Re[2]: [gentoo-user-ru] Настройка NAT

[Tropyichev Andrey]

úÄÒÁ×ÓÔ×ÕÊÔÅ, Maxim.



÷Ù ÐÉÓÁÌÉ 21 ÎÏÑÂÒÑ 2005 Ç., 18:19:49:



MI> óÐÁÓÉÂÏ ÚÁ ÐÏÄÓËÁÚËÕ! ÷ ÉÔÏÇÅ ËÏÎÆÉÇ ÆÁÅÒ×ÏÌÁ ÐÒÅ×ÒÁÔÉÌÓÑ × ÓÌÅÄÕÀÝÅÅ:

MI> ====================/etc/ppp/ip-up.local==========================

MI> EXTIF=ppp+



MI> ANY=0.0.0.0/0



MI> iptables -F

MI> iptables -t nat -F

MI> iptables -t mangle -F

MI> iptables -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE

MI> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

MI> iptables -A INPUT -m state --state NEW -i ! $EXTIF -j ACCEPT

MI> iptables -A INPUT -m state --state NEW -i $EXTIF -j LOG

MI> iptables -A INPUT -p icmp -j ACCEPT

MI> iptables -A INPUT -i $EXTIF -d $ANY -p udp --dport 0:1023 -j LOG

MI> iptables -A INPUT -i $EXTIF -d $ANY -p tcp --dport 0:1023 -j LOG

MI> iptables -P INPUT DROP

MI> =========================================================



MI> îÏ ×ÏÚÎÉËÌÁ ÄÒÕÇÁÑ ÐÒÏÂÌÅÍÁ. ip-up.local ÎÅ ×ÙÐÏÌÎÑÅÔÓÑ ÐÒÉ ËÏÎÎÅËÔÅ! èÏÔÑ ×

MI> ËÏÎÃÅ /etc/ppp/ip-up ÅÓÔØ ÓÔÒÏËÁ:

MI> [ -f /etc/ppp/ip-up.local ] && . /etc/ppp/ip-up.local "$@"



MI> Ô.Å. ÏÎ ÖÅ ÄÏÌÖÅÎ ×ÙÐÏÌÎÑÔØÓÑ! åÓÌÉ ÐÏÌÓÅ ËÏÎÎÅËÔÁ ×ÒÕÞÎÕÀ ÚÁÐÕÓÔÉÔØ

MI> /etc/ppp/ip-up.local ÔÏ ÏÎ ×ÙÐÏÌÎÑÅÔÓÑ É ÆÁÅÒ×ÏÌØÎÙÅ ÐÒÁ×ÉÌÁ ÓÏÚÄÁÀÔÓÑ.



MI> -- 

MI> Maxim Ivanov <redbaron@××××.ru>

  éÔÁË, ÐÏ-ÐÏÒÑÄËÕ:

  

  #/etc/ppp/ip-up.local

  #/etc/init.d/iptables save

  #rc-update add iptables default



  Á × ËÏÎÅà /etc/conf.d/local.start ÄÏÂÁ×Ø ÓÔÒÏËÕ:

  echo 1 > /proc/sys/net/ipv4/ip_forward



  ôÁË ÜÔÏ ×ÒÏÄÅ-ÂÙ ÄÅÌÁÅÔÓÑ, ÉÌÉ Ñ ÞÅÇÏ-ÔÏ ÎÅ ÐÏÎÉÍÁÀ;))



-- 

ó Õ×ÁÖÅÎÉÅÍ,

 Tropyichev Andrey                         mailto:postmaster@××××××.net



-- 

gentoo-user-ru@g.o mailing list