(IPTABLES? In the figure, we divide the network into two areas: the Private area and the Internet area. ?The Internet server that provides services to the outside world is also placed in the Private area, and uses the same network segment address as other hosts on the LAN. The Linux access server is the key point of our work below. It acts as a host in the LAN to access the Internet and maintains the internal network of the LAN. Your hosts and servers are immune to attacks from the Internet. ?In order to facilitate the scripting later, let's clear some necessary parameters first. The Internet-facing network card eth0 on the Linux access server is configured as follows, and these data are obtained from the ISP: IP address 61.156.35.44 (only one public IP address, so less? Enough)? Subnet mask 255.255.255.192 ? Gateway address 61.156.35.45 ? DNS server 202.98.64.68202.102.134.68
IPTABLES Examples.pdf)