通过linux系统做防火墙,Linux下主机充当防火墙的巧妙应用之iptables

一、准备工作：

1.linux下基本配置

配ip地址(setup命令)

[root@gjp99 ~]# ping 192.168.101.254PING 192.168.101.254 (192.168.101.254) 56(84) bytes of data.

64 bytes from 192.168.101.254: icmp_seq=1 ttl=64 time=2.29 ms

64 bytes from 192.168.101.254: icmp_seq=2 ttl=64 time=0.685 ms

64 bytes from 192.168.101.254: icmp_seq=3 ttl=64 time=0.507 ms

[root@gjp99 ~]# ping www.baidu.comPING www.a.shifen.com (119.75.217.56) 56(84) bytes of data.

64 bytes from 119.75.217.56: icmp_seq=1 ttl=56 time=131 ms

64 bytes from 119.75.217.56: icmp_seq=2 ttl=56 time=96.4 ms

64 bytes from 119.75.217.56: icmp_seq=3 ttl=56 time=125 ms

[root@gjp99 ~]# vim /etc/sysctl.conf

7 net.ipv4.ip_forward = 1

[root@gjp99 ~]# sysctl –p    修改生效

net.ipv4.ip_forward = 1

net.ipv4.conf.default.rp_filter = 1

net.ipv4.conf.default.accept_source_route = 0

kernel.sysrq = 0

kernel.core_uses_pid = 1

net.ipv4.tcp_syncookies = 1

kernel.msgmnb = 65536

kernel.msgmax = 65536

kernel.shmmax = 4294967295

kernel.shmall = 268435456

2. 搭建web及ftp服务器(windows server 2003 )

Internet 网上的一台web及ftp服务器：

开始---程序----管理工具-----iis

测试：

ftp服务器的设置：

测试：