配置NET共享INTERNET资源

配置NET共享INTERNET资源

echo "1" > /proc/sys/net/ipv4/ip_forward INET_IFACE="ppp0" INET_IP="xxx.xxx.xxx.xxx" LAN_IP="192.168.0.1" LAN_IP_RANGE="192.168.0.0/24" IPT="/sbin/iptables" /sbin/depmod -a /sbin/modprobe ip_tables /sbin/modprobe ip_nat_ftp /sbin/modprobe ipt_LOG  $IPT -P INPUT ACCEPT  $IPT -P FORWARD ACCEPT  $IPT -P OUTPUT ACCEPT  $IPT -t nat -P PREROUTING ACCEPT  $IPT -t nat -P POSTROUTING ACCEPT  $IPT -t nat -P OUTPUT ACCEPT  for TABLE  in filter nat mangle ; do  $IPT -t $TABLE -F  $IPT -t $TABLE -X  done $IPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT for DNS in $(grep ^n /etc/resolv.conf|awk '{print $2}'); do $IPT -A INPUT -p udp -s $DNS --sport domain -j ACCEPT done if [ "$INET_IFACE"=ppp0 ] ;then $IPT -t nat -A POSTROUTING -o $INET_IFACE -j MASQUERADE else $IPT -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to $INET_IP fi