Debian下简单路由器设置.docVIP

Debian下简单路由器的设置 (2007-07-12 20:58:48)HYPERLINK javascript:;转载 标签：HYPERLINK /c.php?t=blogk=linuxts=bpoststype=taglinux HYPERLINK /c.php?t=blogk=·????ts=bpoststype=tag路由器 HYPERLINK /c.php?t=blogk=????ts=bpoststype=tag配置 HYPERLINK /c.php?t=blogk=dhcp????ts=bpoststype=tagdhcp配置 HYPERLINK /c.php?t=blogk=?????ts=bpoststype=tag防火墙1、设置网卡eth0、eth1的ip，修改/etc/network/interface（上网方式是公网ip。如果是adsl上网方式就设置PPPoE，如果是动态获得ip就把eth0设置成dhcp），如下： IBM~$:vi /etc/network/interface # This file describes the network interfaces available on your system# and how to activate them. For more information, see interfaces(5). # The loopback network interfaceauto loiface lo inet loopback # The primary network interfaceauto eth0allow-hotplug eth0iface eth0 inet static address 202.*.*.2 netmask 48 network 202.*.*.0 broadcast 202.*.*.255 gateway 202.*.*.1 dns-nameservers 33 # The lan network interfaceauto eth1allow-hotplug eth1iface eth1 inet static address  netmask  network  broadcast 55 2、编辑myrouter脚本（包含filter、nat） IBM~$:vi /etc/init.d/myrouter #!/bin/bash IPTABLES=/sbin/iptables echo 1 /proc/sys/net/ipv4/ip_forward #打开IP包转发 ## eth0 is connected to the internet.# eth1 is connected to a private subnet. LAN=/24WAN=202.*.*.2 # # Loopback addressLOOP= # # A Sample firewall.# reset the default policies in the filter table.$IPTABLES -P INPUT DROP$IPTABLES -P FORWARD DROP$IPTABLES -P OUTPUT ACCEPT ## reset the default policies in the nat table.$IPTABLES -t nat -P PREROUTING ACCEPT$IPTABLES -t nat -P POSTROUTING ACCEPT$IPTABLES -t nat -P OUTPUT ACCEPT ## reset the default policies in the mangle table.#$IPTABLES -t mangle -P PREROUTING ACCEPT#$IPTABLES -t mangle -P OUTPUT ACCEPT ## flush all the rules in the filter and nat tables. $IPTABLES -F$IPTABLES -t nat -F#$IPTABLES -t mangle -F## erase all chains thats not default in filter and nat table.$IPTABLES -X$IPTABLES -t nat