{"id":4138,"date":"2023-02-09T16:45:36","date_gmt":"2023-02-09T08:45:36","guid":{"rendered":"https:\/\/www.zeroheart.xyz\/wordpress\/?p=4138"},"modified":"2023-02-09T16:45:36","modified_gmt":"2023-02-09T08:45:36","slug":"iptables-%e9%87%8d%e5%90%af%e4%b9%8b%e5%90%8e%e5%a4%b1%e6%95%88%e7%9a%84%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"https:\/\/www.zeroheart.xyz\/wordpress\/?p=4138","title":{"rendered":"iptables \u91cd\u542f\u4e4b\u540e\u5931\u6548\u7684\u95ee\u9898"},"content":{"rendered":"\n

\u539f\u6587\uff1a ubuntu18\u914d\u7f6eiptables,\u7cfb\u7edf\u91cd\u542f\u751f\u6548 | \u7801\u519c\u5bb6\u56ed (codenong.com)<\/a><\/p>\n\n\n\n

\u7cfb\u7edf\u4e3aubuntu18.04\u7248\u672c\uff1a<\/p>\n\n\n\n

\u9996\u5148\u914d\u7f6eiptables\uff1a<\/p>\n\n\n\n

1
2
3
4<\/td>		iptables -t nat -A PREROUTING -p tcp -m tcp –dport 1000:10000 -j DNAT –to-destination 20.20.20.1:1000-10000
iptables -t nat -A PREROUTING -p udp -m udp –dport 1000:10000 -j DNAT –to-destination 20.20.20.1:1000-10000
iptables -t nat -A POSTROUTING -d 20.20.20.1 -p tcp -m tcp –dport 1000:10000 -j SNAT –to-source 10.10.10.1
iptables -t nat -A POSTROUTING -d 20.20.20.1 -p udp -m udp –dport 1000:10000 -j SNAT –to-source 10.10.10.1<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u67e5\u770b\u914d\u7f6e\uff1aiptables -L -t nat<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

\u4fdd\u5b58iptables\u914d\u7f6e\u5230\u6587\u4ef6\uff1a\/etc\/iptables.rules<\/p>\n\n\n\n

1<\/td>iptables-save > \/etc\/iptables.rules<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u91cd\u542f\u7cfb\u7edf\u540e\uff0c\u4f7f\u914d\u7f6e\u751f\u6548\uff0c\u9700\u8981\u8fd0\u884c\u547d\u4ee4<\/p>\n\n\n\n

1<\/td>iptables-restore < \/etc\/iptables.rules<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

\u53ef\u80fd\u7531\u4e8e\u7cfb\u7edf\u73af\u5883\uff0c\u4ee5\u4e0b\u4e24\u79cd\u65b9\u5f0f\u5931\u8d25\uff1a<\/p>\n\n\n\n

\u5728\/etc\/network\/interfaces\u6587\u4ef6\u4e2d\u6dfb\u52a0iptables-restore < \/etc\/iptables.rules\u547d\u4ee4\uff0c\u91cd\u542f\u7cfb\u7edf\uff0ciptables\u914d\u7f6e\u672a\u751f\u6548<\/p>\n\n\n\n

\u5728\/etc\/network\/if-pre-up.d\/\u4e2d\u6dfb\u52a0\u811a\u672c\u7684\u65b9\u5f0f\uff0c\u91cd\u542f\u7cfb\u7edf\uff0ciptables\u914d\u7f6e\u4f9d\u7136\u5931\u8d25<\/p>\n\n\n\n

\u6210\u529f\u89e3\u51b3\u65b9\u6cd5\uff1a<\/p>\n\n\n\n

vim \/etc\/rc.local<\/p>\n\n\n\n

1
2<\/td>		#!\/bin\/sh
iptables-restore < \/etc\/iptables.rules<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

chmod +x \/etc\/rc.local<\/p>\n\n\n\n

vim \/lib\/systemd\/system\/rc.local.service\uff08\u5b9e\u4f8b\u7cfb\u7edf\u5df2\u7ecf\u914d\u7f6e\u4e86\u8fd9\u4e2a\u6587\u4ef6\uff0c\u5982\u679c\u6ca1\u6709\uff0c\u8bf7\u624b\u52a8\u914d\u7f6e\uff09<\/p>\n\n\n\n

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23<\/td>		#  SPDX-License-Identifier: LGPL-2.1+
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and\/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.# This unit gets pulled automatically into multi-user.target by
# systemd-rc-local-generator if \/etc\/rc.local is executable.
[Unit]
Description=\/etc\/rc.local Compatibility
Documentation=man:systemd-rc-local-generator(8)
ConditionFileIsExecutable=\/etc\/rc.local
After=network.target[Service]
Type=forking
ExecStart=\/etc\/rc.local start
TimeoutSec=0
RemainAfterExit=yes
GuessMainPID=no<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

systemctl enable rc.local<\/p>\n\n\n\n

\u91cd\u542f\u7cfb\u7edf\u6d4b\u8bd5\uff0ciptables\u914d\u7f6e\u751f\u6548\uff0c\u95ee\u9898\u89e3\u51b3<\/p>\n\n\n\n

\u53c2\u8003\u6587\u7ae0\uff1ahttps:\/\/ilouis.cn\/ubuntu\/ubuntu_setting_iptables.html<\/p>\n\n\n\n

———–\u65e5\u5e38\u8bb0\u5f55—————<\/p>\n","protected":false},"excerpt":{"rendered":"

\u539f\u6587\uff1a ubuntu18\u914d\u7f6eiptables,\u7cfb\u7edf\u91cd\u542f\u751f\u6548 | \u7801\u519c\u5bb6\u56ed (codenong.com) \u7cfb\u7edf\u4e3a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[],"_links":{"self":[{"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4138"}],"collection":[{"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4138"}],"version-history":[{"count":1,"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4138\/revisions"}],"predecessor-version":[{"id":4139,"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4138\/revisions\/4139"}],"wp:attachment":[{"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4138"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4138"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zeroheart.xyz\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4138"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}