RedHat 7.3을 설치하였으며
ipchains를 제거하고 iptables만 단독 실행하게 했습니다.
80번 포트로 들어오는 것을 80번으로 보내기 위해
/etc/sysconfig/iptables 파일 내용을 다음과 같이 했습니다.
-------------------- iptables
*filter
:INPUT ACCEPT [3082:293909]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [3257:226984]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p udp -m udp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 0:1023 -j DROP
COMMIT
*nat
:PREROUTING ACCEPT [93:15357]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [8:651]
-A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination 웹서
버:80
-A PREROUTING -p tcp -m tcp --dport 25 -j DNAT --to-destination 메일서
버:25
-A PREROUTING -p udp -m udp --dport 25 -j DNAT --to-destination 메일서
버:25
-A POSTROUTING -o eth0 -j MASQUERADE
-A OUTPUT -p tcp -m tcp --dport 80 -j DNAT --to-destination 웹서버:80
-A OUTPUT -p tcp -m tcp --dport 25 -j DNAT --to-destination 메일서버:25
-A OUTPUT -p udp -m udp --dport 25 -j DNAT --to-destination 메일서버:25
COMMIT
-----------------------------------------------------------------------
-----------
이렇게 하고
$ /etc/rc.d/init.d/iptables restart
어찌고 저찌고 [ Ok ]
$ iptables -t NAT -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp
dpt:http to:웹서버:80
DNAT tcp -- anywhere anywhere tcp
dpt:smtp to:메일서버:25
DNAT udp -- anywhere anywhere udp
dpt:smtp to:메일서버:25
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp
dpt:http to:웹서버:80
DNAT tcp -- anywhere anywhere tcp
dpt:smtp to:메일서버:25
DNAT udp -- anywhere anywhere udp
dpt:smtp to:메일서버:25
ㅡ_-);; 이렇게 해놓고...
$ telnet localhost 80 혹은 telnet localhost 25
Trying 127.0.0.1...
ㅡ_-);;;;;;;; 여기서 멈춰버립니다.
왜 그렇죠~~~~~~~~?????????
Always wish be pure well....