IPTABLES实例
IPTABLES?图中我们把网络划分为两个区域:?Private区和Internet区。?对外提供服务的Internet服务器也放在Private区,和局域网其它主机使用同一网段地址,Linux接入服务器即是我们下面工作的要点,它担任股动局域网内的主机访问Internet,并维护局域网内的主机和服务器不受来自Internet的攻击。?为方便后边的脚本编写,首先来清晰几个必要的参数。Linux接入服务器上面向Internet的网卡eth0配置如下,这些数据是从ISP那里得到的:?IP地址61.156.35.44(只有一个公网IP地址,这样少?足够了)?子网掩码255.255.255.192?网关地址61.156.35.45?DNS服务器202.98.64.68202.102.134.68IPTABLES实例.pdf
(IPTABLES? In the figure, we divide the network into two areas: the Private area and the Internet area. ?The Internet server that provides services to the outside world is also placed in the Private area, and uses the same network segment address as other hosts on the LAN. The Linux access server is the key point of our work below. It acts as a host in the LAN to access the Internet and maintains the internal network of the LAN. Your hosts and servers are immune to attacks from the Internet. ?In order to facilitate the scripting later, let's clear some necessary parameters first. The Internet-facing network card eth0 on the Linux access server is configured as follows, and these data are obtained from the ISP: IP address 61.156.35.44 (only one public IP address, so less? Enough)? Subnet mask 255.255.255.192 ? Gateway address 61.156.35.45 ? DNS server 202.98.64.68202.102.134.68
IPTABLES Examples.pdf)
页:
[1]