Linux中iptables内外网络控制

最新推荐文章于 2024-08-20 13:30:30 发布

杯具码农

最新推荐文章于 2024-08-20 13:30:30 发布

阅读量778

点赞数

CC 4.0 BY-SA版权

分类专栏： linux

本文链接：https://blog.youkuaiyun.com/jsjsg/article/details/23860769

linux 专栏收录该内容

1 篇文章

订阅专栏

本文介绍了使用Iptables进行不同场景下的网络配置方法，包括内网与外网的互通、单向访问控制及特定服务的开放等。通过具体步骤展示如何设置防火墙规则来实现所需的网络访问策略。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

环境:fedora5+Windows XP+vmware server 1.04

1.利用IPTABLES使198.199.37.0 与 198.168.80.0 互通.

service iptables start
Iptables –F
Iptables –t nat –F
Iptables –t mangle –F
Iptables –X
Iptables –t nat –X
Iptables –t mangle -X
内核启用转发支持Echo 1 > /proc/sys/net/ipv4/ip_forward
FORWARD链默认接受所有的包Iptables -P FORWARD ACCEPT

2.利用iptables实现内网可以访问外网,但是外网不能访问内网.

reboot
service iptables start
Iptables –F
Iptables –t nat –F
Iptables –t mangle –F
Iptables –X
Iptables –t nat –X
Iptables –t mangle -X
内核启用转发支持Echo 1 > /proc/sys/net/ipv4/ip_forward
FORWARD链默认扔掉所有的包Iptables -P FORWARD DROP
Iptables –A POSTROUTING –t nat –s 198.168.80.0/24 -o eth1 –j MASQUERADE
Iptables –A FORWARD –m state –state ESTABLISHED,RELATED –j ACCEPT
Iptables –A FORWARD –s 198.168.80.0/24 –j ACCEPT
198.168.80.0 能访问198.199.37.0网段.

3.利用iptables实现外网198.199.37.0可以访问内网198.168.80.0,但是内网不能访问外网.

reboot
service iptables start
Iptables –F
Iptables –t nat –F
Iptables –t mangle –F
Iptables –X
Iptables –t nat –X
Iptables –t mangle -X
内核启用转发支持Echo 1 > /proc/sys/net/ipv4/ip_forward
FORWARD链默认扔掉所有的包Iptables -P FORWARD DROP
Iptables –A POSTROUTING –t nat –s 198.199.37.0/24 -o eth0 –j MASQUERADE
Iptables –A FORWARD –m state –state ESTABLISHED,RELATED –j ACCEPT
Iptables –A FORWARD –s 198.199.37.0/24 –j ACCEPT
198.199.37.0 能访问网段. 198.168.80.0

4.利用iptables实现外网198.199.37.0可以访问内网198.168.80.52的WWW服务,但是内网不能访问外网.

reboot
service iptables start
Iptables –F
Iptables –t nat –F
Iptables –t mangle –F
Iptables –X
Iptables –t nat –X
Iptables –t mangle -X
内核启用转发支持Echo 1 > /proc/sys/net/ipv4/ip_forward
FORWARD链默认扔掉所有的包Iptables -P FORWARD DROP
Iptables –A POSTROUTING –t nat –s 198.199.37.0/24 -o eth0 –j MASQUERADE
Iptables –A FORWARD –m state –state ESTABLISHED,RELATED –j ACCEPT
Iptables –A FORWARD –p tcp –s 198.199.37.0/24 –d 198.168.80.52 –j ACCEPT --dport 80
198.199.37.0 能访问网段. 198.168.80.52的www服务

5.利用iptables实现外网198.199.37.0 能访问内网网. 198.168.80.52的www服务,内网能自由访问外网.

reboot
service iptables start
Iptables –F
Iptables –t nat –F
Iptables –t mangle –F
Iptables –X
Iptables –t nat –X
Iptables –t mangle -X
内核启用转发支持Echo 1 > /proc/sys/net/ipv4/ip_forward
FORWARD链默认扔掉所有的包Iptables -P FORWARD DROP
Iptables –A POSTROUTING –t nat –s 198.199.37.0/24 -o eth0 –j MASQUERADE
Iptables –A FORWARD –m state –state ESTABLISHED,RELATED –j ACCEPT
Iptables –A FORWARD –p tcp –s 198.199.37.0/24 –d 198.168.80.52 –j ACCEPT --dport 80
Iptables –A FORWARD –s 198.168.80.0/24 –j ACCEPT
外网198.199.37.0 能访问内网网. 198.168.80.52的www服务,内网能自由访问外网.

#Linux