Korenix JetBox5400 series, Руководство пользователя

Страница: 29 / 73

Korenix | Network Feature 29
Flush rules
To flush (drop) all the rules we can use:
iptables -F
A more complete tutorial can be found at:
http://www.linode.com/wiki/index.php/Netfilter_IPTables_Mini_Howto
4-7
NAT
Network address translation (NAT) is the process of modifying network address information in
datagram (IP) packet headers while in transit across a traffic routing device for the purpose of
remapping one IP address space into another.
A basic NAT scenario:
The 2 interfaces concerned will be WAN and LAN.
WAN: This will be the interface connected to the Internet.
LAN: This interface will be connected to the private network.
Assuming that you have already configured your system to be able to connect to Internet, run
the following command to enable NAT.
iptables -t nat -A POSTROUTING -o wan -j MASQUERADE
iptables -A FORWARD -i wan -o lan -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i lan -o wan -j ACCEPT
192.168.10.1
LAN
WAN
Internet
NAT
192.168.10.10
192.168.10.11
192.168.10.12