Дело обстоит так:
Есть 2 сетевухи: wlan0 и eth0 и NAT за интерфейсом eth0
Купил себе ipv4 траффик платный а они его дают только посредствам openvpn(Интерфейс: tap0)на wlan0 есть интернет(безлимитка) мне нужно сделать так чтобы все за NAT получали интернет от wlan0 а весь веб севрер (mysql htttpd) работал на интерфейсе tap0
Мои догадки: Надо прописать шлюз для ната
Вот логи:
ifconfig:
eth0 Link encap:Ethernet HWaddr 30:85:A9:79:27:9F
inet addr:192.168.0.250 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::3285:a9ff:fe79:279f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2140 errors:0 dropped:0 overruns:0 frame:0
TX packets:1898 errors:0 dropped:0 overruns:0 carrier:1
collisions:0 txqueuelen:1000
RX bytes:572399 (558.9 KiB) TX bytes:778434 (760.1 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
tap0 Link encap:Ethernet HWaddr E2:DE:1C:52:49:EE
inet addr:217.150.93.9 Bcast:217.150.93.255 Mask:255.255.255.0
inet6 addr: fe80::e0de:1cff:fe52:49ee/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:125 errors:0 dropped:0 overruns:0 frame:0
TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:7500 (7.3 KiB) TX bytes:1183 (1.1 KiB)
wlan0 Link encap:Ethernet HWaddr DC:85:DE:25:EE:A9
inet addr:192.168.1.152 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::de85:deff:fe25:eea9/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1950 errors:0 dropped:0 overruns:0 frame:0
TX packets:1887 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:796442 (777.7 KiB) TX bytes:589404 (575.5 KiB)
----------------------------------------------------------------------------------
route:
217.150.94.26 192.168.1.254 255.255.255.255 UGH 0 0 0 wlan0
217.150.93.0 * 255.255.255.0 U 0 0 0 tap0
192.168.1.0 * 255.255.255.0 U 0 0 0 wlan0
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0
link-local * 255.255.0.0 U 1002 0 0 wlan0
link-local * 255.255.0.0 U 1003 0 0 eth0
default 217.150.93.1 128.0.0.0 UG 0 0 0 tap0
128.0.0.0 217.150.93.1 128.0.0.0 UG 0 0 0 tap0
default 192.168.1.254 0.0.0.0 UG 0 0 0 wlan0
----------------------------------------------------------------------------------
iptables -L -v:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2024 1156K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- any any anywhere anywhere
0 0 ACCEPT all -- lo any anywhere anywhere
33 2548 ACCEPT all -- eth+ any anywhere anywhere
1 48 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:http
74 10597 REJECT all -- any any anywhere anywhere reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
3155 1286K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- any any anywhere anywhere
0 0 ACCEPT all -- lo any anywhere anywhere
1586 135K ACCEPT all -- eth+ any anywhere anywhere
0 0 ACCEPT all -- any ippp+ anywhere anywhere
0 0 ACCEPT all -- any isdn+ anywhere anywhere
0 0 ACCEPT all -- any ppp+ anywhere anywhere
0 0 ACCEPT all -- any tun+ anywhere anywhere
0 0 ACCEPT all -- any wlan+ anywhere anywhere
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT 1921 packets, 318K bytes)
pkts bytes target prot opt in out source destination
----------------------------------------------------------------------------------
iptables -t nat -L -v:
Chain PREROUTING (policy ACCEPT 1138 packets, 104K bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 376 packets, 21926 bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- any ippp+ anywhere anywhere
0 0 MASQUERADE all -- any isdn+ anywhere anywhere
0 0 MASQUERADE all -- any ppp+ anywhere anywhere
0 0 MASQUERADE all -- any tun+ anywhere anywhere
564 61492 MASQUERADE all -- any wlan+ anywhere anywhere
Chain OUTPUT (policy ACCEPT 5 packets, 347 bytes)
pkts bytes target prot opt in out source destination