CT-----eth0--linux-BR0---eth1-----wan--ASA--lan--pc
Ebtables 网关劫持
set ebtables broute BROUTING rule 10 in-interface eth1
setebtables broute BROUTING rule 10 jump redirect
set ebtables broute BROUTING rule 10 jump_EXTENSIONS redirectredirect_target DROP
set ebtables broute BROUTING rule 10 protocol ip ip_source 110.116.8.2/32