相信大家懂的Iptables吧.但是很多新手还不是很熟练.或是你还没有找到一个合适你模板.不过要先iptables那么你先要了解相关的基础本命令.那下面先了解一下.后面再给你介绍详细配置方案.配置基于debian.
先给你介绍的是网卡的设置这是一个关键:
# ifconfig
eth0 Link encap:Ethernet HWaddr 00:e0:4c:c8:39:b9
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::2e0:4cff:fec8:39b9/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:502065636 errors:22329 dropped:21701 overruns:8006 frame:0
TX packets:401033134 errors:0 dropped:0 overruns:2 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3487518346 (3.2 GiB) TX bytes:2143557870 (1.9 GiB)
Interrupt:5 Base address:0xd000
eth1 Link encap:Ethernet HWaddr 00:d0:4c:bf:64:7b
inet addr:59.58.97.2 Bcast:59.58.97.7 Mask:255.255.255.248
inet6 addr: fe80::2d0:4cff:febf:647b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:406220891 errors:50131 dropped:38667 overruns:17485 frame:0
TX packets:505473378 errors:0 dropped:0 overruns:1 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1976175154 (1.8 GiB) TX bytes:3851143830 (3.5 GiB)
Interrupt:10 Base address:0xb800
eth2 Link encap:Ethernet HWaddr 00:ee:b1:02:55:91
inet addr:192.168.9.1 Bcast:192.168.9.255 Mask:255.255.255.0
inet6 addr: fe80::2ee:b1ff:fe02:5591/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:439427 errors:1892 dropped:1776 overruns:724 frame:0
TX packets:273258 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:616630361 (588.0 MiB) TX bytes:22112074 (21.0 MiB)
Interrupt:11 Base address:0xb400
ptubuntu.com# ifconfig
eth0 Link encap:Ethernet HWaddr 00:e0:pt:ub:un:tu
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
eth1 Link encap:Ethernet HWaddr 00:e0:pt:ub:un:tu
inet addr:58.58.98.8 Bcast:58.58.98.8 Mask:255.255.255.248
eth2 Link encap:Ethernet HWaddr 00:e0:pt:ub:un:tu
inet addr:192.168.9.1 Bcast:192.168.9.255 Mask:255.255.255.0
注:eht0,eht2 内网IP地址 eth1外网IP地址
下面这个是配置iptables配置文档.
ptubuntu.com#vi /etc/init.d/iptables
