>> Read No. 36535 article  
두루넷 머스커레이딩 사용시..

등록 2001-12-05 15:22:00     조회 1
이름 hitman7    

		리눅스와 윈도우환경입니다.
윈도우 클라이언트에서 리눅스 까지는 ping주고 받기가 다 되고요.
리눅스에서 인터넷 환경 까지도 ping이 잘됩니다. 물론 클라이언트한테 주는것도 잘되고요.
 rc.firewall 스크립트는 다음과 같습니다.
고수님들의 답변 부탁드립니다. ^^
 즐 리눅싱 하시길...
 #!/bin/sh
#
#rc.firewall - initial SIMPLE IP Masquerade test for 2.1.x and 2.2.x kernels
#using IPCHAINS
#
#Load all required IP MASQ modules
#
# NOTE:	Only load the IP MASQ modules you need. All current IP MASQ modules
#	are shown below but are commented out from loading.
 #Needed to initially load modules
#
/sbin/depmod -a
#Supports the proper masquerading of FTP file transfers using the PORT method
#
/sbin/modprobe ip_masq_ftp
 #Supports the masquerading of RealAudio over UDP. Without this module,
#RealAudio Will function but in TCP mode. This can cause a reduction
#in sound quality.
/sbin/modprobe ip_masq_raudio
 #Supports the masquerading of IRC DCC file transfers
#
/sbin/modprobe ip_masq_irc
 #Supports the masquerading of Quake and QuakeWorld by default. This modules is
#	for multi users behind the Linux MASQ server. if you are going to play
#	Quake I, II, and III. use the second exsample.
#
#Quake I/ QuakeWorld (port 26000 and 27000)
/sbin/modprobe ip_masq_quake
#
#Quake I/II/III / QuakeWorld (port 26000, 27000, 27910, 27960)
/sbin/modprobe ip_masq_quake port=26000,27000,27910,27960
 #Supports the masquerading of the CuSeeme Video conferencing software
#
/sbin/modprobe ip_masq_cuseeme
 #Supports the masquerading of the VDO-live video conferencing software
#
/sbin/modprobe ip_masq_vdolive
 #CRITICAL:Enable IP forwarding sice it is disable by default since
#	  Redhat user:	you may try changing the option in
#			/etc/sysconfig/network from: FORWARD_IPV4=false to
#						     FORWARD_IPV4=true
#
echo "1" > /proc/sys/net/ipv4/ip_forward
 #Dynamic IP users:
#
#If you get your IP address dynamically from SLIP, PPP, or DHCP enable this
#following option. This enables dynamic-ip address hacking in IP MASQ, making
#the life with Diald and similar programs much easier.
#
echo "1" > /proc/sys/net/ipv4/ip_dynaddr
 #MASQ timeouts
#
#2 hrs timeout for TCP session timeouts
#10 sec timeout for traffic after the TCP/IP "FIN" packet is received
#160 sec timeout for UDP traffic (important for MASQ'ed ICQ users)
/sbin/ipchains -M -S 7200 10 160
 #DHCP:	For people who receive their external IP address from either DHCP or
#	BOOTP such as ADSL or Cablemodem user, it is necessary to use the
#	following befor the deny command. The "boot_client_net_if_name" should
#	be replaced the name of the link that the DHCP/BOOTP server will put an
#	address on to?
#
#	This example is currently commented out.
#
/sbin/ipchains -A input -j ACCEPT -i eth0 -s 0/0 67 -d 0/0 68 -p udp
 #Enable simple IP forwarding and Masquerading
#
#NOTE:	The following is an example for an internal LAN address in the
#	192.168.0.x network with a 255.255.255.0 or a "24" bit subnet mask.
#
#	Please change this network number and subnet mask to match your internal
#	LAN setup
#
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ
 #Enable using soribada
#
echo "masq script succesfully running"
sleep 3
이름
암호
Register [ localhost 목록보기 윗글 아랫글
글쓰기
답장쓰기 수정 삭제
정규표현식 [ 상세 검색 ]
페이지로딩: [ 0.55 초 ] 작업시간: [ 0.04 초 ]

Copyleft 1999-2026 by JSBoard Open Project
Theme Designed by IDOO All right reserved
[TOP]

적수네 동네
+
| 적수네 동네
| 공부방
| 리눅스 잡지 서고
| LSN 소스
| 링크 모음
+---+
게시판
+
| 떠들어보세!
| 질문과 답변
| 새소식과 정보
| 1원짜리 팁?
| 대화방
+---+
칼럼?
+
| 세하 훔쳐보기
| Welcome2nite
| 혜진의 염장판
+---+
리눅스 상표권
+
| 반대 서명란
| 토론 게시판
+---+
GNU
+
| GNU 선언문
| GNU GPL
| GNU 미러 목록
+---+
프로젝트?
+
| 리눅스카운터
| RC5DES
| 실질헌법 제작
+---+
커널 소식
+
| 안정 버젼: 2.4.14
+---+
테마 선택
+
LSN 방송국?
+
| OFF AIR
+---+
회원
+
| 로그인
+---+
[ 적수네 동네 ] [ 리눅스 상표권 독점 반대 ] [ 한글 리눅스 문서 프로젝트 ] [ KrLine ] [ 사랑넷 ] [ Valid HTML 4.0! ] [ SlashDot ] [ Freshmeat ]
Copyleft (C) 1998-2001 Byeong-Chan Kim . License
TIME: 1789489792
System by WYZsoft, HDD by I.O.Linux, Mizi Research, Embryo, WOWLINUX, Domain by SarangNet, Network by KrLine.