Server Guide Documentation
Chinangwa cheP IP Masquerading ndechokubvumira makambani ari oga, asingakwanisi kutarisa maIndaneti pamutambo wako kuti uwane Indaneti kuburikidza nemichina ichikuita. Motokari inobva pamba yako yega yega yeInternet inofanira kushandiswa kuti iite mhinduro kuti igare yakadzoka kumushandi wakaita chikumbiro. Kuti uite izvi, kernel inofanira kugadzirisa iyo pikisi yeIndaneti yepakiti imwe neimwe kuitira kuti mhinduro dzidzoserwezve, kwete kune imwe pamba kero yePI yakaita chikumbiro, chisingabviri paIndaneti. Linux inoshandisa Connection Tracking (conntrack) kuchengeta nhamba yekubatanidza kupi kune mairi emishanditi uye kudzokerazve pakutepa kwepakiti imwe neimwe. Migwagwa inobva pamusangano wako wega wega ndiyo "masqueraded" seyo yakabva kuBuntu yako gateway machine. Iyi nzira inotumidzwa kuMicrosoft zvinyorwa seInternet Connection Sharing.
Mirayiridzo yeP IP Masquerading
Izvi zvinogona kuitika nekutonga kumwe chete kweiptables, iyo inogona kusiyanisa zvishoma zvichienderana neukamani yako yakagadziriswa:
sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADEMurairo wepamusoro unofunga kuti yako yega yekero nzvimbo ndeye 192.168.0.0/16 uye kuti iyo inotarisana neIndaneti iri ppp0. Izwi rechirevo rinoputsika sezvinotevera:
- -ku -no mutemo ndewokupinda muhotera
- -A POSTROUTING - mutemo unofanirwa kuiswa (-A) kuPOSTROUTING chain
- -s 192.168.0.0/16 - mutemo unoshanda kumotokari inobva pane imwe nzvimbo yekero nzvimbo
- -o ppp0 - mutemo unoshanda kumotokari inorongwa kuti iendeswe kuburikidza nemichina yakatarwa yenhare
- -j MASQUERADE - mutengesi unoenderana nemurairo uyu ndeyekuti "svetuka" (-j) ku MASQUERADE chinangwa chekushandiswa sezvinotsanangurwa pamusoro apa
Ngetani imwe neimwe muhwendefa yemafuta (iyo tafura yekutengesa, uye iyo yakawanda kana kuti yose yekusefa kwepaketiti inoitika) ine mitemo yekusagadzikana yokubvuma, asi kana uri kuumba moto unowedzera kunze kwechigadzirwa chemukova, unogona kuisa mazano ku DROP kana DZAI, pane iyo iyo motokari yako yakashata inoda kubvumidzwa kuburikidza neketani YEMWEYO nokuda kwekutonga kwepamusoro kushanda:
sudo iptables -ZVAKAWANDA -i 192.168.0.0/16 -o ppp0 -j BVUMA sudo iptables -ZVAKAITIKA -d 192.168.0.0/16 -m mamiriro ezvinhu - AKASIMBIKA, ANOITA -i ppp0 -j AKABATSIRAMirairo iri pamusoro apa ichabvumira kushamwaridzana kwose kubva kunzvimbo yako yomunzvimbo kuenda kuInternet uye yese inofambidzana neyekubatanidza kudzokera kumashini akavatanga.
* License