 |
 |
 |
 |
|
>> Read No. 57499 article |
|
|
[질문] iptables로 포트포워딩??
|
 |
 |
 |
 |

등록 2002-09-23 09:48:00
조회 4
이름 샘이

|
 |
 |
RedHat 7.3을 설치하였으며
ipchains를 제거하고 iptables만 단독 실행하게 했습니다.
80번 포트로 들어오는 것을 80번으로 보내기 위해
/etc/sysconfig/iptables 파일 내용을 다음과 같이 했습니다.
-------------------- iptables
*filter
:INPUT ACCEPT [3082:293909]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [3257:226984]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p udp -m udp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 0:1023 -j DROP
COMMIT
*nat
:PREROUTING ACCEPT [93:15357]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [8:651]
-A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination 웹서
버:80
-A PREROUTING -p tcp -m tcp --dport 25 -j DNAT --to-destination 메일서
버:25
-A PREROUTING -p udp -m udp --dport 25 -j DNAT --to-destination 메일서
버:25
-A POSTROUTING -o eth0 -j MASQUERADE
-A OUTPUT -p tcp -m tcp --dport 80 -j DNAT --to-destination 웹서버:80
-A OUTPUT -p tcp -m tcp --dport 25 -j DNAT --to-destination 메일서버:25
-A OUTPUT -p udp -m udp --dport 25 -j DNAT --to-destination 메일서버:25
COMMIT
-----------------------------------------------------------------------
-----------
이렇게 하고
$ /etc/rc.d/init.d/iptables restart
어찌고 저찌고 [ Ok ]
$ iptables -t NAT -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp
dpt:http to:웹서버:80
DNAT tcp -- anywhere anywhere tcp
dpt:smtp to:메일서버:25
DNAT udp -- anywhere anywhere udp
dpt:smtp to:메일서버:25
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp
dpt:http to:웹서버:80
DNAT tcp -- anywhere anywhere tcp
dpt:smtp to:메일서버:25
DNAT udp -- anywhere anywhere udp
dpt:smtp to:메일서버:25
ㅡ_-);; 이렇게 해놓고...
$ telnet localhost 80 혹은 telnet localhost 25
Trying 127.0.0.1...
ㅡ_-);;;;;;;; 여기서 멈춰버립니다.
왜 그렇죠~~~~~~~~?????????
Always wish be pure well....
 | |
|
|
|
|
페이지로딩: [ 0.27 초 ]
작업시간: [ 0.02 초 ]
|
|
 |
 |
![[TOP]](/images/color///top.gif) 
|
 |
 |
 |
 |
|
|
Copyleft (C) 1998-2001
Byeong-Chan Kim
. License
|
TIME: 1791173440
|
|
System by WYZsoft, HDD by I.O.Linux, Mizi Research, Embryo, WOWLINUX, Domain by SarangNet, Network by KrLine.
|