FORWARD -s ${REMOTE_IP} -j ACCEPT
iptables -A FORWARD -d ${REMOTE_IP} --dport ${REMOTE_PORT} -j ACCEPT

OpenForum RSS: ���������� ���� tcp 4662 � ������� iptables

��������#2 (Andrey Mitrofanov)

���������� ���� tcp 4662 � ������� iptables (Alexander Pytlev)

OpenForum RSS: �� tcp 4662 � �� iptables

��#2 (Andrey Mitrofanov)

�� tcp 4662 � �� iptables (Alexander Pytlev)