OpenForum RSS: iptables

iptables (sonkilla)

Fri, 12 Jun 2009 12:02:52 GMT

�� .�� .�� ip_nat_pptp (�� )�� tcpdump �� ,�� .� � ��
http://www.opennet.ru/docs/RUS/iptables/

iptables (reader)

Fri, 12 Jun 2009 11:30:45 GMT

>[�� ]
>DNAT --to-destination $LOCAL_IP:$PORT2
>iptables -A FORWARD -i eth0 -d $LOCAL_IP -p tcp --dport $PORT2 -j
>ACCEPT
>
>
>�ף� �� . �� vpn �� . � ��
>�� .
>
>�� postrouting ��.
>��..

postrouting �� -o eth1 �� -o eth0, �� SNAT ��, �� , �� iptables-save � ifconfig, �� , ��

iptables (sanpancho)

Fri, 12 Jun 2009 10:53:11 GMT

iptables -t nat -A PREROUTING -p tcp -d $EXT_R_IP --dport $PORT1 -j DNAT --to-destination $LOCAL_IP:$PORT2
iptables -A FORWARD -i eth0 -d $LOCAL_IP -p tcp --dport $PORT2 -j ACCEPT

�ף� �� . �� vpn �� . � �� .

�� postrouting ��.
��..

iptables (reader)

Fri, 12 Jun 2009 09:52:41 GMT

>� �� 4090 ??
>�� ..

� ��?
SNAT �� ?
� eth1 �� 10.1.1.0 ?
� �� ?
�� ?
�� ?

iptables (sanpancho)

Fri, 12 Jun 2009 09:32:31 GMT

� �� 4090 ??
�� ..

iptables (sanpancho)

Fri, 12 Jun 2009 09:31:41 GMT

eth0 - �� , � eth1 � �� .

>
>�� , DNAT �� eth0 � ��
>�� , � eth1 �� , ��
>�� SNAT ��
>
>�� iptables-save � ��

iptables (reader)

Fri, 12 Jun 2009 08:11:55 GMT

>[�� ]
>�� ip - 12.12.12.12
>
>�� -
>
>iptables -t nat -A PREROUTING -i eth0 -d 12.12.12.12 -p tcp --dport
>4090 -j DNAT --to-destination 10.1.1.1:4090
>iptables -t nat -A POSTROUTING -o eth1 -s 10.1.1.1 -p tcp
>--sport 4090 -j SNAT --to-source 12.12.12.12:4090
>
>� �� .

�� , DNAT �� eth0 � �� , � eth1 �� , �� SNAT ��

�� iptables-save � ��

iptables (sanpancho)

Fri, 12 Jun 2009 07:36:34 GMT

��, �� .
>��, � �� ?

iptables (sanpancho)

Fri, 12 Jun 2009 07:35:45 GMT

�� - �� ??

� �� ӣ ��, �� ޣ�� ip �� vpn-��.

� �� ??

>[�� ]
>>�� .
>>�� ?
>
>�� . �� :
>
>iptables -t mangle -A FORWARD -p tcp --dport 4090 -LOG ACCEPT
>iptables -t mangle -A FORWARD -p tcp --sport 4090 -LOG ACCEPT
>
>�� , �� , �� . ��
>�� VPN-��.