OpenForum RSS: IPTABLES �� NAT

IPTABLES �� NAT (rishard)

Tue, 19 Oct 2010 03:26:37 GMT

�� iptables � ��.
http://masterpro.ws/easyfwgen

IPTABLES �� NAT (Bionis)

Fri, 15 Oct 2010 12:05:56 GMT

> � � �� .
> �� "�� "? �� . �� ?

�� .... �� .... � ��.. ��.. �� ...
C��....

IPTABLES �� NAT (reader)

Fri, 15 Oct 2010 11:17:18 GMT

> �� ... ��
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> �� , ��
> �� ip 192.168.1.* � �� (iptables -t nat
> -A POSTROUTING -o eth0 -j MASQUERADE)....

� �� SNAT (-j MASQUERADE), �� ,��
> �� (�� (�� ))

� � �� .
�� "�� "? �� . �� ?

>[�� ]
> �� , ��
> iptables -A FORWARD -s 192.168.1.0/24 -j check_ours # ��
> iptables -A FORWARD -s 192.168.1.0/24 -j ACCEPT # ��
> ��
> iptables -P FORWARD DROP # ��
> iptables -P OUTPUT ACCEPT # ��
> #---------------------------------------------

IPTABLES �� NAT (Bionis)

Fri, 15 Oct 2010 10:20:26 GMT

�� ... ��
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
�� , �� ip 192.168.1.* � �� (iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE)....

�� (�� (�� ))

!/bin/bash
IPTABLES="/sbin/iptables"

IF_OUT="eth0"
IF_LAN="eth1"
MASK_LAN="192.168.1.0/24"

IF_LO="lo"
ADDR_LO="127.0.0.1"
LOOPBACK="127.0.0.0/8"

sysctl -w net.ipv4.ip_forward=1
sysctl -w net.ipv4.ip_dynaddr=1
sysctl net.ipv4.conf.all.forwarding=1

modprobe ip_nat_ftp

$IPTABLES -t mangle -P OUTPUT ACCEPT
$IPTABLES -F
$IPTABLES -t nat -F
$IPTABLES -t mangle -F
$IPTABLES -X
$IPTABLES -t nat -X
$IPTABLES -t mangle -X
$IPTABLES -N sshguard

$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD ACCEPT
$IPTABLES -P OUTPUT ACCEPT

$IPTABLES -I INPUT -p tcp --dport 4000 -j DROP
$IPTABLES -I FORW

IPTABLES �� NAT (reader)

Fri, 15 Oct 2010 09:27:53 GMT

>> nat �� , � � �� |��.
> �� , �� ... ��
> �� ? :-[ �� )))

-P FORWARD DROP
-A FORWARD -s 192.168.1.10 -i eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 192.168.1.11 -i eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
�� INVALID �� nat �� , �� . �� , �� (�� -�� RELATED)

�� .
-A FORWARD -j LOG --log-prefix "IPT FORWARD: " --log-level 7

IPTABLES �� NAT (Bionis)

Fri, 15 Oct 2010 06:23:06 GMT

> nat �� , � � �� |��.

�� , �� ... �� ? :-[ �� )))

IPTABLES �� NAT (reader)

Fri, 15 Oct 2010 06:03:03 GMT

>[�� ]
> ip � �� 192.168.0.1
> iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports
> 8080
> �� 192.168.1.0/24 �� eth1, �� -i eth0
>> -p tcp � -d 192.168.0.2 - ��, � �� -o eth0
>> �� 192.168.1.1 - 192.168.0.2
> ��... )))
>> > echo 1 > /proc/sys/net/ipv4/ip_forward && iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> �� 30 ��
> �� ip

nat �� , � � �� |��.

IPTABLES �� NAT (Bionis)

Fri, 15 Oct 2010 05:09:09 GMT

> �� , �� , �� .

�� , �� ...

> � �� ADSL, ��, �� (man route).

ip � �� 192.168.0.1

iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080
�� 192.168.1.0/24 �� eth1, �� -i eth0

> -p tcp � -d 192.168.0.2 - ��, � �� -o eth0
> �� 192.168.1.1 - 192.168.0.2

��... )))

> > echo 1 > /proc/sys/net/ipv4/ip_forward && iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

�� 30 �� ip

IPTABLES �� NAT (reader)

Thu, 14 Oct 2010 18:10:02 GMT

>[�� ]
> $IPTABLES -A OUTPUT -j common-check
> $IPTABLES -A FORWARD -j common-check
> $IPTABLES -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
> $IPTABLES -A FORWARD -m conntrack --ctstate NEW -i eth1 -s 192.168.1.0/24 -j
> ACCEPT #
> iptables -t nat -A PREROUTING -i eth0 -p tcp -d 192.168.0.2 --dport
> 5555 -j DNAT --to 192.168.1.50:5555
> iptables -A INPUT -p tcp --dport 5555 -j DROP
> $IPTABLES -t nat -A POSTROUTING -p tcp -s 192.168.1.0/24 -d 192.168.0.2 -j
> SNAT --to-source 192.168.1.1

-p tcp � -d 192.168.0.2 - ��, � �� -o eth0
�� 192.168.1.1 - 192.168.0.2

> # $IPTABLES -t nat -A POSTROUTING -s $MASK_LAN -o $IF_OUT -j MASQUERADE
> $IPTABLES -t nat -A PREROUTING -i eth0 -s 192.168.1.0/24 -p tcp --dport
> 80 -j REDIRECT --to-port 8080

�� 192.168.1.0/24 �� eth1, �� -i eth0

� � ��, �� .
�� SNAT � �� , � ��

OpenForum RSS: IPTABLES ����� ������ � �������� NAT

IPTABLES ����� ������ � �������� NAT (rishard)

IPTABLES ����� ������ � �������� NAT (Bionis)

IPTABLES ����� ������ � �������� NAT (reader)

IPTABLES ����� ������ � �������� NAT (Bionis)

IPTABLES ����� ������ � �������� NAT (reader)

IPTABLES ����� ������ � �������� NAT (Bionis)

IPTABLES ����� ������ � �������� NAT (reader)

IPTABLES ����� ������ � �������� NAT (Bionis)

IPTABLES ����� ������ � �������� NAT (reader)

OpenForum RSS: IPTABLES �� NAT

IPTABLES �� NAT (rishard)

IPTABLES �� NAT (Bionis)

IPTABLES �� NAT (reader)

IPTABLES �� NAT (Bionis)

IPTABLES �� NAT (reader)

IPTABLES �� NAT (Bionis)

IPTABLES �� NAT (reader)

IPTABLES �� NAT (Bionis)

IPTABLES �� NAT (reader)