Re: [Sarlug] NAT на 2 if

[Sicness <ctolbhuk@gmail.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Спасибо Лиану. Результат примерно такой:

#!/bin/sh

iptables -F
iptables -t nat -F

# enable masquerading
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

# enable ip_forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward
...


iptables -A FORWARD -s 192.168.0.38 -i eth0 -o ppp0 -j ACCEPT
iptables -A FORWARD -d 192.168.0.38 -i ppp0 -o eth0 -j ACCEPT
iptables -A FORWARD -s 192.168.0.38 -i eth0 -o eth1 -j ACCEPT
iptables -A FORWARD -d 192.168.0.38 -i eth1 -o eth0 -j ACCEPT

где конечно на сервере прописаны пути (route)
Более или менее очевидно :)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iJwEAQECAAYFAkseIBQACgkQ5jgWcLqRXldAmQP/YpG9+FIVriP8uO8HRsPjgaBY
0Wko1Kucou4FuX2voMfry2fmkoL3kHbNije60Ikd62EExGgu76wBGHVuya6YJP/l
FobT1ZkrE28VZHfApJSL81rjR8lnuTXJh6NhKPDMzD5IWk2q6ayy50uNYrz4tEy7
YF6qnvDUbq1lD3UrTA4=
=dZrt
-----END PGP SIGNATURE-----