TELES VoIP Box BRI Series, Справочное руководство

Страница: 42 / 226

3 VoIPBox installation
VoIPBox DSL / VoIPBox BRI – version 21.0.009 Page 42
The hostname
n
is set here to the serial number
“TAG98313460700000”. The IP address of Eth1 is set to
192.168.1.2/24
o
. That is the default. The IP address of Eth2
is 192.168.178.2/24 (
p
).
The firewall is active. All incoming traffic except traffic on the
GATE Manager port 4445 is blocked. Outgoing traffic is al-
lowed
q
.
Example 3.8
→
shows a part from the
ip.cfg
with a bridge con-
figuration on Eth1 and Eth2. Both IP interfaces are running in
bridge mode. The IP address is set in the
[br0]
section in the
same manner as shown before.
[eth1] #
o
IpAddress=192.168.1.2 netmask 255.255.255.0
[eth2] #
p
IpAddress=192.168.178.2 netmask 255.255.255.0
[iptables] # q
# iptables -t nat -A POSTROUTING -o ppp0 -s 192.168.1.2 netmask 255.255.255.0 -j
MASQUERADE
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 4445 -i ppp0 -j ACCEPT
iptables -N block
iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT
iptables -A block -m limit -j LOG
iptables -A block -j DROP
iptables -A INPUT -j block
iptables -A FORWARD -j block
Example 3.5 Main sections of the ip.cfg (continued)
Example 3.6 Different IP settings for every interface configured in the ip.cfg
[system]
DefaultGw=192.168.1.1
[br0]
IpAddress=192.168.1.2 netmask 255.255.255.0