Re: [gentoo-user-ru] Настройка NAT

[Maxim Ivanov]

> Õ ÔÅÂÑ ×ÅÄØ ÐÏ ÕÍÏÌÞÁÎÉÀ iptables -P FORWARD DROP
> Á ACCEPT ÄÌÑ ÎÅÇÏ ÎÅÔ. ÎÁÄÏ ÅÝ£
>
> $IPTABLES -A FORWARD -i eth0 -j ACCEPT
> $IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT


óÐÁÓÉÂÏ ÚÁ ÐÏÄÓËÁÚËÕ! ÷ ÉÔÏÇÅ ËÏÎÆÉÇ ÆÁÅÒ×ÏÌÁ ÐÒÅ×ÒÁÔÉÌÓÑ × ÓÌÅÄÕÀÝÅÅ:

====================/etc/ppp/ip-up.local==========================

EXTIF=ppp+



ANY=0.0.0.0/0



iptables -F

iptables -t nat -F

iptables -t mangle -F

iptables -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE

iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT -m state --state NEW -i ! $EXTIF -j ACCEPT

iptables -A INPUT -m state --state NEW -i $EXTIF -j LOG

iptables -A INPUT -p icmp -j ACCEPT

iptables -A INPUT -i $EXTIF -d $ANY -p udp --dport 0:1023 -j LOG

iptables -A INPUT -i $EXTIF -d $ANY -p tcp --dport 0:1023 -j LOG

iptables -P INPUT DROP

=========================================================



îÏ ×ÏÚÎÉËÌÁ ÄÒÕÇÁÑ ÐÒÏÂÌÅÍÁ. ip-up.local ÎÅ ×ÙÐÏÌÎÑÅÔÓÑ ÐÒÉ ËÏÎÎÅËÔÅ! èÏÔÑ ×

ËÏÎÃÅ /etc/ppp/ip-up ÅÓÔØ ÓÔÒÏËÁ:

[ -f /etc/ppp/ip-up.local ] && . /etc/ppp/ip-up.local "$@"



Ô.Å. ÏÎ ÖÅ ÄÏÌÖÅÎ ×ÙÐÏÌÎÑÔØÓÑ! åÓÌÉ ÐÏÌÓÅ ËÏÎÎÅËÔÁ ×ÒÕÞÎÕÀ ÚÁÐÕÓÔÉÔØ

/etc/ppp/ip-up.local ÔÏ ÏÎ ×ÙÐÏÌÎÑÅÔÓÑ É ÆÁÅÒ×ÏÌØÎÙÅ ÐÒÁ×ÉÌÁ ÓÏÚÄÁÀÔÓÑ.



-- 

Maxim Ivanov <redbaron@××××.ru>





-- 

gentoo-user-ru@g.o mailing list