Enviado em 27/11/2007 - 08:49h
Estou montando um firewall, mas não consigo obter acesso a internet por meio dele,alguem poderia me ajudar, estes são os códigos que coloquei para testar:
!/bin/bash
route add default gw 192.168.0.91
IF_LAN=eth0
IF_WAN=eth1
IP_LAN=192.168.0.0/24
echo "1" > /proc/sys/net/ipv4/ip_forward
iptables -t nat -F POSTROUTING
iptables -t nat -F PREROUTING
iptables -t nat -F OUTPUT
iptables -F
iptables -Z
iptables -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
iptables -t nat -A POSTROUTING -o ppp+ -j MASQUERADE
iptables -I INPUT -i lo -j ACCEPT
iptables -A INPUT -s $IP_LAN -i $IF_LAN -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
!/bin/bash
route add default gw 192.168.0.91
IF_LAN=eth0
IF_WAN=eth1
IP_LAN=192.168.0.0/24
echo "1" > /proc/sys/net/ipv4/ip_forward
iptables -t nat -F POSTROUTING
iptables -t nat -F PREROUTING
iptables -t nat -F OUTPUT
iptables -F
iptables -Z
iptables -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
iptables -t nat -A POSTROUTING -o ppp+ -j MASQUERADE
iptables -I INPUT -i lo -j ACCEPT
iptables -A INPUT -s $IP_LAN -i $IF_LAN -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT