主机A和主机B物理上使用网线相连
主机A:两个网卡eth0和wlan0
eth0用于建立网桥br0 : 192.168.57.20
wlan0 : dhcp分配ip地址
/etc/network/interfaces中的配置如下:
auto lo
iface lo inet loopbackauto wlan0
iface wlan0 inet dhcp
wpa-conf /etc/wpa_supplicant/wpa_supplicant.confauto br0
iface br0 inet static
address 192.168.57.20
netmask 255.255.255.0
bridge_ports eth0auto eth0
iface eth0 inet manual
post-up brctl addif br0 eth0pre-up iptables-restore < /etc/iptables.conf
其中/etc/wpa_supplicant/wpa_supplicant.conf通过wpa_passphrase生成
wpa_passphrase SSID SSID_PASSWD > /etc/wpa_supplicant/wpa_supplicant.conf
/etc/iptables.conf由iptables-save生成
iptables-save > /etc/iptables.conf
建立iptabls:
sudo iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE
ps:
iptable命令:
将源地址是 192.168.0.0/24 的数据包进行地址伪装:iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE
保存规则:sudo iptables-save -c > /etc/iptables.conf
查看当前nat表的防火墙规则:iptables -t nat -L -n –line-numbers
删除指定的iptables规则:iptables -t nat -D PREROUTING 1,这里假如它的序号是1
主机B:网卡eth0
eth0用于建立网桥br0
auto lo
iface lo inet loopbackauto br0
iface br0 inet static
address 192.168.57.10
netmask 255.255.255.0
gateway 192.168.57.20
bridge_ports eth0auto eth0
iface eth0 inet manual
post-up brctl addif br0 eth0
ps:
使用dsl联网时的配置
auto dsl-provider
iface dsl-provider inet ppp
pre-up /sbin/ifconfig eth0 up # line maintained by pppoeconf
provider dsl-providerauto eth0
iface eth0 inet manual