成功的IPTABLES

成功的IPTABLES

echo "1" > /proc/sys/net/ipv4/ip_forward

echo "1" > /proc/sys/net/ipv4/tcp_syncookies

modprobe ip_tables

modprobe ip_nat_ftp

 

modprobe ip_conntrack

modprobe ip_conntrack_ftp

 

iptables -P INPUT ACCEPT

iptables -P FORWARD ACCEPT

iptables -P OUTPUT ACCEPT

 

iptables -A FORWARD -s 192.168.0.98 -j ACCEPT

iptables -A FORWARD -d 192.168.0.98 -j ACCEPT

iptables -t nat -P PREROUTING ACCEPT

iptables -t nat -P POSTROUTING ACCEPT

iptables -t nat -P OUTPUT ACCEPT

 

iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -j SNAT --to 116.6.47.11

iptables -A FORWARD -p tcp  -m state --state NEW,RELATED,ESTABLISH -j ACCEPT