gateway

I taka problema e sledniq izpolzvam po-dolu dadeniq script za da rabotq kato gateway za edno PC , oba4e na pi4a mu spira net-a (ne moje da browzva , ima samo mirc)
moeto pc e 172.16.1.71
negovoto pc e 172.16.1.82
vsi4ko raboti na edin interfeis eth0 , mislq 4e tova ne e problem-a
10x predvaritelno

# ! /bin/sh

depmod -a
insmod ip_tables
insmod iptable_filter
insmod ip_conntrack
insmod ip_conntrack_ftp
insmod ip_conntrack_irc
insmod iptable_nat
insmod ip_nat_ftp
insmod ip_nat_irc
insmod ipt_MASQUERADE

# flush all the rules in the filter and nat tables.
iptables -F
iptables -t nat -F
iptables -t mangle -F
# erase all chains that's not default in filter and nat table.
iptables -X
iptables -t nat -X
iptables -t mangle -X
# zero counters.
iptables -Z

# Set up a default DROP policy for the built-in chains.
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT



# Setup IP forwarding

echo "1" > /proc/sys/net/ipv4/ip_forward



#SNAT
iptables -t nat -A POSTROUTING -s 172.16.82 -d 0/0 -j SNAT --to-source 172.16.1.71

#DNAT
iptables -t nat -A PREROUTING -s ! 172.16.1.82 -d 172.16.1.71 -j DNAT --to-destination 172.16.1.82

#ICMP redirects
iptables -A OUTPUT -p icmp --icmp-type host-redirect -j DROP

echo " FWD: Allow all connections OUT and only existing and related ones IN"

$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT

$IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT

echo " Enabling SNAT (MASQUERADE) functionality on my IPs"
$IPTABLES -t nat -A POSTROUTING -o $EXTIF -s 192.168.192.1 -j MASQUERADE

probwaj taka

**** the best, kill the rest

sled kato zamenih SNAT-a s MASQUERADE poraboti malko i posle pak ostana bez net :(

kak taka raboti malko ili raboti ili ne

**** the best, kill the rest

Da ne bi dostawchika ti da se e izhitril i da ti e reznal inet-a kato sa te sgashtili che route-wash cyala mreja ...


_ _ _

Time is like a drug. Too much of it kills you.

ne sa me sga6tili ni6to podobno , prosto ponqkoga srabotva drug put ne i nemoga da razbera za6to
:(( oprdeleno kogato zamestih SNAT s MASQUERADE stana , no sled kato go probvah pak ne poiska kvo to4no stava i na samiq men ne mi e qsno

не мога да разбера ДНАТ защо правиш?

mi kak ina4e da prepratq vsi4ko obratno na 4oveka ?

Mi iadroto si se griji samo za tova .... To pomni koi paket e prednaznachen za teb i koi za tvoia prital i s toia dnat seshtash li se ko stava nateb-namen-nateb .... i sled 5 min imash prepylnena tablica v iadroto v koiato sa zapisvat tia neshta .... i rezultata e che iadroto ne moe poveche da preprashta .... i drugite prostotii nenam za kakvo sa ti ... da mahash chains rules etc .... napishi prosto edno

iptables -t nat -A POSTROUTING -s ipto-na-tvoia-priatel -j SNAT --to-source tvoito-ip

i sichko shte e 6 ....
chuda se tia gluposti ot deka gi chetete che taka treba da se pravi .....

P.S.

eto ti vse pak edno skriptche:

#!/bin/bash

# flush all the rules in the filter and nat tables.
# spored men niama nujda ot 1 i 3 ...
# sled kato shte polzvash samo NAT

iptables -F
iptables -t nat -F
iptables -t mangle -F

# Set up a default DROP policy for the built-in chains.
# Samo neznam zashto tuka beshe dal ACCEPT ?!?!?!
# sled kato iskah default DROP

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP

# Setup IP forwarding

echo "1" > /proc/sys/net/ipv4/ip_forward

#SNAT
iptables -t nat -A POSTROUTING -s 172.16.82 -j SNAT --to-source 172.16.1.71

По този въпрос съществуват две мнения. Едното е неправилно, а другото е моето.

i sega kaji tova li ti beshe problema ;)

:))

По този въпрос съществуват две мнения. Едното е неправилно, а другото е моето.