少妇久久久久久久久久,新国产三级在线观看播放,秀婷程仪公欲息肉婷在线观看

論壇徽章:: 0

電梯直達(dá)

1樓 [收藏(0)] [報(bào)告]

發(fā)表于 2007-12-08 16:22 |只看該作者 |倒序?yàn)g覽

eth0:10.8.33.251/24
eth1:61.50.*.*

客戶端ip:10.8.33.7/24 網(wǎng)關(guān):10.8.28.251

我的規(guī)則就一條:iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to-source 61.50.*.*
客戶機(jī)可以PING通baidu.com的IP地址,看上去是得不到DNS解析

看到DNS解析有問(wèn)題:又增加了一條:iptables -A FORWARD -s 10.8.32.0/255.255.252.0 -p udp -m udp --dport 53 -j ACCEPT
沒(méi)題還是沒(méi)有得到解決,大家?guī)兔纯?謝謝!

文庫(kù)|博客

Apache官方強(qiáng)心劑：開源不受出口管理?xiàng)l例約束！
Linux基礎(chǔ)命令---lynx瀏覽器
Dell R740服務(wù)器設(shè)置磁盤直通,不做RAID虛擬磁盤陣列
Linux基礎(chǔ)命令---elinks文本瀏覽器
Linux基礎(chǔ)命令---wget下載工具

kenduest

榮譽(yù)版主

論壇徽章:: 0

2樓 [報(bào)告]

發(fā)表于 2007-12-08 16:53 |只看該作者

問(wèn)題描述不清楚，建議你貼出你整個(gè) rule 配置，或者是 iptables-save 執(zhí)行輸出結(jié)果更好。

--

實(shí)戰(zhàn)分享：從技術(shù)角度談機(jī)器學(xué)習(xí)入門| 【大話IT】RadonDB低門檻向MySQL集群下戰(zhàn)書 | ChinaUnix打賞功能已上線！ | 新一代分布式關(guān)系型數(shù)據(jù)庫(kù)RadonDB知多少？

modemTNT

豐衣足食

論壇徽章:: 0

3樓 [報(bào)告]

發(fā)表于 2007-12-08 19:26 |只看該作者

可以先手動(dòng)給客戶機(jī)器加上dns看下，把問(wèn)題具體一下。

實(shí)戰(zhàn)分享：從技術(shù)角度談機(jī)器學(xué)習(xí)入門| 【大話IT】RadonDB低門檻向MySQL集群下戰(zhàn)書 | ChinaUnix打賞功能已上線！ | 新一代分布式關(guān)系型數(shù)據(jù)庫(kù)RadonDB知多少？

luojm_24680

白手起家

論壇徽章:: 0

4樓 [報(bào)告]

發(fā)表于 2007-12-08 20:56 |只看該作者

下面是iptables-save結(jié)果,
客戶機(jī)上手動(dòng)設(shè)置了dns:202.106.0.20
客戶機(jī)IP:10.8.33.9/24 10.8.33.251,但還是不行

# Generated by iptables-save v1.3.8 on Sat Dec 8 20:42:33 2007
*nat

REROUTING ACCEPT [740:81254]

OSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -o eth1 -j SNAT --to-source 61.50.*.*
COMMIT
# Completed on Sat Dec  8 20:42:33 2007
# Generated by iptables-save v1.3.8 on Sat Dec  8 20:42:33 2007
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [724:82619]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A FORWARD -s 10.8.32.0/255.255.252.0 -p udp -m udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p esp -j ACCEPT
-A RH-Firewall-1-INPUT -p ah -j ACCEPT
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 23 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 137 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 138 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 139 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 445 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Sat Dec  8 20:42:33 2007

[root@sushe sysconfig]# ip route
61.50.*.*/28 dev eth1  proto kernel  scope link  src 61.50.139.251
10.8.35.0/24 dev eth0  proto kernel  scope link  src 10.8.35.1
10.8.33.0/24 dev eth0  proto kernel  scope link  src 10.8.33.251
169.254.0.0/16 dev eth1  scope link
default via 61.50.139.241 dev eth1

[root@sushe sysconfig]# ifconfig |more
eth0    Link encap:Ethernet  HWaddr 00:08:74:20:26:91
      inet addr:10.8.33.251  Bcast:10.8.33.255  Mask:255.255.255.0
      inet6 addr: fe80::208:74ff:fe20:2691/64 Scope:Link
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      RX packets:2441 errors:0 dropped:0 overruns:0 frame:0
      TX packets:92 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:100
      RX bytes:222035 (216.8 KiB)  TX bytes:12484 (12.1 KiB)
      Base address:0xe8c0 Memory:ff8c0000-ff8e0000

eth0:0 Link encap:Ethernet  HWaddr 00:08:74:20:26:91
      inet addr:10.8.35.1  Bcast:10.8.33.255  Mask:255.255.255.0
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      Base address:0xe8c0 Memory:ff8c0000-ff8e0000

eth1    Link encap:Ethernet  HWaddr 00:03:10:01:25:07
      inet addr:61.50.*.*  Bcast:61.50.139.255  Mask:255.255.255.240
      inet6 addr: fe80::203:10ff:fe01:2507/64 Scope:Link
      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
      RX packets:3917 errors:0 dropped:0 overruns:0 frame:0
      TX packets:909 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:1000
      RX bytes:340703 (332.7 KiB)  TX bytes:116672 (113.9 KiB)
      Interrupt:20 Base address:0xac00

lo       Link encap:Local Loopback
      inet addr:127.0.0.1  Mask:255.0.0.0
      inet6 addr: ::1/128 Scope:Host
      UP LOOPBACK RUNNING  MTU:16436  Metric:1
      RX packets:8 errors:0 dropped:0 overruns:0 frame:0
      TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:0
      RX bytes:560 (560.0 b)  TX bytes:560 (560.0 b)

[

[root@sushe sysconfig]# route -n
Kernel IP routing table
Destination    Gateway       Genmask       Flags Metric Ref Use Iface
61.50.139.240 0.0.0.0       255.255.255.240 U    0    0       0 eth1
10.8.35.0    0.0.0.0       255.255.255.0 U    0    0       0 eth0
10.8.33.0    0.0.0.0       255.255.255.0 U    0    0       0 eth0
169.254.0.0    0.0.0.0       255.255.0.0    U    0    0       0 eth1
0.0.0.0       61.50.*.241 0.0.0.0       UG 0    0       0 eth1

請(qǐng)幫忙分析,謝謝!

實(shí)戰(zhàn)分享：從技術(shù)角度談機(jī)器學(xué)習(xí)入門| 【大話IT】RadonDB低門檻向MySQL集群下戰(zhàn)書 | ChinaUnix打賞功能已上線！ | 新一代分布式關(guān)系型數(shù)據(jù)庫(kù)RadonDB知多少？

kenduest

榮譽(yù)版主

論壇徽章:: 0

5樓 [報(bào)告]

發(fā)表于 2007-12-08 22:26 |只看該作者

你的 forward chain 跳到 rh 本身的 rule 去了，所以跑你敘述開打開 port 53

我個(gè)人建議你還是養(yǎng)成習(xí)慣先把之前的 rule 清空後才進(jìn)行。清空方式請(qǐng)參考 faq:

Linux iptables firewall 設(shè)定常見 FAQ 整理

http://linux.chinaunix.net/bbs/thread-812400-1-1.html

--

實(shí)戰(zhàn)分享：從技術(shù)角度談機(jī)器學(xué)習(xí)入門| 【大話IT】RadonDB低門檻向MySQL集群下戰(zhàn)書 | ChinaUnix打賞功能已上線！ | 新一代分布式關(guān)系型數(shù)據(jù)庫(kù)RadonDB知多少？

luojm_24680

白手起家

論壇徽章:: 0

6樓 [報(bào)告]

發(fā)表于 2007-12-10 08:17 |只看該作者

我再檢查下,然后做下實(shí)驗(yàn)

實(shí)戰(zhàn)分享：從技術(shù)角度談機(jī)器學(xué)習(xí)入門| 【大話IT】RadonDB低門檻向MySQL集群下戰(zhàn)書 | ChinaUnix打賞功能已上線！ | 新一代分布式關(guān)系型數(shù)據(jù)庫(kù)RadonDB知多少？

luojm_24680

白手起家

論壇徽章:: 0

7樓 [報(bào)告]

發(fā)表于 2007-12-11 11:23 |只看該作者

iptables腳本開機(jī)不能自動(dòng)執(zhí)行:-bash: /etc/sysconfig/iptables: Permission denied

[root@sushe ~]# /etc/sysconfig/iptables
-bash: /etc/sysconfig/iptables: Permission denied

[root@sushe ~]# more /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.

touch /var/lock/subsys/local
ifconfig eth0 add 10.8.35.1 netmask 255.255.255.0

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -F
iptables -X
iptables -F -t nat
iptables -X -t nat
iptables -Z -t nat
#iptables -F -t mangle
#iptables -X -t mangle
#iptables -Z -t mangle

/etc/sysconfig/iptables
[root@sushe ~]#

[root@sushe ~]# more /etc/sysconfig/iptables
# Generated by iptables-save v1.3.8 on Tue Dec 11 10:01:27 2007
*nat

REROUTING ACCEPT [2047:254489]

OSTROUTING ACCEPT [2:127]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -o eth1 -j SNAT --to-source 61.50.*.*
COMMIT
# Completed on Tue Dec 11 10:01:27 2007
# Generated by iptables-save v1.3.8 on Tue Dec 11 10:01:27 2007
*filter
:INPUT ACCEPT [347:59060]
:FORWARD ACCEPT [79:4926]
:OUTPUT ACCEPT [62:10360]
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A INPUT -p esp -j ACCEPT
-A INPUT -p ah -j ACCEPT
-A INPUT -p udp -m udp --dport 631 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
# Completed on Tue Dec 11 10:01:27 2007
[root@sushe ~]#

請(qǐng)幫忙解決,謝謝!